API tools faq
paste
Guest User

Untitled

a guest
Aug 22nd, 2018
327
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 62.23 KB | None | 0 0
raw download clone embed print report
  1. Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 22.08.2018
  2. Ran by Hakeem (administrator) on HAKEEM-PC (22-08-2018 10:10:05)
  3. Running from C:\Users\Hakeem\Desktop
  4. Loaded Profiles: Hakeem (Available Profiles: Hakeem)
  5. Platform: Microsoft Windows 7 Ultimate Service Pack 1 (X86) Language: English (United States)
  6. Internet Explorer Version 11 (Default browser: Chrome)
  7. Boot Mode: Normal
  8. Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
  9.  
  10. ==================== Processes (Whitelisted) =================
  11.  
  12. (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
  13.  
  14. (Microsoft Corporation) C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
  15. (Smadsoft) C:\Program Files\SMADAV\SMΔRTP.exe
  16. (TeamViewer GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe
  17. (Google Inc.) C:\Program Files\Google\Update\1.3.33.17\GoogleCrashHandler.exe
  18. (Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
  19. (Intel Corporation) C:\Windows\System32\igfxtray.exe
  20. (Intel Corporation) C:\Windows\System32\igfxsrvc.exe
  21. (Intel Corporation) C:\Windows\System32\hkcmd.exe
  22. (Intel Corporation) C:\Windows\System32\igfxpers.exe
  23. (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
  24. (Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe
  25. (BlackBerry Limited) C:\Program Files\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe
  26. (Microsoft @ 2018) C:\Users\Hakeem\Desktop\dollar.exe
  27. (BlackBerry Limited) C:\Program Files\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe
  28. (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
  29. (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
  30. (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
  31. (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
  32. (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
  33. (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
  34. (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
  35. (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
  36. (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
  37. (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
  38. (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
  39. (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
  40. (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
  41. (Microsoft Corporation) C:\Windows\System32\wuauclt.exe
  42. (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
  43. (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
  44. (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
  45. (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
  46. (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
  47. (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
  48. (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
  49. (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
  50. (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
  51. (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
  52. (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
  53. (Farbar) C:\Users\Hakeem\Desktop\FRST(1).exe
  54.  
  55. ==================== Registry (Whitelisted) ===========================
  56.  
  57. (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
  58.  
  59. HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-26] (Microsoft Corporation)
  60. HKLM\...\Run: [HP Software Update] => C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [49208 2010-06-09] (Hewlett-Packard)
  61. HKLM\...\Run: [Microsoft Default Manager] => C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe [439568 2010-05-10] (Microsoft Corporation)
  62. HKLM\...\Run: [RIMBBLaunchAgent.exe] => C:\Program Files\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe [443640 2014-10-31] (BlackBerry Limited)
  63. HKU\S-1-5-21-570141002-2484250258-4068607221-1000\...\Run: [Web Companion] => C:\Program Files\Lavasoft\Web Companion\Application\WebCompanion.exe --minimize
  64. HKU\S-1-5-21-570141002-2484250258-4068607221-1000\...\Run: [BlackBerryLink.exe] => "C:\Program Files\Research In Motion\BlackBerry Link\BlackBerryLink.exe" /minimize
  65. HKU\S-1-5-21-570141002-2484250258-4068607221-1000\...\Run: [Windows 10 Update] => C:\Users\Hakeem\Desktop\dollar.exe [377344 2018-08-19] (Microsoft @ 2018)
  66. HKU\S-1-5-21-570141002-2484250258-4068607221-1000\...\MountPoints2: {af8c746e-8660-11e8-917d-001eec2379f7} - D:\AutoRun.exe
  67. HKU\S-1-5-21-570141002-2484250258-4068607221-1000\...\MountPoints2: {af8c747d-8660-11e8-917d-001eec2379f7} - D:\AutoRun.exe
  68. HKU\S-1-5-21-570141002-2484250258-4068607221-1000\...\MountPoints2: {dd645bfe-1fed-11e8-a2d1-001eec2379f7} - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL D:\Start.exe
  69. HKU\S-1-5-18\...\RunOnce: [SPReview] => "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"hxxp://go.microsoft.com/fwlink/?LinkID=122915" /build:7601
  70. Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk [2017-05-03]
  71. ShortcutTarget: Adobe Gamma Loader.lnk -> C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
  72.  
  73. ==================== Internet (Whitelisted) ====================
  74.  
  75. (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
  76.  
  77. Tcpip\Parameters: [DhcpNameServer] 192.168.176.251 192.168.176.252 192.168.176.253 192.168.176.254
  78. Tcpip\..\Interfaces\{2243CB7C-9F03-4464-81FA-C43989EDA5FB}: [NameServer] 193.138.219.228
  79. Tcpip\..\Interfaces\{2243CB7C-9F03-4464-81FA-C43989EDA5FB}: [DhcpNameServer] 192.168.176.251 192.168.176.252 192.168.176.253 192.168.176.254
  80. Tcpip\..\Interfaces\{60BDDA1B-23B5-4E65-970A-059D32232B45}: [NameServer] 193.138.219.228
  81. Tcpip\..\Interfaces\{60BDDA1B-23B5-4E65-970A-059D32232B45}: [DhcpNameServer] 10.5.0.1
  82. Tcpip\..\Interfaces\{D5495F60-C533-451D-B521-E734479C35DE}: [NameServer] 193.138.219.228
  83.  
  84. Internet Explorer:
  85. ==================
  86. BHO: Search Helper -> {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} -> C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-07-27] (Microsoft Corporation)
  87. BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-26] (Microsoft Corporation)
  88. BHO: Bing Bar BHO -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll [2010-08-24] (Microsoft Corporation)
  89. Toolbar: HKLM - @C:\Program Files\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll [2010-08-24] (Microsoft Corporation)
  90. Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2006-10-26] (Microsoft Corporation)
  91.  
  92. FireFox:
  93. ========
  94. FF DefaultProfile: hjucpyqh.default
  95. FF ProfilePath: C:\Users\Hakeem\AppData\Roaming\Mozilla\Firefox\Profiles\hjucpyqh.default [2018-08-22]
  96. FF NetworkProxy: Mozilla\Firefox\Profiles\hjucpyqh.default -> backup.ftp", "133.18.197.208"
  97. FF Extension: (Windscribe VPN) - C:\Users\Hakeem\AppData\Roaming\Mozilla\Firefox\Profiles\hjucpyqh.default\Extensions\@windscribeff.xpi [2018-08-15]
  98. FF ProfilePath: C:\Users\Hakeem\AppData\Roaming\Comodo\IceDragon\Profiles\grmga28h.default [2017-07-19]
  99. FF HKLM\...\Firefox\Extensions: [{27182e60-b5f3-411c-b545-b44205977502}] - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension
  100. FF Extension: (Search Helper Extension) - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension [2017-05-05] [Legacy] [not signed]
  101. FF HKLM\...\Firefox\Extensions: [{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}] - C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DMExtension
  102. FF Extension: (Default Manager) - C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DMExtension [2017-05-05] [Legacy] [not signed]
  103. FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\4.0.50401.0\npctrl.dll [2010-03-31] ( Microsoft Corporation)
  104. FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-16] (Google Inc.)
  105. FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-16] (Google Inc.)
  106. FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
  107. FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-06-29] (Adobe Systems Inc.)
  108.  
  109. Chrome:
  110. =======
  111. CHR Profile: C:\Users\Hakeem\AppData\Local\Google\Chrome\User Data\Default [2018-08-22]
  112. CHR Extension: (Docs) - C:\Users\Hakeem\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-12]
  113. CHR Extension: (Google Drive) - C:\Users\Hakeem\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-04-12]
  114. CHR Extension: (YouTube) - C:\Users\Hakeem\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-04-12]
  115. CHR Extension: (Google Search) - C:\Users\Hakeem\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2017-04-11]
  116. CHR Extension: (Adobe Acrobat) - C:\Users\Hakeem\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2018-07-30]
  117. CHR Extension: (GMass: Powerful mail merge for Gmail) - C:\Users\Hakeem\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehomdgjhgmbidokdgicgmdiedadncbgf [2017-09-21]
  118. CHR Extension: (Google Docs Offline) - C:\Users\Hakeem\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-08-16]
  119. CHR Extension: (Pinterest Save Button) - C:\Users\Hakeem\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpdjojdkbbmdfjfahjcgigfpmkopogic [2018-07-23]
  120. CHR Extension: (Chrome Web Store Payments) - C:\Users\Hakeem\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-04]
  121. CHR Extension: (Gmail) - C:\Users\Hakeem\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-04-12]
  122. CHR Extension: (Chrome Media Router) - C:\Users\Hakeem\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-08-12]
  123. CHR HKLM\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
  124.  
  125. ==================== Services (Whitelisted) ====================
  126.  
  127. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  128.  
  129. R3 BlackBerry Device Manager; C:\Program Files\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe [588024 2014-10-31] (BlackBerry Limited)
  130. R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4753104 2018-05-09] (Malwarebytes)
  131. R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [10884848 2017-05-23] (TeamViewer GmbH)
  132. R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-26] (Microsoft Corporation)
  133.  
  134. ===================== Drivers (Whitelisted) ======================
  135.  
  136. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  137.  
  138. S3 blackberryncm; C:\Windows\System32\DRIVERS\blackberryncm6.sys [22528 2015-01-23] (BlackBerry Limited)
  139. R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae.sys [128736 2018-04-26] (Malwarebytes)
  140. R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [165088 2018-08-19] (Malwarebytes)
  141. R3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [93920 2018-08-20] (Malwarebytes)
  142. R3 MBAMProtection; C:\Windows\System32\DRIVERS\mbam.sys [40160 2018-08-20] (Malwarebytes)
  143. R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [220896 2018-08-20] (Malwarebytes)
  144. R3 MBAMWebProtection; C:\Windows\System32\DRIVERS\mwac.sys [73336 2018-08-22] (Malwarebytes)
  145. S3 RimUsb; C:\Windows\System32\Drivers\RimUsb.sys [69120 2015-01-14] (BlackBerry Limited)
  146. S3 rimvndis; C:\Windows\System32\Drivers\rimvndis6.sys [14336 2014-06-23] (Research in Motion Limited)
  147. R3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [35288 2017-05-13] (The OpenVPN Project)
  148. U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [24688 2018-08-19] ()
  149. S3 usbrndis6; C:\Windows\System32\DRIVERS\usb80236.sys [15872 2013-02-11] (Microsoft Corporation)
  150. S3 wdm_usb; C:\Windows\System32\DRIVERS\usb2ser.sys [128704 2016-08-15] (MBB)
  151. S3 ewusbmbb; system32\DRIVERS\ewusbwwan.sys [X]
  152. S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X]
  153. S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
  154. S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
  155. S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
  156. S3 VGPU; System32\drivers\rdvgkmd.sys [X]
  157. U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [48128 2009-07-13] (Microsoft Corporation)
  158.  
  159. ==================== NetSvcs (Whitelisted) ===================
  160.  
  161. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  162.  
  163.  
  164. ==================== One Month Created files and folders ========
  165.  
  166. (If an entry is included in the fixlist, the file/folder will be moved.)
  167.  
  168. 2018-08-22 10:10 - 2018-08-22 10:11 - 000013854 _____ C:\Users\Hakeem\Desktop\FRST.txt
  169. 2018-08-22 10:09 - 2018-08-22 10:09 - 000000000 ____D C:\Users\Hakeem\Desktop\FRST-OlderVersion
  170. 2018-08-22 08:34 - 2018-08-22 08:45 - 000000215 _____ C:\Users\Hakeem\Desktop\meat.txt
  171. 2018-08-19 19:10 - 2018-08-19 19:10 - 000377344 ____H (Microsoft @ 2018) C:\Users\Hakeem\Desktop\dollar.exe
  172. 2018-08-19 17:04 - 2018-08-22 05:40 - 000073336 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
  173. 2018-08-19 17:04 - 2018-08-20 11:14 - 000220896 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
  174. 2018-08-19 17:04 - 2018-08-20 11:14 - 000093920 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
  175. 2018-08-19 17:04 - 2018-08-20 11:14 - 000040160 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
  176. 2018-08-19 17:04 - 2018-08-19 17:04 - 000165088 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys
  177. 2018-08-19 11:45 - 2018-08-19 11:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
  178. 2018-08-19 11:14 - 2018-08-19 11:14 - 000359424 ____H (Microsoft @ 2018) C:\Users\Hakeem\Desktop\money.exe
  179. 2018-08-19 11:04 - 2017-08-15 23:33 - 000009216 _____ () C:\Users\Hakeem\Desktop\Cure Tool.exe
  180. 2018-08-19 10:47 - 2018-08-19 10:48 - 000366080 ____H (Microsoft @ 2018) C:\Users\Hakeem\Desktop\doctor.exe
  181. 2018-08-19 10:46 - 2018-08-19 10:46 - 000358912 ____H (Microsoft @ 2018) C:\Users\Hakeem\Desktop\keemodas.exe
  182. 2018-08-19 10:42 - 2018-08-19 10:42 - 000363008 ____H (Microsoft @ 2018) C:\Users\Hakeem\Desktop\paymentslip.exe
  183. 2018-08-19 08:12 - 2018-08-19 08:12 - 000368128 ____H (Microsoft @ 2018) C:\Users\Hakeem\Desktop\aibaba.exe
  184. 2018-08-19 08:05 - 2018-08-19 08:05 - 000360960 ____H (Microsoft @ 2018) C:\Users\Hakeem\Desktop\invoice.exe
  185. 2018-08-19 07:44 - 2018-08-19 07:44 - 000323072 ____H (Microsoft @ 2018) C:\Users\Hakeem\Desktop\essien.exe
  186. 2018-08-19 07:35 - 2018-08-19 07:34 - 000024395 _____ C:\Users\Hakeem\Desktop\Ond+Logger+-+Licensed.lnk
  187. 2018-08-19 02:51 - 2018-08-19 02:52 - 000921574 _____ C:\Users\Hakeem\Downloads\Ond+Logger+-+Licensed (2).rar
  188. 2018-08-19 02:51 - 2018-08-19 02:51 - 000921574 _____ C:\Users\Hakeem\Downloads\Ond+Logger+-+Licensed (1).rar
  189. 2018-08-19 02:50 - 2018-08-19 19:14 - 001160017 _____ C:\Users\Hakeem\Downloads\Ond+Logger+-+Licensed.rar
  190. 2018-08-19 02:49 - 2018-08-19 02:49 - 000000149 _____ C:\Users\Hakeem\Desktop\ayi.txt
  191. 2018-08-15 10:08 - 2018-08-15 10:08 - 000000477 _____ C:\Users\Hakeem\Desktop\temitope.txt
  192. 2018-08-15 01:19 - 2018-08-03 03:39 - 000084992 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll
  193. 2018-08-15 01:19 - 2018-08-01 14:45 - 004054192 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
  194. 2018-08-15 01:19 - 2018-08-01 14:45 - 003959984 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
  195. 2018-08-15 01:19 - 2018-08-01 14:45 - 000189616 _____ (Microsoft Corporation) C:\Windows\system32\halmacpi.dll
  196. 2018-08-15 01:19 - 2018-08-01 14:45 - 000189616 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
  197. 2018-08-15 01:19 - 2018-08-01 14:45 - 000136368 _____ (Microsoft Corporation) C:\Windows\system32\halacpi.dll
  198. 2018-08-15 01:19 - 2018-08-01 14:44 - 000137904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
  199. 2018-08-15 01:19 - 2018-08-01 14:44 - 000067248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
  200. 2018-08-15 01:19 - 2018-08-01 14:43 - 001310464 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
  201. 2018-08-15 01:19 - 2018-08-01 14:41 - 001063424 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
  202. 2018-08-15 01:19 - 2018-08-01 14:41 - 000655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
  203. 2018-08-15 01:19 - 2018-08-01 14:41 - 000554496 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
  204. 2018-08-15 01:19 - 2018-08-01 14:41 - 000400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
  205. 2018-08-15 01:19 - 2018-08-01 14:41 - 000261120 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
  206. 2018-08-15 01:19 - 2018-08-01 14:41 - 000254464 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
  207. 2018-08-15 01:19 - 2018-08-01 14:41 - 000223232 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
  208. 2018-08-15 01:19 - 2018-08-01 14:41 - 000172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
  209. 2018-08-15 01:19 - 2018-08-01 14:41 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
  210. 2018-08-15 01:19 - 2018-08-01 14:41 - 000141312 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
  211. 2018-08-15 01:19 - 2018-08-01 14:41 - 000099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
  212. 2018-08-15 01:19 - 2018-08-01 14:41 - 000070144 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
  213. 2018-08-15 01:19 - 2018-08-01 14:41 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
  214. 2018-08-15 01:19 - 2018-08-01 14:41 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
  215. 2018-08-15 01:19 - 2018-08-01 14:41 - 000043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
  216. 2018-08-15 01:19 - 2018-08-01 14:41 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
  217. 2018-08-15 01:19 - 2018-08-01 14:40 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
  218. 2018-08-15 01:19 - 2018-08-01 14:40 - 000644096 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
  219. 2018-08-15 01:19 - 2018-08-01 14:40 - 000082432 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
  220. 2018-08-15 01:19 - 2018-08-01 14:40 - 000050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
  221. 2018-08-15 01:19 - 2018-08-01 14:40 - 000038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
  222. 2018-08-15 01:19 - 2018-08-01 14:40 - 000017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
  223. 2018-08-15 01:19 - 2018-08-01 14:40 - 000007168 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
  224. 2018-08-15 01:19 - 2018-08-01 14:16 - 000097792 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
  225. 2018-08-15 01:19 - 2018-08-01 14:16 - 000050688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
  226. 2018-08-15 01:19 - 2018-08-01 14:16 - 000050688 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
  227. 2018-08-15 01:19 - 2018-08-01 14:16 - 000029696 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
  228. 2018-08-15 01:19 - 2018-08-01 14:16 - 000016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
  229. 2018-08-15 01:19 - 2018-08-01 14:14 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\videoprt.sys
  230. 2018-08-15 01:19 - 2018-08-01 14:13 - 000262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
  231. 2018-08-15 01:19 - 2018-08-01 14:11 - 000226304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
  232. 2018-08-15 01:19 - 2018-08-01 14:11 - 000124928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
  233. 2018-08-15 01:19 - 2018-08-01 14:11 - 000098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
  234. 2018-08-15 01:19 - 2018-08-01 14:10 - 000069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
  235. 2018-08-15 01:19 - 2018-08-01 14:10 - 000055296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\amdk8.sys
  236. 2018-08-15 01:19 - 2018-08-01 14:10 - 000053760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelppm.sys
  237. 2018-08-15 01:19 - 2018-08-01 14:10 - 000053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\viac7.sys
  238. 2018-08-15 01:19 - 2018-08-01 14:10 - 000052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\amdppm.sys
  239. 2018-08-15 01:19 - 2018-08-01 14:10 - 000052224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\processr.sys
  240. 2018-08-15 01:19 - 2018-08-01 14:10 - 000036352 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
  241. 2018-08-15 01:19 - 2018-08-01 14:10 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
  242. 2018-08-15 01:19 - 2018-08-01 14:10 - 000015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
  243. 2018-08-15 01:19 - 2018-07-19 10:58 - 000350272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
  244. 2018-08-15 01:19 - 2018-07-18 16:22 - 020286464 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
  245. 2018-08-15 01:19 - 2018-07-18 16:16 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
  246. 2018-08-15 01:19 - 2018-07-18 16:16 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
  247. 2018-08-15 01:19 - 2018-07-18 16:05 - 000497664 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
  248. 2018-08-15 01:19 - 2018-07-18 16:04 - 000341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
  249. 2018-08-15 01:19 - 2018-07-18 16:04 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
  250. 2018-08-15 01:19 - 2018-07-18 16:04 - 000047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
  251. 2018-08-15 01:19 - 2018-07-18 16:03 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
  252. 2018-08-15 01:19 - 2018-07-18 16:01 - 002295808 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
  253. 2018-08-15 01:19 - 2018-07-18 15:58 - 000047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
  254. 2018-08-15 01:19 - 2018-07-18 15:57 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
  255. 2018-08-15 01:19 - 2018-07-18 15:56 - 000476160 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
  256. 2018-08-15 01:19 - 2018-07-18 15:55 - 000662016 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
  257. 2018-08-15 01:19 - 2018-07-18 15:55 - 000115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
  258. 2018-08-15 01:19 - 2018-07-18 15:55 - 000104960 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
  259. 2018-08-15 01:19 - 2018-07-18 15:54 - 000620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
  260. 2018-08-15 01:19 - 2018-07-18 15:49 - 000668160 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
  261. 2018-08-15 01:19 - 2018-07-18 15:46 - 000416256 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
  262. 2018-08-15 01:19 - 2018-07-18 15:42 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
  263. 2018-08-15 01:19 - 2018-07-18 15:41 - 000091136 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
  264. 2018-08-15 01:19 - 2018-07-18 15:41 - 000073216 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
  265. 2018-08-15 01:19 - 2018-07-18 15:39 - 000168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
  266. 2018-08-15 01:19 - 2018-07-18 15:38 - 000076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
  267. 2018-08-15 01:19 - 2018-07-18 15:37 - 000279040 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
  268. 2018-08-15 01:19 - 2018-07-18 15:35 - 000130048 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
  269. 2018-08-15 01:19 - 2018-07-18 15:32 - 004494848 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
  270. 2018-08-15 01:19 - 2018-07-18 15:30 - 000230400 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
  271. 2018-08-15 01:19 - 2018-07-18 15:28 - 013679616 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
  272. 2018-08-15 01:19 - 2018-07-18 15:28 - 002059776 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
  273. 2018-08-15 01:19 - 2018-07-18 15:28 - 000696320 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
  274. 2018-08-15 01:19 - 2018-07-18 15:28 - 000692224 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
  275. 2018-08-15 01:19 - 2018-07-18 15:27 - 001155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
  276. 2018-08-15 01:19 - 2018-07-18 15:09 - 004037632 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
  277. 2018-08-15 01:19 - 2018-07-18 15:06 - 001329152 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
  278. 2018-08-15 01:19 - 2018-07-18 15:04 - 000710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
  279. 2018-08-15 01:19 - 2018-07-13 07:07 - 001309888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
  280. 2018-08-15 01:19 - 2018-07-13 07:06 - 000240832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
  281. 2018-08-15 01:19 - 2018-07-13 07:06 - 000187584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
  282. 2018-08-15 01:19 - 2018-07-08 03:47 - 000309440 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
  283. 2018-08-15 01:19 - 2018-07-08 03:42 - 000111616 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
  284. 2018-08-15 01:19 - 2018-07-08 03:41 - 000071680 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
  285. 2018-08-15 01:19 - 2018-07-08 03:41 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
  286. 2018-08-15 01:19 - 2018-07-08 03:41 - 000010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
  287. 2018-08-15 01:19 - 2018-07-08 03:13 - 000034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
  288. 2018-08-15 01:19 - 2018-07-07 03:19 - 002404352 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
  289. 2018-08-15 01:19 - 2018-07-06 03:54 - 000713408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
  290. 2018-08-15 01:19 - 2018-07-06 03:48 - 000043008 _____ (Microsoft Corporation) C:\Windows\system32\mf3216.dll
  291. 2018-08-15 01:19 - 2018-07-06 03:48 - 000004608 _____ (Microsoft Corporation) C:\Windows\system32\msimg32.dll
  292. 2018-08-15 01:19 - 2018-06-29 03:40 - 000549376 _____ (Microsoft Corporation) C:\Windows\system32\cscsvc.dll
  293. 2018-08-15 01:19 - 2018-06-29 03:40 - 000109568 _____ (Microsoft Corporation) C:\Windows\system32\CscMig.dll
  294. 2018-08-15 01:19 - 2018-06-29 03:40 - 000023040 _____ (Microsoft Corporation) C:\Windows\system32\cscdll.dll
  295. 2018-08-15 01:19 - 2018-06-29 03:10 - 000389632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\csc.sys
  296. 2018-08-15 01:19 - 2018-06-29 03:09 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\cscapi.dll
  297. 2018-08-15 01:19 - 2018-06-27 03:50 - 000105152 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
  298. 2018-08-15 01:19 - 2018-06-27 03:43 - 000363520 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
  299. 2018-08-15 01:19 - 2018-06-27 03:42 - 002366464 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
  300. 2018-08-15 01:19 - 2018-06-27 03:42 - 000337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
  301. 2018-08-15 01:19 - 2018-06-27 03:42 - 000025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
  302. 2018-08-15 01:19 - 2018-06-27 03:41 - 001806848 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
  303. 2018-08-15 01:19 - 2018-06-27 03:41 - 000047104 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
  304. 2018-08-15 01:19 - 2018-06-27 03:16 - 000073216 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
  305. 2018-08-15 01:19 - 2018-06-20 15:09 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
  306. 2018-08-12 10:37 - 2018-08-19 10:44 - 000000131 _____ C:\Users\Hakeem\Desktop\iron.txt
  307. 2018-08-12 07:02 - 2018-08-12 07:02 - 000000000 ____D C:\Users\Hakeem\Documents\ONE YEAR
  308. 2018-08-12 06:48 - 2018-08-12 06:48 - 000000000 ____D C:\Users\Hakeem\Desktop\ONE YEAR
  309. 2018-08-11 06:44 - 2018-08-11 06:44 - 000135475 _____ C:\Users\Hakeem\Downloads\_ibank3_IB_FX_Request_files_IBRecpt-2262760-2316941141590_13Aug2018_11082018.pdf
  310. 2018-08-11 06:44 - 2018-08-11 06:44 - 000135475 _____ C:\Users\Hakeem\Downloads\_ibank3_IB_FX_Request_files_IBRecpt-2262760-2316941141590_13Aug2018_11082018 (1).pdf
  311. 2018-08-04 18:13 - 2018-08-04 18:13 - 245603420 _____ C:\Windows\MEMORY.DMP
  312. 2018-08-04 18:13 - 2018-08-04 18:13 - 000145088 _____ C:\Windows\Minidump\080418-18766-01.dmp
  313. 2018-07-30 08:17 - 2018-07-30 08:17 - 000000000 ____D C:\Users\Hakeem\AppData\Local\CEF
  314. 2018-07-30 08:13 - 2018-07-30 20:37 - 000000000 ____D C:\Users\Hakeem\Desktop\bb3
  315. 2018-07-30 07:58 - 2018-07-30 08:13 - 112600725 _____ C:\Users\Hakeem\Downloads\bb3.zip
  316. 2018-07-26 00:42 - 2018-07-26 00:42 - 002985948 _____ C:\Users\Hakeem\Desktop\xx.zip
  317. 2018-07-26 00:42 - 2017-06-08 02:06 - 000000000 ____D C:\Users\Hakeem\Desktop\xx
  318. 2018-07-24 10:00 - 2018-07-24 10:00 - 001844380 _____ C:\Users\Hakeem\Desktop\FTransfer28P.zip
  319. 2018-07-24 09:38 - 2017-02-16 15:40 - 000000000 ____D C:\Users\Hakeem\Desktop\FTransfer28P
  320. 2018-07-24 09:37 - 2018-07-24 09:37 - 000001716 _____ C:\Users\Hakeem\Desktop\fdf.html
  321. 2018-07-24 09:31 - 2018-07-24 09:32 - 001850518 _____ C:\Users\Hakeem\Downloads\Document_2018update (1).zip
  322. 2018-07-24 04:33 - 2012-09-02 10:23 - 000000000 ____D C:\Users\Hakeem\Desktop\boa
  323. 2018-07-24 04:28 - 2018-07-24 04:28 - 000001355 _____ C:\Users\Hakeem\AppData\LocalLow\wbkD8.tmp
  324. 2018-07-23 18:52 - 2018-08-06 09:55 - 000000139 _____ C:\Users\Hakeem\Desktop\yakubu.txt
  325. 2018-07-23 05:28 - 2018-08-07 01:31 - 000000645 _____ C:\Users\Hakeem\Desktop\albeto.txt
  326. 2018-07-23 04:52 - 2018-07-23 04:55 - 000046647 _____ C:\Users\Hakeem\Desktop\00.zip
  327. 2018-07-23 04:51 - 2018-07-23 04:51 - 000000000 ____D C:\Users\Hakeem\Desktop\00
  328. 2018-07-23 04:50 - 2018-07-23 04:50 - 000046665 _____ C:\Users\Hakeem\Downloads\00.zip
  329.  
  330. ==================== One Month Modified files and folders ========
  331.  
  332. (If an entry is included in the fixlist, the file/folder will be moved.)
  333.  
  334. 2018-08-22 10:10 - 2017-07-18 17:06 - 000000000 ____D C:\FRST
  335. 2018-08-22 10:09 - 2017-07-19 08:24 - 001773568 _____ (Farbar) C:\Users\Hakeem\Desktop\FRST(1).exe
  336. 2018-08-22 05:42 - 2009-07-13 16:34 - 000016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  337. 2018-08-22 05:42 - 2009-07-13 16:34 - 000016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  338. 2018-08-20 11:14 - 2017-05-25 08:39 - 000000000 ____D C:\Users\Hakeem\AppData\LocalLow\Mozilla
  339. 2018-08-20 11:13 - 2009-07-13 16:53 - 000000006 ____H C:\Windows\Tasks\SA.DAT
  340. 2018-08-19 19:05 - 2017-07-20 00:44 - 000024688 _____ C:\Windows\system32\Drivers\TrueSight.sys
  341. 2018-08-19 11:45 - 2018-05-09 11:05 - 000001980 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
  342. 2018-08-19 09:16 - 2009-07-13 14:37 - 000000000 ____D C:\Windows\rescache
  343. 2018-08-18 03:20 - 2018-07-09 05:48 - 000001632 _____ C:\Users\Hakeem\Desktop\doctor.txt
  344. 2018-08-16 11:15 - 2017-04-11 08:27 - 000781790 _____ C:\Windows\system32\PerfStringBackup.INI
  345. 2018-08-16 11:15 - 2009-07-13 14:37 - 000000000 ____D C:\Windows\inf
  346. 2018-08-15 10:19 - 2018-01-04 19:42 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
  347. 2018-08-15 03:30 - 2017-05-24 09:42 - 000000000 ____D C:\Users\Hakeem\AppData\Local\CrashDumps
  348. 2018-08-15 03:28 - 2009-07-13 16:33 - 000411680 _____ C:\Windows\system32\FNTCACHE.DAT
  349. 2018-08-12 06:58 - 2017-05-25 06:07 - 000000000 ____D C:\Program Files\Mozilla Firefox
  350. 2018-08-12 06:58 - 2017-04-11 08:47 - 000000000 ____D C:\Program Files\Mozilla Maintenance Service
  351. 2018-08-09 21:14 - 2017-12-13 04:00 - 000002130 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
  352. 2018-08-09 21:14 - 2017-12-13 04:00 - 000002089 _____ C:\Users\Public\Desktop\Google Chrome.lnk
  353. 2018-08-08 21:35 - 2017-05-29 09:13 - 000000000 ____D C:\Users\Hakeem\AppData\Roaming\.purple
  354. 2018-08-04 18:13 - 2017-04-12 17:42 - 000000000 ____D C:\Windows\Minidump
  355. 2018-08-02 01:50 - 2017-05-16 00:11 - 000002010 ____H C:\Users\Hakeem\Documents\Default.rdp
  356. 2018-08-01 11:56 - 2018-07-15 03:02 - 000000915 _____ C:\Users\Hakeem\Desktop\askari.txt
  357. 2018-07-30 08:17 - 2017-04-12 04:04 - 000000000 ____D C:\Users\Hakeem\AppData\Local\Adobe
  358. 2018-07-29 09:42 - 2017-11-06 19:01 - 000000000 ____D C:\Users\Hakeem\AppData\Local\gtk-2.0
  359.  
  360. ==================== Files in the root of some directories =======
  361.  
  362. 2018-01-18 02:32 - 2018-01-18 02:32 - 081366754 __RSH () C:\Users\Hakeem\AppData\Roaming\eefdNLJHnJ.exe
  363. 2018-03-18 20:31 - 2018-03-18 20:31 - 098839138 __RSH () C:\Users\Hakeem\AppData\Roaming\eepnXVTRxT.exe
  364. 2017-12-19 10:42 - 2018-07-09 07:00 - 000270848 _____ () C:\Users\Hakeem\AppData\Roaming\Ranger.BrowserLogging.dll
  365. 2017-12-19 10:42 - 2018-07-09 07:00 - 000202240 _____ () C:\Users\Hakeem\AppData\Roaming\ranger.browserlogging.vault.dll
  366. 2018-01-24 23:08 - 2018-06-30 02:03 - 000000600 _____ () C:\Users\Hakeem\AppData\Local\PUTTY.RND
  367.  
  368. Some files in TEMP:
  369. ====================
  370. 2018-01-31 19:44 - 2018-01-31 19:44 - 000229376 _____ () C:\Users\Hakeem\AppData\Local\Temp\aesew.exe
  371. 2018-02-13 09:35 - 2018-02-13 09:35 - 000229376 _____ () C:\Users\Hakeem\AppData\Local\Temp\agsks.exe
  372. 2018-08-19 10:43 - 2018-08-19 10:43 - 000007680 ____H () C:\Users\Hakeem\AppData\Local\Temp\bfsvc.exe
  373. 2018-03-04 08:53 - 2015-04-01 06:42 - 073521000 ____R (Research In Motion Ltd. ) C:\Users\Hakeem\AppData\Local\Temp\BlackBerryDeviceManager.exe
  374. 2015-04-01 06:42 - 2015-04-01 06:42 - 002423032 ____R () C:\Users\Hakeem\AppData\Local\Temp\BlackBerryLauncher.exe
  375. 2018-02-05 18:33 - 2018-02-05 18:33 - 000229376 _____ () C:\Users\Hakeem\AppData\Local\Temp\bolhz.exe
  376. 2018-02-14 07:02 - 2018-02-14 07:02 - 000229376 _____ () C:\Users\Hakeem\AppData\Local\Temp\btayl.exe
  377. 2018-01-18 02:32 - 2018-01-11 04:22 - 000805376 _____ (Microsoft Corporation) C:\Users\Hakeem\AppData\Local\Temp\cdo2249078341.dll
  378. 2017-12-19 09:18 - 2018-08-01 14:43 - 001310464 _____ (Microsoft Corporation) C:\Users\Hakeem\AppData\Local\Temp\dllnt_dump.dll
  379. 2018-07-09 06:53 - 2018-07-09 06:53 - 000079872 ____H (Microsoft @ 2015) C:\Users\Hakeem\AppData\Local\Temp\DroppedFile2wdwerfghww543628hakeem.exe
  380. 2018-07-01 19:19 - 2018-07-01 19:19 - 000070144 _____ (Microsoft @ 2015) C:\Users\Hakeem\AppData\Local\Temp\DroppedFile2wdwerfghww543635odion stub.exe
  381. 2018-07-09 06:57 - 2018-07-09 06:57 - 000079872 ____H (Microsoft @ 2015) C:\Users\Hakeem\AppData\Local\Temp\DroppedFile2wdwerfghww543800hakeem.exe
  382. 2018-07-01 19:19 - 2018-07-01 19:19 - 000070144 ____H (Microsoft @ 2015) C:\Users\Hakeem\AppData\Local\Temp\DroppedFile2wdwerfghww543888odion stub.exe
  383. 2018-02-25 04:07 - 2018-02-25 04:07 - 000229376 _____ () C:\Users\Hakeem\AppData\Local\Temp\emutd.exe
  384. 2018-01-24 19:39 - 2018-01-24 19:39 - 000229376 _____ () C:\Users\Hakeem\AppData\Local\Temp\fxsss.exe
  385. 2018-02-06 06:07 - 2018-02-06 06:07 - 000229376 _____ () C:\Users\Hakeem\AppData\Local\Temp\hbkfj.exe
  386. 2018-02-17 21:08 - 2018-02-17 21:08 - 000229376 _____ () C:\Users\Hakeem\AppData\Local\Temp\hcneg.exe
  387. 2018-02-03 07:41 - 2018-02-03 07:41 - 000229376 _____ () C:\Users\Hakeem\AppData\Local\Temp\iqoqw.exe
  388. 2018-01-31 08:48 - 2018-01-31 08:48 - 000229376 _____ () C:\Users\Hakeem\AppData\Local\Temp\itewo.exe
  389. 2018-02-07 10:46 - 2018-02-07 10:46 - 000229376 _____ () C:\Users\Hakeem\AppData\Local\Temp\jdczd.exe
  390. 2018-02-14 03:38 - 2018-02-14 03:38 - 000229376 _____ () C:\Users\Hakeem\AppData\Local\Temp\jrahy.exe
  391. 2018-01-23 19:58 - 2018-01-23 19:58 - 000229376 _____ () C:\Users\Hakeem\AppData\Local\Temp\jvxpy.exe
  392. 2018-01-24 01:45 - 2018-01-24 01:45 - 000229376 _____ () C:\Users\Hakeem\AppData\Local\Temp\kpqrg.exe
  393. 2018-02-14 18:51 - 2018-02-14 18:51 - 000229376 _____ () C:\Users\Hakeem\AppData\Local\Temp\ldvuc.exe
  394. 2018-02-09 20:38 - 2018-02-09 20:38 - 000229376 _____ () C:\Users\Hakeem\AppData\Local\Temp\mndgy.exe
  395. 2018-01-30 21:22 - 2018-01-30 21:22 - 000229376 _____ () C:\Users\Hakeem\AppData\Local\Temp\mqgem.exe
  396. 2018-02-20 19:50 - 2018-02-20 19:50 - 000229376 _____ () C:\Users\Hakeem\AppData\Local\Temp\muavj.exe
  397. 2018-02-19 11:17 - 2018-02-19 11:17 - 000229376 _____ () C:\Users\Hakeem\AppData\Local\Temp\okeic.exe
  398. 2018-01-21 19:48 - 2018-01-21 19:48 - 000229376 _____ () C:\Users\Hakeem\AppData\Local\Temp\omiwu.exe
  399. 2018-02-24 23:02 - 2018-02-24 23:02 - 000229376 _____ () C:\Users\Hakeem\AppData\Local\Temp\scqca.exe
  400. 2018-02-13 05:39 - 2018-02-13 05:39 - 000229376 _____ () C:\Users\Hakeem\AppData\Local\Temp\ssmye.exe
  401. 2018-02-20 11:16 - 2018-02-20 11:16 - 000229376 _____ () C:\Users\Hakeem\AppData\Local\Temp\wbyty.exe
  402. 2018-02-25 19:57 - 2018-02-25 19:57 - 000229376 _____ () C:\Users\Hakeem\AppData\Local\Temp\wmuga.exe
  403. 2018-02-02 20:00 - 2018-02-02 20:00 - 000229376 _____ () C:\Users\Hakeem\AppData\Local\Temp\yctqe.exe
  404.  
  405. ==================== Bamital & volsnap ======================
  406.  
  407. (There is no automatic fix for files that do not pass verification.)
  408.  
  409. C:\Windows\explorer.exe => File is digitally signed
  410. C:\Windows\system32\winlogon.exe => File is digitally signed
  411. C:\Windows\system32\wininit.exe => File is digitally signed
  412. C:\Windows\system32\svchost.exe => File is digitally signed
  413. C:\Windows\system32\services.exe => File is digitally signed
  414. C:\Windows\system32\User32.dll => File is digitally signed
  415. C:\Windows\system32\userinit.exe => File is digitally signed
  416. C:\Windows\system32\rpcss.dll => File is digitally signed
  417. C:\Windows\system32\dnsapi.dll => File is digitally signed
  418. C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
  419.  
  420. LastRegBack: 2018-08-16 20:39
  421.  
  422. ==================== End of FRST.txt ============================
  423.  
  424.  
  425.  
  426.  
  427.  
  428.  
  429.  
  430.  
  431.  
  432.  
  433.  
  434.  
  435.  
  436.  
  437.  
  438.  
  439.  
  440.  
  441. Additional scan result of Farbar Recovery Scan Tool (x86) Version: 22.08.2018
  442. Ran by Hakeem (22-08-2018 10:11:53)
  443. Running from C:\Users\Hakeem\Desktop
  444. Microsoft Windows 7 Ultimate Service Pack 1 (X86) (2017-04-11 20:21:41)
  445. Boot Mode: Normal
  446. ==========================================================
  447.  
  448.  
  449. ==================== Accounts: =============================
  450.  
  451. Administrator (S-1-5-21-570141002-2484250258-4068607221-500 - Administrator - Disabled)
  452. Guest (S-1-5-21-570141002-2484250258-4068607221-501 - Limited - Disabled)
  453. Hakeem (S-1-5-21-570141002-2484250258-4068607221-1000 - Administrator - Enabled) => C:\Users\Hakeem
  454. HomeGroupUser$ (S-1-5-21-570141002-2484250258-4068607221-1002 - Limited - Enabled)
  455.  
  456. ==================== Security Center ========================
  457.  
  458. (If an entry is included in the fixlist, it will be removed.)
  459.  
  460. AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
  461. AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
  462. AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
  463.  
  464. ==================== Installed Programs ======================
  465.  
  466. (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
  467.  
  468. 7capture 1.2.0.21 (HKLM\...\7capture_is1) (Version: 1.2.0.21 - IBE Software)
  469. Adobe Acrobat Reader DC (HKLM\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 18.011.20058 - Adobe Systems Incorporated)
  470. Adobe Photoshop 7.0 (HKLM\...\Adobe Photoshop 7.0) (Version: 7.0 - Adobe Systems, Inc.)
  471. Advanced Mass Sender 4.3 (HKLM\...\Advanced Mass Sender 4.3) (Version: - )
  472. Bing Bar Platform (HKLM\...\{623B8278-8CAD-45C1-B844-58B687C07805}) (Version: 6.3.2291.0 - Microsoft Corporation) Hidden
  473. Bing Rewards Client Installer (HKLM\...\{61EDBE71-5D3E-4AB7-AD95-E53FEAF68C17}) (Version: 16.0.345.0 - Microsoft Corporation) Hidden
  474. BlackBerry Device Manager 8.0 (HKLM\...\{35724492-A89F-40BD-9CB0-51C3FFDE9035}) (Version: 8.0.0.133 - Research In Motion Ltd.) Hidden
  475. BlackBerry Device Manager 8.0 (HKLM\...\BlackBerry_HandheldManager) (Version: 8.0.0.133 - Research In Motion Ltd.)
  476. Coupon Printer for Windows (HKLM\...\Coupon Printer for Windows5.0.0.0) (Version: 5.0.0.0 - Coupons.com Incorporated)
  477. FileZilla Client 3.27.0.1 (HKLM\...\FileZilla Client) (Version: 3.27.0.1 - Tim Kosse)
  478. Google Chrome (HKLM\...\Google Chrome) (Version: 68.0.3440.106 - Google Inc.)
  479. Google Update Helper (HKLM\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden
  480. HP Deskjet 2050 J510 series Basic Device Software (HKLM\...\{E654D1E3-B18B-4953-BFBC-F16227323E05}) (Version: 22.50.231.0 - Hewlett-Packard Co.)
  481. HP Deskjet 2050 J510 series Help (HKLM\...\{7A3DF2E2-CF13-44FB-A93E-F71D5381DB3F}) (Version: 140.0.61.61 - Hewlett Packard)
  482. HP Photo Creations (HKLM\...\HP Photo Creations) (Version: 1.0.0.3781 - HP Photo Creations Powered by RocketLife)
  483. HP Update (HKLM\...\{B0069CFA-5BB9-4C03-B1C6-89CE290E5AFE}) (Version: 5.002.006.003 - Hewlett-Packard)
  484. Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.15.10.1930 - Intel Corporation)
  485. join.me (HKU\S-1-5-21-570141002-2484250258-4068607221-1000\...\JoinMe) (Version: 3.3.1.5358 - LogMeIn, Inc.)
  486. Malwarebytes version 3.5.1.2522 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.5.1.2522 - Malwarebytes)
  487. Microsoft .NET Framework 4.7.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.03062 - Microsoft Corporation)
  488. Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
  489. Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 4.0.50401.0 - Microsoft Corporation)
  490. Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
  491. Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
  492. Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
  493. Mozilla Firefox 61.0.2 (x86 en-US) (HKLM\...\Mozilla Firefox 61.0.2 (x86 en-US)) (Version: 61.0.2 - Mozilla)
  494. Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 61.0.2.6793 - Mozilla)
  495. Mozilla Thunderbird 17.0.8 (x86 en-US) (HKLM\...\Mozilla Thunderbird 17.0.8 (x86 en-US)) (Version: 17.0.8 - Mozilla)
  496. Mullvad (HKLM\...\Product) (Version: - )
  497. Notepad++ (32-bit x86) (HKLM\...\Notepad++) (Version: 7.3.3 - Notepad++ Team)
  498. Pidgin (HKLM\...\Pidgin) (Version: 2.12.0 - )
  499. pidgin-otr 4.0.2 (HKLM\...\pidgin-otr) (Version: 4.0.2 - Cypherpunks CA)
  500. RogueKiller version 12.11.7.0 (HKLM\...\8B3D7924-ED89-486B-8322-E8594065D5CB_is1) (Version: 12.11.7.0 - Adlice Software)
  501. SendBlaster 3 (HKLM\...\{486575DF-CC13-4F89-8636-C2CC5BDA7246}) (Version: 003.001.00006 - eDisplay srl)
  502. SMADAV version 9.6.1 (HKLM\...\{8B9FA5FF-3E61-4658-B0DA-E6DDB46D6BAD}_is1) (Version: 9.6.1 - SmadSoft)
  503. TeamViewer 12 (HKLM\...\TeamViewer) (Version: 12.0.78313 - TeamViewer)
  504. Telegram Desktop version 1.1.7 (HKU\S-1-5-21-570141002-2484250258-4068607221-1000\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 1.1.7 - Telegram Messenger LLP)
  505. TurboMailer 2 (HKLM\...\{9E156899-D3A1-4F10-8323-364A095FCFDB}}_is1) (Version: - Xellsoft.com)
  506. VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN)
  507. WinHTTrack Website Copier 3.49-2 (HKLM\...\WinHTTrack Website Copier_is1) (Version: 3.49.2 - HTTrack)
  508. WinRAR 4.01 (32-bit) (HKLM\...\WinRAR archiver) (Version: 4.01.0 - win.rar GmbH)
  509. XAMPP (HKLM\...\xampp) (Version: 5.6.30-0 - Bitnami)
  510.  
  511. ==================== Custom CLSID (Whitelisted): ==========================
  512.  
  513. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  514.  
  515. CustomCLSID: HKU\S-1-5-21-570141002-2484250258-4068607221-1000_Classes\CLSID\{CB492AF1-2CEF-4E58-BE47-471C77D0C8BA}\InprocServer32 -> C:\Users\Hakeem\AppData\Local\Google\Update\1.3.32.7\psuser.dll => No File
  516. ContextMenuHandlers1: [ANotepad++] -> {00F3C2EC-A6EE-11DE-A03A-EF8F55D89593} => C:\Program Files\Notepad++\NppShell_06.dll [2017-03-07] ()
  517. ContextMenuHandlers1: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2011-05-28] ()
  518. ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-05-09] (Malwarebytes)
  519. ContextMenuHandlers3: [SmadExt] -> {8AB81E72-CB2F-11D3-8D3B-AC2F34F1FA3C} => C:\Program Files\SMADAV\SmadExtc.dll [2010-02-19] (Smadsoft)
  520. ContextMenuHandlers4: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2011-05-28] ()
  521. ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll [2009-09-23] (Intel Corporation)
  522. ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-05-09] (Malwarebytes)
  523. ContextMenuHandlers6: [SmadExt] -> {8AB81E72-CB2F-11D3-8D3B-AC2F34F1FA3C} => C:\Program Files\SMADAV\SmadExtc.dll [2010-02-19] (Smadsoft)
  524. ContextMenuHandlers6: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2011-05-28] ()
  525.  
  526. ==================== Scheduled Tasks (Whitelisted) =============
  527.  
  528. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  529.  
  530. Task: {0FBEA709-4E39-4271-8ABF-39E80E30E00C} - System32\Tasks\HPCustParticipation HP Deskjet 2050 J510 series => C:\Program Files\HP\HP Deskjet 2050 J510 series\Bin\HPCustPartic.exe [2010-11-16] (Hewlett-Packard Co.)
  531. Task: {1242DEC0-A6F2-4C6F-8579-472523ED69BB} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2017-12-13] (Google Inc.)
  532. Task: {167E61DF-3577-45B8-8858-9AB6A51923CD} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2017-12-13] (Google Inc.)
  533. Task: {2C21F8BE-DDA1-4A2A-A1C1-CF68EF124DD6} - System32\Tasks\DllKitPRO => C:\Program Files\DllKitPRO\dllkitpro.exe
  534. Task: {7973476E-CA93-4E7B-8D4E-389FE8291DA4} - System32\Tasks\smadav => C:\Program Files\Smadav\SMΔRTP.exe [2014-01-21] (Smadsoft)
  535. Task: {B3C8ED6D-24CF-4F43-9EE0-BD6330694C55} - System32\Tasks\Microsoft\Windows\Setup\EOSNotify => C:\Windows\system32\EOSNotify.exe [2016-06-25] (Microsoft Corporation)
  536. Task: {EF16C079-7256-4F42-AA88-AC8DE045AEBC} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2018-03-21] (Adobe Systems Incorporated)
  537.  
  538. (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
  539.  
  540.  
  541. ==================== Shortcuts & WMI ========================
  542.  
  543. (The entries could be listed to be restored or removed.)
  544.  
  545.  
  546. ==================== Loaded Modules (Whitelisted) ==============
  547.  
  548. 2017-07-19 04:21 - 2017-07-19 04:21 - 000073384 _____ () C:\Program Files\FileZilla FTP Client\fzshellext.dll
  549. 2018-05-09 11:05 - 2018-04-25 13:16 - 001930960 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
  550. 2018-05-09 11:05 - 2018-04-30 12:54 - 001913552 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
  551.  
  552. ==================== Alternate Data Streams (Whitelisted) =========
  553.  
  554. (If an entry is included in the fixlist, only the ADS will be removed.)
  555.  
  556.  
  557. ==================== Safe Mode (Whitelisted) ===================
  558.  
  559. (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)
  560.  
  561. HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
  562. HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
  563.  
  564. ==================== Association (Whitelisted) ===============
  565.  
  566. (If an entry is included in the fixlist, the registry item will be restored to default or removed.)
  567.  
  568.  
  569. ==================== Internet Explorer trusted/restricted ===============
  570.  
  571. (If an entry is included in the fixlist, it will be removed from the registry.)
  572.  
  573. IE trusted site: HKU\.DEFAULT\...\localhost -> localhost
  574. IE trusted site: HKU\.DEFAULT\...\webcompanion.com -> hxxp://webcompanion.com
  575. IE trusted site: HKU\S-1-5-21-570141002-2484250258-4068607221-1000\...\localhost -> localhost
  576. IE trusted site: HKU\S-1-5-21-570141002-2484250258-4068607221-1000\...\webcompanion.com -> hxxp://webcompanion.com
  577.  
  578. ==================== Hosts content: ===============================
  579.  
  580. (If needed Hosts: directive could be included in the fixlist to reset Hosts.)
  581.  
  582. 2009-07-13 14:04 - 2017-07-19 21:54 - 000000035 _____ C:\Windows\system32\Drivers\etc\hosts
  583.  
  584.  
  585. ==================== Other Areas ============================
  586.  
  587. (Currently there is no automatic fix for this section.)
  588.  
  589. HKU\S-1-5-21-570141002-2484250258-4068607221-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Hakeem\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
  590. DNS Servers: 193.138.219.228
  591. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
  592. Windows Firewall is enabled.
  593.  
  594. ==================== MSCONFIG/TASK MANAGER disabled items ==
  595.  
  596.  
  597. ==================== FirewallRules (Whitelisted) ===============
  598.  
  599. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  600.  
  601. FirewallRules: [{4C035A54-B419-4009-BFAC-6CBFBFB26B65}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
  602. FirewallRules: [{C0F1D9C1-0176-4F9F-BE9E-2502404B353B}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
  603. FirewallRules: [TCP Query User{D6FB102E-DC39-40EA-A232-A1F985427637}C:\xampp\apache\bin\httpd.exe] => (Allow) C:\xampp\apache\bin\httpd.exe
  604. FirewallRules: [UDP Query User{BA1ADBFC-DC91-4A80-B46B-11197E93A717}C:\xampp\apache\bin\httpd.exe] => (Allow) C:\xampp\apache\bin\httpd.exe
  605. FirewallRules: [TCP Query User{D2523B1A-9721-49AE-AE0F-9BBB1EAF943B}C:\xampp\mysql\bin\mysqld.exe] => (Allow) C:\xampp\mysql\bin\mysqld.exe
  606. FirewallRules: [UDP Query User{B7146805-3733-4A32-BDB8-49B8ED4DA5F7}C:\xampp\mysql\bin\mysqld.exe] => (Allow) C:\xampp\mysql\bin\mysqld.exe
  607. FirewallRules: [TCP Query User{80CD9E75-8549-4FC6-9230-812B9B9F43B9}C:\xampp\filezillaftp\filezillaserver.exe] => (Allow) C:\xampp\filezillaftp\filezillaserver.exe
  608. FirewallRules: [UDP Query User{8C055824-8AC1-4D3B-8BB2-0F182F555D9E}C:\xampp\filezillaftp\filezillaserver.exe] => (Allow) C:\xampp\filezillaftp\filezillaserver.exe
  609. FirewallRules: [{D6445881-17B8-4804-9EE6-2F709CE6A0B2}] => (Allow) C:\Program Files\HP\HP Deskjet 2050 J510 series\Bin\USBSetup.exe
  610. FirewallRules: [{96158AAC-7A3D-4E24-87DD-F05C27A43177}] => (Allow) C:\Program Files\HP\HP Deskjet 2050 J510 series\Bin\USBSetup.exe
  611. FirewallRules: [TCP Query User{F21FB9F8-5896-4F3C-869B-2D5591B4CA8D}C:\users\hakeem\appdata\roaming\telegram desktop\telegram.exe] => (Allow) C:\users\hakeem\appdata\roaming\telegram desktop\telegram.exe
  612. FirewallRules: [UDP Query User{99427240-16F0-42A0-8E50-9FD810CCBEE0}C:\users\hakeem\appdata\roaming\telegram desktop\telegram.exe] => (Allow) C:\users\hakeem\appdata\roaming\telegram desktop\telegram.exe
  613. FirewallRules: [{AADDE57E-198F-40A7-B155-0461850A56C7}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe
  614. FirewallRules: [{1773C215-D2B1-48B9-84DA-5921F2E8FE45}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe
  615. FirewallRules: [{7188E338-AE0D-4C38-AF9E-A743E87B9939}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe
  616. FirewallRules: [{508FE1E9-BD2C-4AC1-966B-296CCE69CFBD}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe
  617. FirewallRules: [TCP Query User{62F6AC72-50E1-4406-9DC4-49EF2505FD91}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe
  618. FirewallRules: [UDP Query User{BEA411B9-DACB-4973-8F7A-9D3E85530F39}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe
  619. FirewallRules: [{651EE745-F1F8-431E-A9BE-19515E4742C7}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
  620.  
  621. ==================== Restore Points =========================
  622.  
  623. 08-08-2018 09:55:10 Windows Update
  624. 15-08-2018 01:07:49 Windows Update
  625. 15-08-2018 03:00:17 Windows Update
  626. 20-08-2018 19:32:10 Windows Update
  627.  
  628. ==================== Faulty Device Manager Devices =============
  629.  
  630. Name:
  631. Description:
  632. Class Guid:
  633. Manufacturer:
  634. Service:
  635. Problem: : The drivers for this device are not installed. (Code 28)
  636. Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
  637.  
  638.  
  639. ==================== Event log errors: =========================
  640.  
  641. Application errors:
  642. ==================
  643. Error: (08/15/2018 03:30:10 AM) (Source: Application Error) (EventID: 1000) (User: )
  644. Description: Faulting application name: chrome.exe, version: 68.0.3440.106, time stamp: 0x58adb8be
  645. Faulting module name: chrome.exe, version: 68.0.3440.106, time stamp: 0x58adb8be
  646. Exception code: 0xc0000005
  647. Fault offset: 0x0000d765
  648. Faulting process id: 0xcf4
  649. Faulting application start time: 0x01d434acd588039a
  650. Faulting application path: C:\Program Files\Google\Chrome\Application\chrome.exe
  651. Faulting module path: C:\Program Files\Google\Chrome\Application\chrome.exe
  652. Report Id: 17e1e2a4-a0a0-11e8-aecf-001eec2379f7
  653.  
  654. Error: (08/03/2018 06:17:44 AM) (Source: Application Error) (EventID: 1000) (User: )
  655. Description: Faulting application name: chrome.exe, version: 67.0.3396.99, time stamp: 0x58adb8be
  656. Faulting module name: mshtml.dll, version: 11.0.9600.19081, time stamp: 0x5b253c2c
  657. Exception code: 0xc0000602
  658. Fault offset: 0x009e9dfb
  659. Faulting process id: 0xacc
  660. Faulting application start time: 0x01d42b563fd5fc67
  661. Faulting application path: C:\Program Files\Google\Chrome\Application\chrome.exe
  662. Faulting module path: C:\Windows\System32\mshtml.dll
  663. Report Id: 83b116a7-9749-11e8-8cff-001eec2379f7
  664.  
  665. Error: (08/03/2018 06:17:44 AM) (Source: Application Error) (EventID: 1000) (User: )
  666. Description: Faulting application name: chrome.exe, version: 67.0.3396.99, time stamp: 0x58adb8be
  667. Faulting module name: mshtml.dll, version: 11.0.9600.19081, time stamp: 0x5b253c2c
  668. Exception code: 0xc0000602
  669. Fault offset: 0x009e9dfb
  670. Faulting process id: 0xb10
  671. Faulting application start time: 0x01d42b56417cf707
  672. Faulting application path: C:\Program Files\Google\Chrome\Application\chrome.exe
  673. Faulting module path: C:\Windows\System32\mshtml.dll
  674. Report Id: 83b0ef97-9749-11e8-8cff-001eec2379f7
  675.  
  676. Error: (08/01/2018 04:30:34 AM) (Source: Application Error) (EventID: 1000) (User: )
  677. Description: Faulting application name: chrome.exe, version: 67.0.3396.99, time stamp: 0x58adb8be
  678. Faulting module name: mshtml.dll, version: 11.0.9600.19081, time stamp: 0x5b253c2c
  679. Exception code: 0xc0000602
  680. Fault offset: 0x009e9dfb
  681. Faulting process id: 0xaf4
  682. Faulting application start time: 0x01d429b4f08488f6
  683. Faulting application path: C:\Program Files\Google\Chrome\Application\chrome.exe
  684. Faulting module path: C:\Windows\System32\mshtml.dll
  685. Report Id: 3650ac77-95a8-11e8-98eb-001eec2379f7
  686.  
  687. Error: (08/01/2018 04:30:34 AM) (Source: Application Error) (EventID: 1000) (User: )
  688. Description: Faulting application name: chrome.exe, version: 67.0.3396.99, time stamp: 0x58adb8be
  689. Faulting module name: mshtml.dll, version: 11.0.9600.19081, time stamp: 0x5b253c2c
  690. Exception code: 0xc0000602
  691. Fault offset: 0x009e9dfb
  692. Faulting process id: 0xb40
  693. Faulting application start time: 0x01d429b4f22df3b0
  694. Faulting application path: C:\Program Files\Google\Chrome\Application\chrome.exe
  695. Faulting module path: C:\Windows\System32\mshtml.dll
  696. Report Id: 3650d387-95a8-11e8-98eb-001eec2379f7
  697.  
  698. Error: (07/29/2018 10:42:19 AM) (Source: Application Error) (EventID: 1000) (User: )
  699. Description: Faulting application name: chrome.exe, version: 67.0.3396.99, time stamp: 0x58adb8be
  700. Faulting module name: mshtml.dll, version: 11.0.9600.19081, time stamp: 0x5b253c2c
  701. Exception code: 0xc0000602
  702. Fault offset: 0x009e9dfb
  703. Faulting process id: 0xaf4
  704. Faulting application start time: 0x01d4278d634822dd
  705. Faulting application path: C:\Program Files\Google\Chrome\Application\chrome.exe
  706. Faulting module path: C:\Windows\System32\mshtml.dll
  707. Report Id: a6084659-9380-11e8-95f2-001eec2379f7
  708.  
  709. Error: (07/29/2018 10:42:19 AM) (Source: Application Error) (EventID: 1000) (User: )
  710. Description: Faulting application name: chrome.exe, version: 67.0.3396.99, time stamp: 0x58adb8be
  711. Faulting module name: mshtml.dll, version: 11.0.9600.19081, time stamp: 0x5b253c2c
  712. Exception code: 0xc0000602
  713. Fault offset: 0x009e9dfb
  714. Faulting process id: 0xb50
  715. Faulting application start time: 0x01d4278d6497ae2e
  716. Faulting application path: C:\Program Files\Google\Chrome\Application\chrome.exe
  717. Faulting module path: C:\Windows\System32\mshtml.dll
  718. Report Id: a6086d69-9380-11e8-95f2-001eec2379f7
  719.  
  720. Error: (07/26/2018 12:40:54 AM) (Source: Application Error) (EventID: 1000) (User: )
  721. Description: Faulting application name: chrome.exe, version: 67.0.3396.99, time stamp: 0x58adb8be
  722. Faulting module name: mshtml.dll, version: 11.0.9600.19081, time stamp: 0x5b253c2c
  723. Exception code: 0xc0000602
  724. Fault offset: 0x009e9dfb
  725. Faulting process id: 0xb94
  726. Faulting application start time: 0x01d424ddde55510a
  727. Faulting application path: C:\Program Files\Google\Chrome\Application\chrome.exe
  728. Faulting module path: C:\Windows\System32\mshtml.dll
  729. Report Id: 2240d648-90d1-11e8-9e2b-001eec2379f7
  730.  
  731.  
  732. System errors:
  733. =============
  734. Error: (08/22/2018 07:43:19 AM) (Source: cdrom) (EventID: 15) (User: )
  735. Description: The device, \Device\CdRom0, is not ready for access yet.
  736.  
  737. Error: (08/22/2018 07:40:52 AM) (Source: cdrom) (EventID: 15) (User: )
  738. Description: The device, \Device\CdRom0, is not ready for access yet.
  739.  
  740. Error: (08/22/2018 07:36:29 AM) (Source: cdrom) (EventID: 15) (User: )
  741. Description: The device, \Device\CdRom0, is not ready for access yet.
  742.  
  743. Error: (08/22/2018 07:36:28 AM) (Source: cdrom) (EventID: 15) (User: )
  744. Description: The device, \Device\CdRom0, is not ready for access yet.
  745.  
  746. Error: (08/22/2018 07:36:27 AM) (Source: cdrom) (EventID: 15) (User: )
  747. Description: The device, \Device\CdRom0, is not ready for access yet.
  748.  
  749. Error: (08/22/2018 07:35:19 AM) (Source: Tcpip) (EventID: 4199) (User: )
  750. Description: The system detected an address conflict for IP address 192.168.0.2 with the system
  751. having network hardware address D4-7D-FC-22-D6-D8. Network operations on this system may
  752. be disrupted as a result.
  753.  
  754. Error: (08/22/2018 06:30:49 AM) (Source: cdrom) (EventID: 15) (User: )
  755. Description: The device, \Device\CdRom0, is not ready for access yet.
  756.  
  757. Error: (08/22/2018 06:30:48 AM) (Source: cdrom) (EventID: 15) (User: )
  758. Description: The device, \Device\CdRom0, is not ready for access yet.
  759.  
  760.  
  761. Windows Defender:
  762. ===================================
  763. Date: 2018-07-03 19:01:43.109
  764. Description:
  765. Windows Defender has encountered an error trying to update signatures.
  766. New Signature Version:1.271.442.0
  767. Previous Signature Version:1.269.1075.0
  768. Update Source:User
  769. Signature Type:AntiSpyware
  770. Update Type:Delta
  771. Current Engine Version:1.1.15000.2
  772. Previous Engine Version:1.1.14901.4
  773. Error code:0x80070666
  774. Error description:Another version of this product is already installed. Installation of this version cannot continue. To configure or remove the existing version of this product, use Add/Remove Programs on the Control Panel.
  775.  
  776. Date: 2018-07-03 19:01:43.108
  777. Description:
  778. Windows Defender has encountered an error trying to update the engine.
  779. New Engine Version:1.1.15000.2
  780. Previous Engine Version:1.1.14901.4
  781. Update Source:User
  782. Error Code:0x80070666
  783. Error description:Another version of this product is already installed. Installation of this version cannot continue. To configure or remove the existing version of this product, use Add/Remove Programs on the Control Panel.
  784.  
  785. Date: 2018-03-03 21:58:55.848
  786. Description:
  787. Windows Defender has encountered an error trying to load signatures and will attempt reverting back to a known-good set of signatures.
  788. Signatures Attempted:Current
  789. Error Code:0x80070002
  790. Error description:The system cannot find the file specified.
  791. Signature version:0.0.0.0
  792. Engine version:0.0.0.0
  793.  
  794. Date: 2017-12-13 03:04:06.174
  795. Description:
  796. Windows Defender has encountered an error trying to load signatures and will attempt reverting back to a known-good set of signatures.
  797. Signatures Attempted:Current
  798. Error Code:0x80070002
  799. Error description:The system cannot find the file specified.
  800. Signature version:0.0.0.0
  801. Engine version:0.0.0.0
  802.  
  803. Date: 2017-12-13 01:46:53.974
  804. Description:
  805. Windows Defender has encountered an error trying to load signatures and will attempt reverting back to a known-good set of signatures.
  806. Signatures Attempted:Current
  807. Error Code:0x80070002
  808. Error description:The system cannot find the file specified.
  809. Signature version:0.0.0.0
  810. Engine version:0.0.0.0
  811.  
  812. ==================== Memory info ===========================
  813.  
  814. Processor: Intel(R) Core(TM) Duo CPU T2700 @ 2.33GHz
  815. Percentage of memory in use: 67%
  816. Total physical RAM: 3447.43 MB
  817. Available physical RAM: 1125.12 MB
  818. Total Virtual: 6893.22 MB
  819. Available Virtual: 4134.89 MB
  820.  
  821. ==================== Drives ================================
  822.  
  823. Drive c: () (Fixed) (Total:74.52 GB) (Free:23.55 GB) NTFS ==>[drive with boot components (obtained from BCD)]
  824.  
  825.  
  826. ==================== MBR & Partition Table ==================
  827.  
  828. ========================================================
  829. Disk: 0 (MBR Code: Windows 7/8/10) (Size: 74.5 GB) (Disk ID: AC8CAC8C)
  830. Partition 1: (Active) - (Size=74.5 GB) - (Type=07 NTFS)
  831.  
  832. ==================== End of Addition.txt ============================
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!