Jump to content

jpark1

Members
 View Profile  See their activity

  • Posts

    16

  • Joined

  • Last visited

 Content Type 

Everything posted by jpark1

  1. jpark1
    Here is the Panda Cloud Cleaner log Malware. FILE: C:\USERS\SUSIEPARK\DESKTOP\SECURITYCHECK.EXE to be deleted. Suspicious Policy. POLICY: HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\ADVANCED[sHOWSUPERHIDDEN] to be changed to: 0 Suspicious Policy. POLICY: HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\ADVANCED[sHOWSUPERHIDDEN] to be changed to: 0 Malware. REGKEY: HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM[DISABLEREGISTRYTOOLS]. Value: DISABLEREGISTRYTOOLS To be deleted. Malware. REGKEY: HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM[DISABLETASKMGR]. Value: DISABLETASKMGR To be deleted. Here is the SecurityCheck log Results of screen317's Security Check version 0.99.90 x64 (UAC is enabled) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` Windows Firewall Enabled! Windows Defender avast! Antivirus Antivirus out of date! `````````Anti-malware/Other Utilities Check:````````` Panda Cloud Cleaner ````````Process Check: objlist.exe by Laurent```````` AVAST Software Avast AvastSvc.exe AVAST Software Avast avastui.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: % ````````````````````End of Log`````````````````````` please advise, thank you
  2. jpark1
    I no longer receive the proxy setting error. Is there anything else that appears to need repair?
  3. jpark1
    Here are the logs from MBAR mbar-log.txt Malwarebytes Anti-Rootkit BETA 1.08.2.1001www.malwarebytes.org Database version: v2014.11.21.05 Windows 8.1 x64 NTFSInternet Explorer 11.0.9600.17416susiepark :: SUSIE [administrator] 11/21/2014 1:51:06 AMmbar-log-2014-11-21 (01-51-06).txt Scan type: Quick scanScan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/ShurikenScan options disabled: Objects scanned: 319320Time elapsed: 17 minute(s), 6 second(s) Memory Processes Detected: 0(No malicious items detected) Memory Modules Detected: 0(No malicious items detected) Registry Keys Detected: 0(No malicious items detected) Registry Values Detected: 0(No malicious items detected) Registry Data Items Detected: 0(No malicious items detected) Folders Detected: 0(No malicious items detected) Files Detected: 0(No malicious items detected) Physical Sectors Detected: 0(No malicious items detected) (end) system-log.txt ---------------------------------------Malwarebytes Anti-Rootkit BETA 1.08.2.1001 © Malwarebytes Corporation 2011-2012 OS version: 6.3.9200 Windows 8.1 x64 Account is Administrative Internet Explorer version: 11.0.9600.17416 File system is: NTFSDisk drives: C:\ DRIVE_FIXED, X:\ DRIVE_FIXED, Y:\ DRIVE_FIXEDCPU speed: 2.494000 GHzMemory total: 8452857856, free: 5488431104 Downloaded database version: v2014.11.21.05Downloaded database version: v2014.11.18.01=======================================Initializing...------------ Kernel report ------------ 11/21/2014 01:31:38------------ Loaded modules -----------\SystemRoot\system32\ntoskrnl.exe\SystemRoot\system32\hal.dll\SystemRoot\system32\kd.dll\SystemRoot\system32\mcupdate_GenuineIntel.dll\SystemRoot\System32\drivers\werkernel.sys\SystemRoot\System32\drivers\CLFS.SYS\SystemRoot\System32\drivers\tm.sys\SystemRoot\system32\PSHED.dll\SystemRoot\system32\BOOTVID.dll\SystemRoot\system32\CI.dll\SystemRoot\System32\drivers\msrpc.sys\SystemRoot\system32\drivers\Wdf01000.sys\SystemRoot\system32\drivers\WDFLDR.SYS\SystemRoot\System32\Drivers\acpiex.sys\SystemRoot\System32\Drivers\WppRecorder.sys\SystemRoot\System32\drivers\ACPI.sys\SystemRoot\System32\drivers\WMILIB.SYS\SystemRoot\System32\Drivers\cng.sys\SystemRoot\System32\drivers\msisadrv.sys\SystemRoot\System32\drivers\pci.sys\SystemRoot\System32\drivers\vdrvroot.sys\SystemRoot\system32\drivers\pdc.sys\SystemRoot\System32\drivers\partmgr.sys\SystemRoot\System32\drivers\spaceport.sys\SystemRoot\System32\drivers\volmgr.sys\SystemRoot\System32\drivers\volmgrx.sys\SystemRoot\System32\drivers\mountmgr.sys\SystemRoot\System32\drivers\iaStorA.sys\SystemRoot\System32\drivers\storport.sys\SystemRoot\system32\drivers\fltmgr.sys\SystemRoot\System32\drivers\fileinfo.sys\SystemRoot\System32\Drivers\Wof.sys\SystemRoot\System32\Drivers\Ntfs.sys\SystemRoot\System32\Drivers\ksecdd.sys\SystemRoot\System32\drivers\pcw.sys\SystemRoot\System32\Drivers\Fs_Rec.sys\SystemRoot\system32\drivers\ndis.sys\SystemRoot\system32\drivers\NETIO.SYS\SystemRoot\System32\Drivers\ksecpkg.sys\SystemRoot\System32\drivers\tcpip.sys\SystemRoot\System32\drivers\fwpkclnt.sys\SystemRoot\system32\DRIVERS\wfplwfs.sys\SystemRoot\System32\DRIVERS\fvevol.sys\SystemRoot\System32\drivers\volsnap.sys\SystemRoot\System32\drivers\rdyboost.sys\SystemRoot\System32\Drivers\mup.sys\SystemRoot\System32\drivers\intelpep.sys\SystemRoot\System32\drivers\disk.sys\SystemRoot\System32\drivers\CLASSPNP.SYS\SystemRoot\System32\Drivers\aswVmm.sys\SystemRoot\System32\Drivers\aswRvrt.sys\SystemRoot\System32\Drivers\crashdmp.sys\SystemRoot\System32\drivers\cdrom.sys\SystemRoot\system32\drivers\aswSnx.sys\SystemRoot\system32\drivers\aswSP.sys\SystemRoot\System32\Drivers\Null.SYS\SystemRoot\System32\Drivers\Beep.SYS\SystemRoot\System32\drivers\BasicRender.sys\SystemRoot\System32\drivers\dxgkrnl.sys\SystemRoot\System32\drivers\watchdog.sys\SystemRoot\System32\drivers\dxgmms1.sys\SystemRoot\System32\drivers\BasicDisplay.sys\SystemRoot\System32\Drivers\Npfs.SYS\SystemRoot\System32\Drivers\Msfs.SYS\SystemRoot\system32\DRIVERS\tdx.sys\SystemRoot\system32\DRIVERS\TDI.SYS\SystemRoot\System32\DRIVERS\netbt.sys\SystemRoot\system32\drivers\aswRdr2.sys\SystemRoot\system32\drivers\afd.sys\SystemRoot\system32\DRIVERS\pacer.sys\SystemRoot\system32\DRIVERS\vwififlt.sys\SystemRoot\system32\DRIVERS\netbios.sys\SystemRoot\system32\DRIVERS\rdbss.sys\SystemRoot\system32\drivers\nsiproxy.sys\SystemRoot\System32\drivers\npsvctrig.sys\SystemRoot\System32\drivers\mssmbios.sys\SystemRoot\System32\Drivers\dfsc.sys\SystemRoot\system32\DRIVERS\CLVirtualDrive.sys\SystemRoot\system32\DRIVERS\ahcache.sys\SystemRoot\System32\drivers\CompositeBus.sys\SystemRoot\system32\DRIVERS\kdnic.sys\SystemRoot\System32\drivers\umbus.sys\SystemRoot\system32\DRIVERS\igdkmd64.sys\SystemRoot\System32\drivers\USBXHCI.SYS\SystemRoot\System32\drivers\ucx01000.sys\SystemRoot\System32\drivers\HECIx64.sys\SystemRoot\System32\drivers\usbehci.sys\SystemRoot\System32\drivers\USBPORT.SYS\SystemRoot\System32\drivers\HDAudBus.sys\SystemRoot\system32\DRIVERS\Rt630x64.sys\SystemRoot\system32\DRIVERS\Netwew00.sys\SystemRoot\System32\drivers\vwifibus.sys\SystemRoot\System32\drivers\i8042prt.sys\SystemRoot\System32\drivers\kbdclass.sys\SystemRoot\system32\DRIVERS\ETD.sys\SystemRoot\System32\drivers\mouclass.sys\SystemRoot\System32\drivers\CmBatt.sys\SystemRoot\System32\drivers\BATTC.SYS\SystemRoot\System32\drivers\wmiacpi.sys\SystemRoot\System32\drivers\intelppm.sys\SystemRoot\System32\drivers\NdisVirtualBus.sys\SystemRoot\System32\drivers\swenum.sys\SystemRoot\System32\drivers\ks.sys\SystemRoot\System32\drivers\iwdbus.sys\SystemRoot\System32\drivers\rdpbus.sys\SystemRoot\System32\drivers\AMPPAL.sys\SystemRoot\System32\drivers\usbhub.sys\SystemRoot\System32\drivers\USBD.SYS\SystemRoot\System32\Drivers\fastfat.SYS\SystemRoot\System32\drivers\UsbHub3.sys\SystemRoot\system32\drivers\CHDRT64.sys\SystemRoot\system32\drivers\portcls.sys\SystemRoot\system32\drivers\drmk.sys\SystemRoot\system32\drivers\ksthunk.sys\SystemRoot\system32\DRIVERS\IntcDAud.sys\SystemRoot\System32\drivers\usbccgp.sys\SystemRoot\System32\drivers\hidusb.sys\SystemRoot\System32\drivers\HIDCLASS.SYS\SystemRoot\System32\drivers\HIDPARSE.SYS\SystemRoot\System32\drivers\kbdhid.sys\SystemRoot\System32\drivers\mouhid.sys\SystemRoot\System32\Drivers\RtsUVStor.sys\SystemRoot\System32\win32k.sys\SystemRoot\System32\Drivers\usbvideo.sys\SystemRoot\system32\DRIVERS\iBtFltCoex.sys\SystemRoot\system32\DRIVERS\btmhsf.sys\SystemRoot\System32\Drivers\BTHUSB.sys\SystemRoot\System32\Drivers\bthport.sys\SystemRoot\System32\Drivers\dump_diskdump.sys\SystemRoot\System32\Drivers\dump_iaStorA.sys\SystemRoot\System32\Drivers\dump_dumpfve.sys\SystemRoot\system32\DRIVERS\BthLEEnum.sys\SystemRoot\System32\drivers\rfcomm.sys\SystemRoot\System32\drivers\BthEnum.sys\SystemRoot\System32\drivers\bthpan.sys\SystemRoot\System32\TSDDD.dll\SystemRoot\System32\cdd.dll\SystemRoot\system32\drivers\luafv.sys\SystemRoot\system32\drivers\aswMonFlt.sys\SystemRoot\system32\drivers\aswStm.sys\SystemRoot\system32\DRIVERS\lltdio.sys\SystemRoot\system32\DRIVERS\nwifi.sys\SystemRoot\system32\DRIVERS\ndisuio.sys\SystemRoot\system32\DRIVERS\rspndr.sys\SystemRoot\system32\DRIVERS\TurboB.sys\SystemRoot\System32\drivers\condrv.sys\SystemRoot\system32\drivers\HTTP.sys\SystemRoot\system32\DRIVERS\bowser.sys\SystemRoot\System32\drivers\mpsdrv.sys\SystemRoot\system32\DRIVERS\mrxsmb.sys\SystemRoot\system32\DRIVERS\mrxsmb20.sys\SystemRoot\system32\drivers\aswHwid.sys\SystemRoot\system32\DRIVERS\mrxsmb10.sys\SystemRoot\system32\drivers\Ndu.sys\SystemRoot\system32\drivers\peauth.sys\SystemRoot\System32\Drivers\secdrv.SYS\SystemRoot\System32\DRIVERS\srvnet.sys\SystemRoot\System32\drivers\tcpipreg.sys\SystemRoot\System32\DRIVERS\srv2.sys\SystemRoot\System32\DRIVERS\srv.sys\SystemRoot\System32\drivers\WSDPrint.sys\SystemRoot\system32\drivers\WudfPf.sys\??\C:\Windows\System32\drivers\TrueSight.sys\SystemRoot\system32\DRIVERS\cdfs.sys\SystemRoot\System32\drivers\umpass.sys\SystemRoot\System32\drivers\monitor.sys\SystemRoot\System32\drivers\USBSTOR.SYS\??\C:\WINDOWS\system32\drivers\mbamchameleon.sys\??\C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys----------- End -----------Done!<<<1>>>Upper Device Name: \Device\Harddisk1\DR2Upper Device Object: 0xffffe001556ed560Upper Device Driver Name: \Driver\disk\Lower Device Name: \Device\00000075\Lower Device Object: 0xffffe0015682f060Lower Device Driver Name: \Driver\USBSTOR\<<<1>>>Upper Device Name: \Device\Harddisk0\DR0Upper Device Object: 0xffffe0014fb5e450Upper Device Driver Name: \Driver\disk\Lower Device Name: \Device\0000002c\Lower Device Object: 0xffffe0014e3d9060Lower Device Driver Name: \Driver\iaStorA\<<<2>>>Physical Sector Size: 512Drive: 0, DevicePointer: 0xffffe0014fb5e450, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\disk\--------- Disk Stack ------DevicePointer: 0xffffe0014fb5d040, DeviceName: Unknown, DriverName: \Driver\partmgr\DevicePointer: 0xffffe0014fb5e450, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\disk\DevicePointer: 0xffffe0014e3d9060, DeviceName: \Device\0000002c\, DriverName: \Driver\iaStorA\------------ End ----------Alternate DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\disk\Upper DeviceData: 0x0, 0x0, 0x0Lower DeviceData: 0x0, 0x0, 0x0<<<3>>>Volume: C:File system type: NTFSSectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes<<<2>>><<<3>>>Volume: C:File system type: NTFSSectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytesScanning drivers directory: C:\WINDOWS\SYSTEM32\drivers...File "C:\Windows\System32\drivers\1394ohci.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\1394ohci.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\acpi.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\acpi.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\acpipagr.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\acpipagr.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\acpipmi.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\acpipmi.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\acpitime.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\acpitime.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\AGP440.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\AGP440.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\amdk8.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\amdk8.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\amdppm.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\amdppm.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\atapi.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\atapi.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\intelpep.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\intelpep.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\intelppm.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\intelppm.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\BasicDisplay.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\BasicDisplay.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\BasicRender.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\BasicRender.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\battc.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\battc.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\BtaMPM.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\BtaMPM.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\BthAvrcpTg.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\BthAvrcpTg.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\bthenum.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\bthenum.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\bthhfenum.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\bthhfenum.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\BthhfHid.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\BthhfHid.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\BthLEEnum.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\BthLEEnum.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\bthmodem.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\bthmodem.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\bthpan.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\bthpan.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\bthport.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\bthport.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\BTHUSB.SYS" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\BTHUSB.SYS" is compressed (flags = 1)File "C:\Windows\System32\drivers\dumpsd.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\dumpsd.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\EhStorTcgDrv.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\EhStorTcgDrv.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\errdev.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\errdev.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\fdc.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\fdc.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\flpydisk.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\flpydisk.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\parport.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\parport.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\pci.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\pci.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\pciide.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\pciide.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\pciidex.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\pciidex.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\pcmcia.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\pcmcia.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\portcls.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\portcls.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\processr.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\processr.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\rdpbus.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\rdpbus.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\rfcomm.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\rfcomm.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\sbp2port.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\sbp2port.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\monitor.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\monitor.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\mouclass.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\mouclass.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\mouhid.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\mouhid.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\ataport.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\ataport.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\isapnp.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\isapnp.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\mssmbios.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\mssmbios.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\stornvme.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\stornvme.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\sdbus.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\sdbus.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\sdstor.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\sdstor.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\serenum.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\serenum.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\serial.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\serial.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\sermouse.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\sermouse.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\sfloppy.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\sfloppy.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\spaceport.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\spaceport.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\swenum.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\swenum.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\terminpt.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\terminpt.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\tpm.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\tpm.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\TsUsbGD.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\TsUsbGD.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\uaspstor.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\uaspstor.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\UCX01000.SYS" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\UCX01000.SYS" is compressed (flags = 1)File "C:\Windows\System32\drivers\uefi.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\uefi.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\umbus.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\umbus.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\umpass.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\umpass.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\usbccgp.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\usbccgp.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\usbcir.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\usbcir.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\usbd.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\usbd.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\usbehci.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\usbehci.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\usbhub.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\usbhub.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\USBHUB3.SYS" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\USBHUB3.SYS" is compressed (flags = 1)File "C:\Windows\System32\drivers\usbohci.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\usbohci.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\usbport.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\usbport.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\usbprint.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\usbprint.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\USBSTOR.SYS" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\USBSTOR.SYS" is compressed (flags = 1)File "C:\Windows\System32\drivers\usbuhci.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\usbuhci.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\usbvideo.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\usbvideo.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\USBXHCI.SYS" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\USBXHCI.SYS" is compressed (flags = 1)File "C:\Windows\System32\drivers\vdrvroot.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\vdrvroot.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\vhdmp.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\vhdmp.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\MTConfig.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\MTConfig.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\npsvctrig.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\npsvctrig.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\fxppm.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\fxppm.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\hdaudbus.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\hdaudbus.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\hidbatt.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\hidbatt.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\hidbth.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\hidbth.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\hidclass.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\hidclass.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\hidi2c.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\hidi2c.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\hidparse.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\hidparse.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\hidusb.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\hidusb.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\i8042prt.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\i8042prt.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\volmgr.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\volmgr.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\volsnap.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\volsnap.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\vwifibus.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\vwifibus.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\wacompen.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\wacompen.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\wmiacpi.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\wmiacpi.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\WSDPrint.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\WSDPrint.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\cdrom.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\cdrom.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\circlass.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\circlass.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\CmBatt.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\CmBatt.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\CompositeBus.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\CompositeBus.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\disk.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\disk.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\drmk.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\drmk.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\drmkaud.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\drmkaud.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\kbdclass.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\kbdclass.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\kbdhid.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\kbdhid.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\kdnic.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\kdnic.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\msgpiowin32.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\msgpiowin32.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\msisadrv.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\msisadrv.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\msiscsi.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\msiscsi.sys" is compressed (flags = 1)Done!Drive 0This is a System driveScanning MBR on drive 0...Inspecting partition table:This drive is a GPT Drive.MBR Signature: 55AADisk Signature: DAACC22E GPT Protective MBR Partition information: Partition 0 type is EFI-GPT (0xee) Partition is NOT ACTIVE. Partition starts at LBA: 1 Numsec = 4294967295 Partition 1 type is Empty (0x0) Partition is NOT ACTIVE. Partition starts at LBA: 0 Numsec = 0 Partition 2 type is Empty (0x0) Partition is NOT ACTIVE. Partition starts at LBA: 0 Numsec = 0 Partition 3 type is Empty (0x0) Partition is NOT ACTIVE. Partition starts at LBA: 0 Numsec = 0 GPT Partition information: GPT Header Signature 4546492050415254 GPT Header Revision 65536 Size 92 CRC 1376312642 GPT Header CurrentLba = 1 BackupLba 1953525167 GPT Header FirstUsableLba 34 LastUsableLba 1953525134 GPT Header Guid 3d76fb3-e766-4a6b-a8bc-d640678ae6d GPT Header Contains 128 partition entries starting at LBA 2 GPT Header Partition entry size = 128 Backup GPT header Signature 4546492050415254 Backup GPT header Revision 65536 Size 92 CRC 1376312642 Backup GPT header CurrentLba = 1953525167 BackupLba 1 Backup GPT header FirstUsableLba 34 LastUsableLba 1953525134 Backup GPT header Guid 3d76fb3-e766-4a6b-a8bc-d640678ae6d Backup GPT header Contains 128 partition entries starting at LBA 1953525135 Backup GPT header Partition entry size = 128 Partition 0 Type c12a7328-f81f-11d2-ba4b-0a0c93ec93b Partition ID e1e93cdf-6381-4a8e-b9b0-556215a69fb FirstLBA 2048 Last LBA 1026047 Attributes 0 Partition Name EFI system partition GPT Partition 0 is bootable Partition 1 Type 796badd3-6bbf-4d9f-b631-466eb71a4965 Partition ID b6720ef5-df76-439b-a871-31a4730d974 FirstLBA 1026048 Last LBA 1107967 Attributes 1 Partition Name Basic data partition Partition 2 Type e3c9e316-b5c-4db8-817d-f92df0215ae Partition ID 52e26b81-a708-41ad-89f6-a4ccddcac77 FirstLBA 1107968 Last LBA 1370111 Attributes 0 Partition Name Microsoft reserved partition Partition 3 Type de94bba4-6d1-4d40-a16a-bfd5179d6ac Partition ID 9f9e49fe-7001-402c-a242-cb5ceb3ad441 FirstLBA 1370112 Last LBA 2394111 Attributes 1 Partition Name Basic data partition Partition 4 Type ebd0a0a2-b9e5-4433-87c0-68b6b72699c7 Partition ID f0e2df27-2a01-42ab-9abf-3bebbf542ecb FirstLBA 2394112 Last LBA 1927608319 Attributes 0 Partition Name Basic data partition Partition 5 Type de94bba4-6d1-4d40-a16a-bfd5179d6ac Partition ID 658fc788-bf12-4464-b96-8dbe7997ebb FirstLBA 1927608320 Last LBA 1928529919 Attributes 1 Partition Name Partition 6 Type de94bba4-6d1-4d40-a16a-bfd5179d6ac Partition ID eb637425-9556-490c-bcf9-9f2adfb5c52 FirstLBA 1928529920 Last LBA 1953523119 Attributes 1 Partition Name Microsoft recovery partition Disk Size: 1000204886016 bytesSector size: 512 bytes Done!Physical Sector Size: 512Drive: 1, DevicePointer: 0xffffe001556ed560, DeviceName: \Device\Harddisk1\DR2\, DriverName: \Driver\disk\--------- Disk Stack ------DevicePointer: 0xffffe0015601e040, DeviceName: Unknown, DriverName: \Driver\partmgr\DevicePointer: 0xffffe001556ed560, DeviceName: \Device\Harddisk1\DR2\, DriverName: \Driver\disk\DevicePointer: 0xffffe0015682f060, DeviceName: \Device\00000075\, DriverName: \Driver\USBSTOR\------------ End ----------Alternate DeviceName: \Device\Harddisk1\DR2\, DriverName: \Driver\disk\Upper DeviceData: 0x0, 0x0, 0x0Lower DeviceData: 0x0, 0x0, 0x0Drive 1Scanning MBR on drive 1...Inspecting partition table:MBR Signature: 55AADisk Signature: 0 Partition information: Partition 0 type is Other (0xb) Partition is NOT ACTIVE. Partition starts at LBA: 32 Numsec = 15625184 Partition 1 type is Empty (0x0) Partition is NOT ACTIVE. Partition starts at LBA: 0 Numsec = 0 Partition 2 type is Empty (0x0) Partition is NOT ACTIVE. Partition starts at LBA: 0 Numsec = 0 Partition 3 type is Empty (0x0) Partition is NOT ACTIVE. Partition starts at LBA: 0 Numsec = 0 Disk Size: 8000110592 bytesSector size: 512 bytes Done!Scan finished======================================= Removal queue found; removal startedRemoving C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-i.mbam...Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-r.mbam...Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-1-i.mbam...Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-1-r.mbam...Removal finished---------------------------------------Malwarebytes Anti-Rootkit BETA 1.08.2.1001 © Malwarebytes Corporation 2011-2012 OS version: 6.3.9200 Windows 8.1 x64 Account is Administrative Internet Explorer version: 11.0.9600.17416 File system is: NTFSDisk drives: C:\ DRIVE_FIXED, X:\ DRIVE_FIXED, Y:\ DRIVE_FIXEDCPU speed: 2.494000 GHzMemory total: 8452857856, free: 5745942528 Downloaded database version: v2014.11.21.05Downloaded database version: v2014.11.18.01=======================================Initializing...------------ Kernel report ------------ 11/21/2014 01:50:59------------ Loaded modules -----------\SystemRoot\system32\ntoskrnl.exe\SystemRoot\system32\hal.dll\SystemRoot\system32\kd.dll\SystemRoot\system32\mcupdate_GenuineIntel.dll\SystemRoot\System32\drivers\werkernel.sys\SystemRoot\System32\drivers\CLFS.SYS\SystemRoot\System32\drivers\tm.sys\SystemRoot\system32\PSHED.dll\SystemRoot\system32\BOOTVID.dll\SystemRoot\system32\CI.dll\SystemRoot\System32\drivers\msrpc.sys\SystemRoot\system32\drivers\Wdf01000.sys\SystemRoot\system32\drivers\WDFLDR.SYS\SystemRoot\System32\Drivers\acpiex.sys\SystemRoot\System32\Drivers\WppRecorder.sys\SystemRoot\System32\drivers\ACPI.sys\SystemRoot\System32\drivers\WMILIB.SYS\SystemRoot\System32\Drivers\cng.sys\SystemRoot\System32\drivers\msisadrv.sys\SystemRoot\System32\drivers\pci.sys\SystemRoot\System32\drivers\vdrvroot.sys\SystemRoot\system32\drivers\pdc.sys\SystemRoot\System32\drivers\partmgr.sys\SystemRoot\System32\drivers\spaceport.sys\SystemRoot\System32\drivers\volmgr.sys\SystemRoot\System32\drivers\volmgrx.sys\SystemRoot\System32\drivers\mountmgr.sys\SystemRoot\System32\drivers\iaStorA.sys\SystemRoot\System32\drivers\storport.sys\SystemRoot\system32\drivers\fltmgr.sys\SystemRoot\System32\drivers\fileinfo.sys\SystemRoot\System32\Drivers\Wof.sys\SystemRoot\System32\Drivers\Ntfs.sys\SystemRoot\System32\Drivers\ksecdd.sys\SystemRoot\System32\drivers\pcw.sys\SystemRoot\System32\Drivers\Fs_Rec.sys\SystemRoot\system32\drivers\ndis.sys\SystemRoot\system32\drivers\NETIO.SYS\SystemRoot\System32\Drivers\ksecpkg.sys\SystemRoot\System32\drivers\tcpip.sys\SystemRoot\System32\drivers\fwpkclnt.sys\SystemRoot\system32\DRIVERS\wfplwfs.sys\SystemRoot\System32\DRIVERS\fvevol.sys\SystemRoot\System32\drivers\volsnap.sys\SystemRoot\System32\drivers\rdyboost.sys\SystemRoot\System32\Drivers\mup.sys\SystemRoot\System32\drivers\intelpep.sys\SystemRoot\System32\drivers\disk.sys\SystemRoot\System32\drivers\CLASSPNP.SYS\SystemRoot\System32\Drivers\aswVmm.sys\SystemRoot\System32\Drivers\aswRvrt.sys\SystemRoot\System32\Drivers\crashdmp.sys\SystemRoot\System32\drivers\cdrom.sys\SystemRoot\system32\drivers\aswSnx.sys\SystemRoot\system32\drivers\aswSP.sys\SystemRoot\System32\Drivers\Null.SYS\SystemRoot\System32\Drivers\Beep.SYS\SystemRoot\System32\drivers\BasicRender.sys\SystemRoot\System32\drivers\dxgkrnl.sys\SystemRoot\System32\drivers\watchdog.sys\SystemRoot\System32\drivers\dxgmms1.sys\SystemRoot\System32\drivers\BasicDisplay.sys\SystemRoot\System32\Drivers\Npfs.SYS\SystemRoot\System32\Drivers\Msfs.SYS\SystemRoot\system32\DRIVERS\tdx.sys\SystemRoot\system32\DRIVERS\TDI.SYS\SystemRoot\System32\DRIVERS\netbt.sys\SystemRoot\system32\drivers\aswRdr2.sys\SystemRoot\system32\drivers\afd.sys\SystemRoot\system32\DRIVERS\pacer.sys\SystemRoot\system32\DRIVERS\vwififlt.sys\SystemRoot\system32\DRIVERS\netbios.sys\SystemRoot\system32\DRIVERS\rdbss.sys\SystemRoot\system32\drivers\nsiproxy.sys\SystemRoot\System32\drivers\npsvctrig.sys\SystemRoot\System32\drivers\mssmbios.sys\SystemRoot\System32\Drivers\dfsc.sys\SystemRoot\system32\DRIVERS\CLVirtualDrive.sys\SystemRoot\system32\DRIVERS\ahcache.sys\SystemRoot\System32\drivers\CompositeBus.sys\SystemRoot\system32\DRIVERS\kdnic.sys\SystemRoot\System32\drivers\umbus.sys\SystemRoot\system32\DRIVERS\igdkmd64.sys\SystemRoot\System32\drivers\USBXHCI.SYS\SystemRoot\System32\drivers\ucx01000.sys\SystemRoot\System32\drivers\HECIx64.sys\SystemRoot\System32\drivers\usbehci.sys\SystemRoot\System32\drivers\USBPORT.SYS\SystemRoot\System32\drivers\HDAudBus.sys\SystemRoot\system32\DRIVERS\Rt630x64.sys\SystemRoot\system32\DRIVERS\Netwew00.sys\SystemRoot\System32\drivers\vwifibus.sys\SystemRoot\System32\drivers\i8042prt.sys\SystemRoot\System32\drivers\kbdclass.sys\SystemRoot\system32\DRIVERS\ETD.sys\SystemRoot\System32\drivers\mouclass.sys\SystemRoot\System32\drivers\CmBatt.sys\SystemRoot\System32\drivers\BATTC.SYS\SystemRoot\System32\drivers\wmiacpi.sys\SystemRoot\System32\drivers\intelppm.sys\SystemRoot\System32\drivers\NdisVirtualBus.sys\SystemRoot\System32\drivers\swenum.sys\SystemRoot\System32\drivers\ks.sys\SystemRoot\System32\drivers\iwdbus.sys\SystemRoot\System32\drivers\rdpbus.sys\SystemRoot\System32\drivers\AMPPAL.sys\SystemRoot\System32\drivers\usbhub.sys\SystemRoot\System32\drivers\USBD.SYS\SystemRoot\System32\Drivers\fastfat.SYS\SystemRoot\System32\drivers\UsbHub3.sys\SystemRoot\system32\drivers\CHDRT64.sys\SystemRoot\system32\drivers\portcls.sys\SystemRoot\system32\drivers\drmk.sys\SystemRoot\system32\drivers\ksthunk.sys\SystemRoot\system32\DRIVERS\IntcDAud.sys\SystemRoot\System32\drivers\usbccgp.sys\SystemRoot\System32\drivers\hidusb.sys\SystemRoot\System32\drivers\HIDCLASS.SYS\SystemRoot\System32\drivers\HIDPARSE.SYS\SystemRoot\System32\drivers\kbdhid.sys\SystemRoot\System32\drivers\mouhid.sys\SystemRoot\System32\Drivers\RtsUVStor.sys\SystemRoot\System32\win32k.sys\SystemRoot\System32\Drivers\usbvideo.sys\SystemRoot\system32\DRIVERS\iBtFltCoex.sys\SystemRoot\system32\DRIVERS\btmhsf.sys\SystemRoot\System32\Drivers\BTHUSB.sys\SystemRoot\System32\Drivers\bthport.sys\SystemRoot\System32\Drivers\dump_diskdump.sys\SystemRoot\System32\Drivers\dump_iaStorA.sys\SystemRoot\System32\Drivers\dump_dumpfve.sys\SystemRoot\system32\DRIVERS\BthLEEnum.sys\SystemRoot\System32\drivers\rfcomm.sys\SystemRoot\System32\drivers\BthEnum.sys\SystemRoot\System32\drivers\bthpan.sys\SystemRoot\System32\TSDDD.dll\SystemRoot\System32\cdd.dll\SystemRoot\system32\drivers\luafv.sys\SystemRoot\system32\drivers\aswMonFlt.sys\SystemRoot\system32\drivers\aswStm.sys\SystemRoot\system32\DRIVERS\lltdio.sys\SystemRoot\system32\DRIVERS\nwifi.sys\SystemRoot\system32\DRIVERS\ndisuio.sys\SystemRoot\system32\DRIVERS\rspndr.sys\SystemRoot\system32\DRIVERS\TurboB.sys\SystemRoot\System32\drivers\condrv.sys\SystemRoot\system32\drivers\HTTP.sys\SystemRoot\system32\DRIVERS\bowser.sys\SystemRoot\System32\drivers\mpsdrv.sys\SystemRoot\system32\DRIVERS\mrxsmb.sys\SystemRoot\system32\DRIVERS\mrxsmb20.sys\SystemRoot\system32\drivers\aswHwid.sys\SystemRoot\system32\DRIVERS\mrxsmb10.sys\SystemRoot\system32\drivers\Ndu.sys\SystemRoot\system32\drivers\peauth.sys\SystemRoot\System32\Drivers\secdrv.SYS\SystemRoot\System32\DRIVERS\srvnet.sys\SystemRoot\System32\drivers\tcpipreg.sys\SystemRoot\System32\DRIVERS\srv2.sys\SystemRoot\System32\DRIVERS\srv.sys\SystemRoot\System32\drivers\WSDPrint.sys\SystemRoot\system32\drivers\WudfPf.sys\??\C:\Windows\System32\drivers\TrueSight.sys\SystemRoot\system32\DRIVERS\cdfs.sys\SystemRoot\System32\drivers\umpass.sys\SystemRoot\System32\drivers\monitor.sys\SystemRoot\System32\drivers\USBSTOR.SYS\??\C:\WINDOWS\system32\drivers\mbamchameleon.sys\??\C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys----------- End -----------Done!<<<1>>>Upper Device Name: \Device\Harddisk1\DR2Upper Device Object: 0xffffe001556ed560Upper Device Driver Name: \Driver\disk\Lower Device Name: \Device\00000075\Lower Device Object: 0xffffe0015682f060Lower Device Driver Name: \Driver\USBSTOR\<<<1>>>Upper Device Name: \Device\Harddisk0\DR0Upper Device Object: 0xffffe0014fb5e450Upper Device Driver Name: \Driver\disk\Lower Device Name: \Device\0000002c\Lower Device Object: 0xffffe0014e3d9060Lower Device Driver Name: \Driver\iaStorA\<<<2>>>Physical Sector Size: 512Drive: 0, DevicePointer: 0xffffe0014fb5e450, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\disk\--------- Disk Stack ------DevicePointer: 0xffffe0014fb5d040, DeviceName: Unknown, DriverName: \Driver\partmgr\DevicePointer: 0xffffe0014fb5e450, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\disk\DevicePointer: 0xffffe0014e3d9060, DeviceName: \Device\0000002c\, DriverName: \Driver\iaStorA\------------ End ----------Alternate DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\disk\Upper DeviceData: 0x0, 0x0, 0x0Lower DeviceData: 0x0, 0x0, 0x0<<<3>>>Volume: C:File system type: NTFSSectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes<<<2>>><<<3>>>Volume: C:File system type: NTFSSectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytesScanning drivers directory: C:\WINDOWS\SYSTEM32\drivers...File "C:\Windows\System32\drivers\1394ohci.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\1394ohci.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\acpi.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\acpi.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\acpipagr.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\acpipagr.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\acpipmi.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\acpipmi.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\acpitime.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\acpitime.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\AGP440.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\AGP440.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\amdk8.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\amdk8.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\amdppm.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\amdppm.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\atapi.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\atapi.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\intelpep.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\intelpep.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\intelppm.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\intelppm.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\BasicDisplay.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\BasicDisplay.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\BasicRender.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\BasicRender.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\battc.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\battc.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\BtaMPM.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\BtaMPM.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\BthAvrcpTg.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\BthAvrcpTg.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\bthenum.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\bthenum.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\bthhfenum.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\bthhfenum.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\BthhfHid.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\BthhfHid.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\BthLEEnum.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\BthLEEnum.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\bthmodem.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\bthmodem.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\bthpan.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\bthpan.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\bthport.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\bthport.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\BTHUSB.SYS" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\BTHUSB.SYS" is compressed (flags = 1)File "C:\Windows\System32\drivers\dumpsd.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\dumpsd.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\EhStorTcgDrv.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\EhStorTcgDrv.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\errdev.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\errdev.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\fdc.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\fdc.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\flpydisk.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\flpydisk.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\parport.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\parport.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\pci.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\pci.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\pciide.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\pciide.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\pciidex.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\pciidex.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\pcmcia.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\pcmcia.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\portcls.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\portcls.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\processr.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\processr.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\rdpbus.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\rdpbus.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\rfcomm.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\rfcomm.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\sbp2port.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\sbp2port.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\monitor.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\monitor.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\mouclass.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\mouclass.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\mouhid.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\mouhid.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\ataport.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\ataport.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\isapnp.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\isapnp.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\mssmbios.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\mssmbios.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\stornvme.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\stornvme.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\sdbus.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\sdbus.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\sdstor.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\sdstor.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\serenum.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\serenum.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\serial.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\serial.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\sermouse.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\sermouse.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\sfloppy.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\sfloppy.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\spaceport.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\spaceport.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\swenum.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\swenum.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\terminpt.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\terminpt.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\tpm.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\tpm.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\TsUsbGD.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\TsUsbGD.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\uaspstor.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\uaspstor.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\UCX01000.SYS" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\UCX01000.SYS" is compressed (flags = 1)File "C:\Windows\System32\drivers\uefi.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\uefi.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\umbus.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\umbus.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\umpass.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\umpass.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\usbccgp.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\usbccgp.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\usbcir.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\usbcir.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\usbd.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\usbd.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\usbehci.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\usbehci.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\usbhub.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\usbhub.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\USBHUB3.SYS" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\USBHUB3.SYS" is compressed (flags = 1)File "C:\Windows\System32\drivers\usbohci.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\usbohci.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\usbport.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\usbport.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\usbprint.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\usbprint.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\USBSTOR.SYS" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\USBSTOR.SYS" is compressed (flags = 1)File "C:\Windows\System32\drivers\usbuhci.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\usbuhci.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\usbvideo.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\usbvideo.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\USBXHCI.SYS" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\USBXHCI.SYS" is compressed (flags = 1)File "C:\Windows\System32\drivers\vdrvroot.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\vdrvroot.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\vhdmp.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\vhdmp.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\MTConfig.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\MTConfig.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\npsvctrig.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\npsvctrig.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\fxppm.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\fxppm.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\hdaudbus.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\hdaudbus.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\hidbatt.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\hidbatt.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\hidbth.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\hidbth.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\hidclass.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\hidclass.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\hidi2c.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\hidi2c.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\hidparse.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\hidparse.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\hidusb.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\hidusb.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\i8042prt.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\i8042prt.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\volmgr.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\volmgr.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\volsnap.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\volsnap.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\vwifibus.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\vwifibus.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\wacompen.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\wacompen.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\wmiacpi.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\wmiacpi.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\WSDPrint.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\WSDPrint.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\cdrom.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\cdrom.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\circlass.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\circlass.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\CmBatt.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\CmBatt.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\CompositeBus.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\CompositeBus.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\disk.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\disk.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\drmk.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\drmk.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\drmkaud.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\drmkaud.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\kbdclass.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\kbdclass.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\kbdhid.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\kbdhid.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\kdnic.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\kdnic.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\msgpiowin32.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\msgpiowin32.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\msisadrv.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\msisadrv.sys" is compressed (flags = 1)File "C:\Windows\System32\drivers\msiscsi.sys" is compressed (flags = 1)File "C:\WINDOWS\SYSTEM32\drivers\msiscsi.sys" is compressed (flags = 1)Done!Drive 0This is a System driveScanning MBR on drive 0...Inspecting partition table:This drive is a GPT Drive.MBR Signature: 55AADisk Signature: DAACC22E GPT Protective MBR Partition information: Partition 0 type is EFI-GPT (0xee) Partition is NOT ACTIVE. Partition starts at LBA: 1 Numsec = 4294967295 Partition 1 type is Empty (0x0) Partition is NOT ACTIVE. Partition starts at LBA: 0 Numsec = 0 Partition 2 type is Empty (0x0) Partition is NOT ACTIVE. Partition starts at LBA: 0 Numsec = 0 Partition 3 type is Empty (0x0) Partition is NOT ACTIVE. Partition starts at LBA: 0 Numsec = 0 GPT Partition information: GPT Header Signature 4546492050415254 GPT Header Revision 65536 Size 92 CRC 1376312642 GPT Header CurrentLba = 1 BackupLba 1953525167 GPT Header FirstUsableLba 34 LastUsableLba 1953525134 GPT Header Guid 3d76fb3-e766-4a6b-a8bc-d640678ae6d GPT Header Contains 128 partition entries starting at LBA 2 GPT Header Partition entry size = 128 Backup GPT header Signature 4546492050415254 Backup GPT header Revision 65536 Size 92 CRC 1376312642 Backup GPT header CurrentLba = 1953525167 BackupLba 1 Backup GPT header FirstUsableLba 34 LastUsableLba 1953525134 Backup GPT header Guid 3d76fb3-e766-4a6b-a8bc-d640678ae6d Backup GPT header Contains 128 partition entries starting at LBA 1953525135 Backup GPT header Partition entry size = 128 Partition 0 Type c12a7328-f81f-11d2-ba4b-0a0c93ec93b Partition ID e1e93cdf-6381-4a8e-b9b0-556215a69fb FirstLBA 2048 Last LBA 1026047 Attributes 0 Partition Name EFI system partition GPT Partition 0 is bootable Partition 1 Type 796badd3-6bbf-4d9f-b631-466eb71a4965 Partition ID b6720ef5-df76-439b-a871-31a4730d974 FirstLBA 1026048 Last LBA 1107967 Attributes 1 Partition Name Basic data partition Partition 2 Type e3c9e316-b5c-4db8-817d-f92df0215ae Partition ID 52e26b81-a708-41ad-89f6-a4ccddcac77 FirstLBA 1107968 Last LBA 1370111 Attributes 0 Partition Name Microsoft reserved partition Partition 3 Type de94bba4-6d1-4d40-a16a-bfd5179d6ac Partition ID 9f9e49fe-7001-402c-a242-cb5ceb3ad441 FirstLBA 1370112 Last LBA 2394111 Attributes 1 Partition Name Basic data partition Partition 4 Type ebd0a0a2-b9e5-4433-87c0-68b6b72699c7 Partition ID f0e2df27-2a01-42ab-9abf-3bebbf542ecb FirstLBA 2394112 Last LBA 1927608319 Attributes 0 Partition Name Basic data partition Partition 5 Type de94bba4-6d1-4d40-a16a-bfd5179d6ac Partition ID 658fc788-bf12-4464-b96-8dbe7997ebb FirstLBA 1927608320 Last LBA 1928529919 Attributes 1 Partition Name Partition 6 Type de94bba4-6d1-4d40-a16a-bfd5179d6ac Partition ID eb637425-9556-490c-bcf9-9f2adfb5c52 FirstLBA 1928529920 Last LBA 1953523119 Attributes 1 Partition Name Microsoft recovery partition Disk Size: 1000204886016 bytesSector size: 512 bytes Done!Physical Sector Size: 512Drive: 1, DevicePointer: 0xffffe001556ed560, DeviceName: \Device\Harddisk1\DR2\, DriverName: \Driver\disk\--------- Disk Stack ------DevicePointer: 0xffffe0015601e040, DeviceName: Unknown, DriverName: \Driver\partmgr\DevicePointer: 0xffffe001556ed560, DeviceName: \Device\Harddisk1\DR2\, DriverName: \Driver\disk\DevicePointer: 0xffffe0015682f060, DeviceName: \Device\00000075\, DriverName: \Driver\USBSTOR\------------ End ----------Alternate DeviceName: \Device\Harddisk1\DR2\, DriverName: \Driver\disk\Upper DeviceData: 0x0, 0x0, 0x0Lower DeviceData: 0x0, 0x0, 0x0Drive 1Scanning MBR on drive 1...Inspecting partition table:MBR Signature: 55AADisk Signature: 0 Partition information: Partition 0 type is Other (0xb) Partition is NOT ACTIVE. Partition starts at LBA: 32 Numsec = 15625184 Partition 1 type is Empty (0x0) Partition is NOT ACTIVE. Partition starts at LBA: 0 Numsec = 0 Partition 2 type is Empty (0x0) Partition is NOT ACTIVE. Partition starts at LBA: 0 Numsec = 0 Partition 3 type is Empty (0x0) Partition is NOT ACTIVE. Partition starts at LBA: 0 Numsec = 0 Disk Size: 8000110592 bytesSector size: 512 bytes Done!Scan finished======================================= Removal queue found; removal startedRemoving C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-i.mbam...Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-r.mbam...Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-1-i.mbam...Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-1-r.mbam...Removal finished please advise, thank you
  4. jpark1
    here is the roguekiller log RogueKiller V10.0.8.0 (x64) [Nov 20 2014] by Adlice Softwaremail : http://www.adlice.com/contact/Feedback : http://forum.adlice.comWebsite : http://www.adlice.com/softwares/roguekiller/Blog : http://www.adlice.com Operating System : Windows 8.1 (6.3.9200 ) 64 bits versionStarted in : Normal modeUser : susiepark [Administrator]Mode : Scan -- Date : 11/20/2014 19:54:34 ¤¤¤ Processes : 0 ¤¤¤ ¤¤¤ Registry : 10 ¤¤¤[PUM.Proxy] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyEnable : 1 -> Found[PUM.Proxy] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyEnable : 1 -> Found[PUM.Proxy] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyServer : http=127.0.0.1:8800;https=127.0.0.1:8800 -> Found[PUM.Proxy] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyServer : http=127.0.0.1:8800;https=127.0.0.1:8800 -> Found[PUM.HomePage] (X64) HKEY_USERS\S-1-5-21-1190109235-2420750292-1459495116-1001\Software\Microsoft\Internet Explorer\Main | Start Page : about:Tabs -> Found[PUM.HomePage] (X86) HKEY_USERS\S-1-5-21-1190109235-2420750292-1459495116-1001\Software\Microsoft\Internet Explorer\Main | Start Page : about:Tabs -> Found[PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> Found[PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> Found[PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> Found[PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> Found ¤¤¤ Tasks : 0 ¤¤¤ ¤¤¤ Files : 0 ¤¤¤ ¤¤¤ Hosts File : 0 ¤¤¤ ¤¤¤ Antirootkit : 0 (Driver: Loaded) ¤¤¤ ¤¤¤ Web browsers : 0 ¤¤¤ ¤¤¤ MBR Check : ¤¤¤+++++ PhysicalDrive0: WDC WD10JPVT-75A1YT0 +++++--- User ---[MBR] 6a426ee6c12dfee4a4c6f1d604bea0db[bSP] 6a7971da958bcf50b7410e1c31187f65 : Empty MBR CodePartition table:0 - [XXXXXX] UNKNOWN (0x0) [VISIBLE] Offset (sectors): 1 | Size: 2097152 MBUser = LL1 ... OKUser = LL2 ... OK +++++ PhysicalDrive1: SanDisk Cruzer USB Device +++++--- User ---[MBR] 8e9737343bfa63bf09ce4a0d4fa6c636[bSP] df4f83c1f72e36823a12b0dfc7617313 : Empty MBR CodePartition table:0 - [XXXXXX] FAT32 (0xb) [VISIBLE] Offset (sectors): 32 | Size: 7629 MBUser = LL1 ... OKError reading LL2 MBR! ([32] The request is not supported. ) please advise. thank you
  5. jpark1
    The time and date settings are current and correct. here are the logs MiniToolBox by Farbar Version: 21-07-2014Ran by susiepark (administrator) on 20-11-2014 at 19:47:10Running from "C:\Users\susiepark\Desktop"Microsoft Windows 8.1 (X64)Boot Mode: Normal*************************************************************************** ========================= Flush DNS: =================================== Windows IP Configuration Successfully flushed the DNS Resolver Cache. ========================= IE Proxy Settings: ============================== Proxy is not enabled.No Proxy Server is set. "Reset IE Proxy Settings": IE Proxy Settings were reset. ========================= FF Proxy Settings: ============================== "Reset FF Proxy Settings": Firefox Proxy settings were reset. ========================= Hosts content: ================================= ========================= IP Configuration: ================================ Intel® Centrino® Wireless-N 2230 = Wi-Fi (Connected)Realtek PCIe FE Family Controller = Ethernet (Media disconnected)Bluetooth Device (Personal Area Network) = Bluetooth Network Connection (Media disconnected) # ----------------------------------# IPv4 Configuration# ----------------------------------pushd interface ipv4 resetset global icmpredirects=enabledset interface interface="Local Area Connection* 1" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabledset interface interface="Ethernet" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabledset interface interface="Wi-Fi" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabledset interface interface="Bluetooth Network Connection" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabledset interface interface="ethernet_12" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabledset interface interface="Local Area Connection* 12" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabledset interface interface="ethernet_11" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabledset interface interface="ethernet_3" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled popd# End of IPv4 configuration Windows IP Configuration Host Name . . . . . . . . . . . . : susie Primary Dns Suffix . . . . . . . : Node Type . . . . . . . . . . . . : Hybrid IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : No DNS Suffix Search List. . . . . . : home Wireless LAN adapter Local Area Connection* 12: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Microsoft Wi-Fi Direct Virtual Adapter Physical Address. . . . . . . . . : 84-A6-C8-B4-0B-C8 DHCP Enabled. . . . . . . . . . . : Yes Autoconfiguration Enabled . . . . : Yes Ethernet adapter Bluetooth Network Connection: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Bluetooth Device (Personal Area Network) Physical Address. . . . . . . . . : 84-A6-C8-B4-0B-CB DHCP Enabled. . . . . . . . . . . : Yes Autoconfiguration Enabled . . . . : Yes Wireless LAN adapter Wi-Fi: Connection-specific DNS Suffix . : home Description . . . . . . . . . . . : Intel® Centrino® Wireless-N 2230 Physical Address. . . . . . . . . : 84-A6-C8-B4-0B-C7 DHCP Enabled. . . . . . . . . . . : Yes Autoconfiguration Enabled . . . . : Yes Link-local IPv6 Address . . . . . : fe80::7cce:d146:1bfb:124d%4(Preferred) IPv4 Address. . . . . . . . . . . : 192.168.1.8(Preferred) Subnet Mask . . . . . . . . . . . : 255.255.255.0 Lease Obtained. . . . . . . . . . : Thursday, November 20, 2014 7:40:56 PM Lease Expires . . . . . . . . . . : Friday, November 21, 2014 7:40:55 PM Default Gateway . . . . . . . . . : 192.168.1.1 DHCP Server . . . . . . . . . . . : 192.168.1.1 DHCPv6 IAID . . . . . . . . . . . : 260351688 DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-18-45-00-5D-84-A6-C8-B4-0B-C7 DNS Servers . . . . . . . . . . . : 192.168.1.1 NetBIOS over Tcpip. . . . . . . . : Enabled Ethernet adapter Ethernet: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Realtek PCIe FE Family Controller Physical Address. . . . . . . . . : E0-DB-55-CE-C1-0E DHCP Enabled. . . . . . . . . . . : Yes Autoconfiguration Enabled . . . . : YesServer: Wireless_Broadband_Router.homeAddress: 192.168.1.1 Name: google.comAddresses: 2607:f8b0:4007:807::1006 74.125.239.161 74.125.239.169 74.125.239.166 74.125.239.160 74.125.239.162 74.125.239.165 74.125.239.174 74.125.239.167 74.125.239.164 74.125.239.168 74.125.239.163 Pinging google.com [74.125.239.165] with 32 bytes of data:Reply from 74.125.239.165: bytes=32 time=25ms TTL=57Reply from 74.125.239.165: bytes=32 time=24ms TTL=57 Ping statistics for 74.125.239.165: Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),Approximate round trip times in milli-seconds: Minimum = 24ms, Maximum = 25ms, Average = 24msServer: Wireless_Broadband_Router.homeAddress: 192.168.1.1 Name: yahoo.comAddresses: 98.138.253.109 206.190.36.45 98.139.183.24 Pinging yahoo.com [206.190.36.45] with 32 bytes of data:Reply from 206.190.36.45: bytes=32 time=55ms TTL=52Reply from 206.190.36.45: bytes=32 time=54ms TTL=52 Ping statistics for 206.190.36.45: Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),Approximate round trip times in milli-seconds: Minimum = 54ms, Maximum = 55ms, Average = 54ms Pinging 127.0.0.1 with 32 bytes of data:Reply from 127.0.0.1: bytes=32 time<1ms TTL=128Reply from 127.0.0.1: bytes=32 time<1ms TTL=128 Ping statistics for 127.0.0.1: Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),Approximate round trip times in milli-seconds: Minimum = 0ms, Maximum = 0ms, Average = 0ms===========================================================================Interface List 8...84 a6 c8 b4 0b c8 ......Microsoft Wi-Fi Direct Virtual Adapter 6...84 a6 c8 b4 0b cb ......Bluetooth Device (Personal Area Network) 4...84 a6 c8 b4 0b c7 ......Intel® Centrino® Wireless-N 2230 3...e0 db 55 ce c1 0e ......Realtek PCIe FE Family Controller 1...........................Software Loopback Interface 1=========================================================================== IPv4 Route Table===========================================================================Active Routes:Network Destination Netmask Gateway Interface Metric 0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.8 25 127.0.0.0 255.0.0.0 On-link 127.0.0.1 306 127.0.0.1 255.255.255.255 On-link 127.0.0.1 306 127.255.255.255 255.255.255.255 On-link 127.0.0.1 306 192.168.1.0 255.255.255.0 On-link 192.168.1.8 281 192.168.1.8 255.255.255.255 On-link 192.168.1.8 281 192.168.1.255 255.255.255.255 On-link 192.168.1.8 281 224.0.0.0 240.0.0.0 On-link 127.0.0.1 306 224.0.0.0 240.0.0.0 On-link 192.168.1.8 281 255.255.255.255 255.255.255.255 On-link 127.0.0.1 306 255.255.255.255 255.255.255.255 On-link 192.168.1.8 281===========================================================================Persistent Routes: None IPv6 Route Table===========================================================================Active Routes: If Metric Network Destination Gateway 1 306 ::1/128 On-link 4 281 fe80::/64 On-link 4 281 fe80::7cce:d146:1bfb:124d/128 On-link 1 306 ff00::/8 On-link 4 281 ff00::/8 On-link===========================================================================Persistent Routes: None========================= Winsock entries ===================================== Catalog5 01 C:\WINDOWS\SysWOW64\napinsp.dll [53760] (Microsoft Corporation)Catalog5 02 C:\WINDOWS\SysWOW64\pnrpnsp.dll [68096] (Microsoft Corporation)Catalog5 03 C:\WINDOWS\SysWOW64\pnrpnsp.dll [68096] (Microsoft Corporation)Catalog5 04 C:\WINDOWS\SysWOW64\NLAapi.dll [64000] (Microsoft Corporation)Catalog5 05 C:\WINDOWS\SysWOW64\mswsock.dll [270848] (Microsoft Corporation)Catalog5 06 C:\WINDOWS\SysWOW64\winrnr.dll [21504] (Microsoft Corporation)Catalog5 07 C:\WINDOWS\SysWOW64\wshbth.dll [51200] (Microsoft Corporation)Catalog9 01 C:\WINDOWS\SysWOW64\mswsock.dll [270848] (Microsoft Corporation)Catalog9 02 C:\WINDOWS\SysWOW64\mswsock.dll [270848] (Microsoft Corporation)Catalog9 03 C:\WINDOWS\SysWOW64\mswsock.dll [270848] (Microsoft Corporation)Catalog9 04 C:\WINDOWS\SysWOW64\mswsock.dll [270848] (Microsoft Corporation)Catalog9 05 C:\WINDOWS\SysWOW64\mswsock.dll [270848] (Microsoft Corporation)Catalog9 06 C:\WINDOWS\SysWOW64\mswsock.dll [270848] (Microsoft Corporation)Catalog9 07 C:\WINDOWS\SysWOW64\mswsock.dll [270848] (Microsoft Corporation)Catalog9 08 C:\WINDOWS\SysWOW64\mswsock.dll [270848] (Microsoft Corporation)Catalog9 09 C:\WINDOWS\SysWOW64\mswsock.dll [270848] (Microsoft Corporation)Catalog9 10 C:\WINDOWS\SysWOW64\mswsock.dll [270848] (Microsoft Corporation)Catalog9 11 C:\WINDOWS\SysWOW64\mswsock.dll [270848] (Microsoft Corporation)x64-Catalog5 01 C:\Windows\System32\napinsp.dll [67584] (Microsoft Corporation)x64-Catalog5 02 C:\Windows\System32\pnrpnsp.dll [87040] (Microsoft Corporation)x64-Catalog5 03 C:\Windows\System32\pnrpnsp.dll [87040] (Microsoft Corporation)x64-Catalog5 04 C:\Windows\System32\NLAapi.dll [84480] (Microsoft Corporation)x64-Catalog5 05 C:\Windows\System32\mswsock.dll [338432] (Microsoft Corporation)x64-Catalog5 06 C:\Windows\System32\winrnr.dll [30208] (Microsoft Corporation)x64-Catalog5 07 C:\Windows\System32\wshbth.dll [63488] (Microsoft Corporation)x64-Catalog9 01 C:\Windows\System32\mswsock.dll [338432] (Microsoft Corporation)x64-Catalog9 02 C:\Windows\System32\mswsock.dll [338432] (Microsoft Corporation)x64-Catalog9 03 C:\Windows\System32\mswsock.dll [338432] (Microsoft Corporation)x64-Catalog9 04 C:\Windows\System32\mswsock.dll [338432] (Microsoft Corporation)x64-Catalog9 05 C:\Windows\System32\mswsock.dll [338432] (Microsoft Corporation)x64-Catalog9 06 C:\Windows\System32\mswsock.dll [338432] (Microsoft Corporation)x64-Catalog9 07 C:\Windows\System32\mswsock.dll [338432] (Microsoft Corporation)x64-Catalog9 08 C:\Windows\System32\mswsock.dll [338432] (Microsoft Corporation)x64-Catalog9 09 C:\Windows\System32\mswsock.dll [338432] (Microsoft Corporation)x64-Catalog9 10 C:\Windows\System32\mswsock.dll [338432] (Microsoft Corporation)x64-Catalog9 11 C:\Windows\System32\mswsock.dll [338432] (Microsoft Corporation) ========================= Event log errors: =============================== Application errors:==================Error: (11/17/2014 11:24:15 PM) (Source: Application Error) (User: )Description: Faulting application name: Explorer.EXE, version: 6.3.9600.17284, time stamp: 0x53f816dcFaulting module name: twinui.dll, version: 6.3.9600.17324, time stamp: 0x53f822bfException code: 0x80270249Fault offset: 0x000000000029076fFaulting process id: 0xedcFaulting application start time: 0xExplorer.EXE0Faulting application path: Explorer.EXE1Faulting module path: Explorer.EXE2Report Id: Explorer.EXE3Faulting package full name: Explorer.EXE4Faulting package-relative application ID: Explorer.EXE5 Error: (11/17/2014 10:54:54 PM) (Source: Application Error) (User: )Description: Faulting application name: Explorer.EXE, version: 6.3.9600.17284, time stamp: 0x53f816dcFaulting module name: twinui.dll, version: 6.3.9600.17324, time stamp: 0x53f822bfException code: 0x80270249Fault offset: 0x000000000029076fFaulting process id: 0xd24Faulting application start time: 0xExplorer.EXE0Faulting application path: Explorer.EXE1Faulting module path: Explorer.EXE2Report Id: Explorer.EXE3Faulting package full name: Explorer.EXE4Faulting package-relative application ID: Explorer.EXE5 Error: (11/17/2014 08:28:48 AM) (Source: Application Error) (User: )Description: Faulting application name: Explorer.EXE, version: 6.3.9600.17284, time stamp: 0x53f816dcFaulting module name: twinui.dll, version: 6.3.9600.17324, time stamp: 0x53f822bfException code: 0x80270249Fault offset: 0x000000000029076fFaulting process id: 0x6b0Faulting application start time: 0xExplorer.EXE0Faulting application path: Explorer.EXE1Faulting module path: Explorer.EXE2Report Id: Explorer.EXE3Faulting package full name: Explorer.EXE4Faulting package-relative application ID: Explorer.EXE5 Error: (11/14/2014 00:14:33 AM) (Source: Application Error) (User: )Description: Faulting application name: Explorer.EXE, version: 6.3.9600.17284, time stamp: 0x53f816dcFaulting module name: twinui.dll, version: 6.3.9600.17284, time stamp: 0x53f81955Exception code: 0x80270249Fault offset: 0x000000000028d77bFaulting process id: 0xd68Faulting application start time: 0xExplorer.EXE0Faulting application path: Explorer.EXE1Faulting module path: Explorer.EXE2Report Id: Explorer.EXE3Faulting package full name: Explorer.EXE4Faulting package-relative application ID: Explorer.EXE5 Error: (11/13/2014 11:52:32 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: SUSIE)Description: Activation of app microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 failed with error: -2147220995 See the Microsoft-Windows-TWinUI/Operational log for additional information. Error: (11/13/2014 11:52:32 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: SUSIE)Description: Activation of app microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 failed with error: -2147220995 See the Microsoft-Windows-TWinUI/Operational log for additional information. System errors:=============Error: (11/17/2014 11:01:26 PM) (Source: Service Control Manager) (User: )Description: The Dell Digital Delivery Service service terminated unexpectedly. It has done this 1 time(s). Error: (11/17/2014 10:58:24 PM) (Source: DCOM) (User: SUSIE)Description: Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mca Error: (11/17/2014 10:56:56 PM) (Source: DCOM) (User: SUSIE)Description: Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mca Error: (11/17/2014 10:55:43 PM) (Source: Service Control Manager) (User: )Description: The Dell Digital Delivery Service service terminated unexpectedly. It has done this 1 time(s). Error: (11/17/2014 10:54:56 PM) (Source: DCOM) (User: SUSIE)Description: Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mca Error: (11/17/2014 08:28:49 AM) (Source: DCOM) (User: SUSIE)Description: "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20605_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server31Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mcaUnavailableUnavailable Error: (11/17/2014 08:28:49 AM) (Source: DCOM) (User: SUSIE)Description: Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mca Error: (11/17/2014 02:43:44 AM) (Source: Service Control Manager) (User: )Description: The Dell Digital Delivery Service service terminated unexpectedly. It has done this 1 time(s). Error: (11/15/2014 01:47:44 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT AUTHORITY)Description: Installation Failure: Windows failed to install the following update with error 0x80072ee4: Microsoft.BingSports. Error: (11/14/2014 10:54:17 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT AUTHORITY)Description: Installation Failure: Windows failed to install the following update with error 0x80072ee4: Microsoft.BingSports. Microsoft Office Sessions:=========================Error: (11/17/2014 11:24:15 PM) (Source: Application Error)(User: )Description: Explorer.EXE6.3.9600.1728453f816dctwinui.dll6.3.9600.1732453f822bf80270249000000000029076fedc01d00300a7a0fd89C:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\twinui.dlle60a0e60-6ef3-11e4-8341-84a6c8b40bcb Error: (11/17/2014 10:54:54 PM) (Source: Application Error)(User: )Description: Explorer.EXE6.3.9600.1728453f816dctwinui.dll6.3.9600.1732453f822bf80270249000000000029076fd2401d002fc890c50e1C:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\twinui.dllcc3538a4-6eef-11e4-8340-84a6c8b40bcb Error: (11/17/2014 08:28:48 AM) (Source: Application Error)(User: )Description: Explorer.EXE6.3.9600.1728453f816dctwinui.dll6.3.9600.1732453f822bf80270249000000000029076f6b001d002838fa0eedaC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\twinui.dllce87ec96-6e76-11e4-833f-84a6c8b40bcb Error: (11/14/2014 00:14:33 AM) (Source: Application Error)(User: )Description: Explorer.EXE6.3.9600.1728453f816dctwinui.dll6.3.9600.1728453f8195580270249000000000028d77bd6801cfffe3007bfba5C:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\twinui.dll4381a2a2-6bd6-11e4-833e-84a6c8b40bcb Error: (11/13/2014 11:52:32 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: SUSIE)Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1-2147220995 Error: (11/13/2014 11:52:32 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: SUSIE)Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1-2147220995 CodeIntegrity Errors:=================================== Date: 2014-11-01 01:28:54.719 Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Settings Manager\smdmf\x64\sysapcrt.dll that did not meet the Windows signing level requirements. Date: 2014-11-01 01:28:54.578 Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Settings Manager\smdmf\sysapcrt.dll that did not meet the Windows signing level requirements. Date: 2014-10-31 22:35:55.795 Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Malwarebytes Anti-Malware\mbampt.exe that did not meet the Windows signing level requirements. Date: 2014-10-31 22:35:21.508 Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Malwarebytes Anti-Malware\mbampt.exe that did not meet the Windows signing level requirements. Date: 2014-10-31 22:14:49.071 Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Settings Manager\smdmf\x64\sysapcrt.dll that did not meet the Windows signing level requirements. Date: 2014-10-31 22:14:48.899 Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Settings Manager\smdmf\sysapcrt.dll that did not meet the Windows signing level requirements. =========================== Installed Programs ============================avast! Free Antivirus (HKLM-x32\...\avast) (Version: 9.0.2021 - AVAST Software)Conexant SmartAudio HD (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.54.40.0 - Conexant)CyberLink LabelPrint 2.5 (x32 Version: 2.5.5415a - CyberLink Corp.) HiddenCyberLink Media Suite 10 (x32 Version: 10.0.1.1913 - CyberLink Corp.) HiddenCyberLink Media Suite Essentials (HKLM-x32\...\InstallShield_{8F14AA37-5193-4A14-BD5B-BDF9B361AEF7}) (Version: 10.0 - CyberLink Corp.)CyberLink Power2Go 8 (x32 Version: 8.0.0.1904 - CyberLink Corp.) HiddenCyberLink PowerDirector 10 (x32 Version: 10.0.1.1904 - CyberLink Corp.) HiddenCyberLink PowerDVD 10 (x32 Version: 10.0.4318.52 - CyberLink Corp.) HiddenD3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) HiddenDefinition Update for Microsoft Office 2010 (KB2899521) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{E48DACEA-5789-4CC5-8584-2E268C560131}) (Version: - Microsoft)Dell Backup and Recovery (HKLM-x32\...\{0ED7EE95-6A97-47AA-AD73-152C08A15B04}) (Version: 1.7.5.63 - Dell Inc.)Dell Digital Delivery (HKLM-x32\...\{D9ED3EFC-AB00-4CE0-ADED-80EE6B1158A7}) (Version: 2.2.2000.0 - Dell Products, LP)Dell Touchpad (HKLM\...\Elantech) (Version: 11.3.1.4 - ELAN Microelectronic Corp.)ERUNT 1.1j (HKLM-x32\...\ERUNT_is1) (Version: - Lars Hederer)Intel® Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1008 - Intel Corporation)Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)Intel® PRO/Wireless Driver (Version: 16.01.5000.0577 - Intel Corporation) HiddenIntel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3621 - Intel Corporation)Intel® PROSet/Wireless for Bluetooth® + High Speed (HKLM\...\{89478C31-5CE8-461A-9084-9A0AF059F84F}) (Version: 15.5.0.0344 - Intel Corporation)Intel® PROSet/Wireless Software for Bluetooth® Technology (HKLM\...\{302600C1-6BDF-4FD1-1309-148929CC1385}) (Version: 3.1.1309.0390 - Intel Corporation)Intel® Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.0.1207 - Intel Corporation)Intel® Turbo Boost Technology Monitor 2.6 (HKLM\...\{6C9365EB-1F9E-4893-9196-3EC77C88D0C5}) (Version: 2.6.2.0 - Intel)Intel® WiDi (HKLM\...\{EDBA2433-0910-4C72-8C5B-8FEDAE3EF18E}) (Version: 3.5.34.0 - Intel Corporation)Intel® PROSet/Wireless Software (HKLM-x32\...\{c9967fbd-e3c3-4ed0-992a-5b33260f2944}) (Version: 16.1.5 - Intel Corporation)Intel® PROSet/Wireless WiFi Software (Version: 16.01.5000.0269 - Intel Corporation) HiddenIntel® Trusted Connect Service Client (Version: 1.24.388.1 - Intel Corporation) HiddenMalwarebytes Anti-Malware version 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)Microsoft App Update for microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe (x64) (Version: 1.0.0.0 - Microsoft Corporation) HiddenMicrosoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) HiddenMicrosoft Office Access MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) HiddenMicrosoft Office Access Setup Metadata MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) HiddenMicrosoft Office Excel MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) HiddenMicrosoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) HiddenMicrosoft Office OneNote MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) HiddenMicrosoft Office Outlook MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) HiddenMicrosoft Office PowerPoint MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) HiddenMicrosoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) HiddenMicrosoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) HiddenMicrosoft Office Proof (Spanish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) HiddenMicrosoft Office Proofing (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) HiddenMicrosoft Office Publisher MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) HiddenMicrosoft Office Shared 64-bit MUI (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) HiddenMicrosoft Office Shared 64-bit Setup Metadata MUI (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) HiddenMicrosoft Office Shared MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) HiddenMicrosoft Office Shared Setup Metadata MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) HiddenMicrosoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) HiddenMicrosoft Office Word MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) HiddenMicrosoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)Movie Maker (x32 Version: 16.4.3503.0728 - Microsoft Corporation) HiddenMSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) HiddenMSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) HiddenMSVCRT110_amd64 (Version: 16.4.1108.0727 - Microsoft) HiddenMy Dell (HKLM\...\PC-Doctor for Windows) (Version: 3.5.6426.22 - PC-Doctor, Inc.)Photo Common (x32 Version: 16.4.3503.0728 - Microsoft Corporation) HiddenPhoto Gallery (x32 Version: 16.4.3503.0728 - Microsoft Corporation) HiddenQuickset64 (HKLM\...\{87CF757E-C1F1-4D22-865C-00C6950B5258}) (Version: 10.15.005 - Dell Inc.)Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.8400.39030 - Realtek Semiconductor Corp.)Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version: - Microsoft) HiddenShared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)Solid YouTube Downloader and Converter 6.1.9.0 (HKLM-x32\...\{66732EEE-ECBC-4CA6-A474-ytd}_is1) (Version: - DreamVideoSoft,Inc.)Update for Korean Microsoft IME Standard Dictionary (HKLM\...\{75A54180-CA5E-47B8-AFBB-29337B976B21}) (Version: 16.0.662.1 - Microsoft Corporation)Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version: - Microsoft)Update for Microsoft Excel 2010 (KB2889935) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{153CD843-3EDC-412C-95B1-F36237DF8415}) (Version: - Microsoft)Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft)Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft)Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version: - Microsoft)Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version: - Microsoft)Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft)Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft)Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version: - Microsoft)Update for Microsoft Office 2010 (KB2589386) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{A4F91D60-654C-4892-BFD3-0D41ADA649B6}) (Version: - Microsoft)Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version: - Microsoft)Update for Microsoft Office 2010 (KB2687275) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{0B7744D2-1FDD-4843-9987-7CE11B79F370}) (Version: - Microsoft)Update for Microsoft Office 2010 (KB2687502) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{7DE7DF97-82FE-4B3A-AB8D-1621F9CC464A}) (Version: - Microsoft)Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version: - Microsoft)Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version: - Microsoft)Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F1A20C69-9FE5-40FD-9CD5-84EABC2EF64A}) (Version: - Microsoft)Update for Microsoft Office 2010 (KB2837581) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{334FB202-28D7-4BA4-8BC9-4FE4AB233EA0}) (Version: - Microsoft)Update for Microsoft Office 2010 (KB2837602) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{8158D96B-083A-4FE4-8587-B5D0F49FE4B8}) (Version: - Microsoft)Update for Microsoft Office 2010 (KB2837602) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{8158D96B-083A-4FE4-8587-B5D0F49FE4B8}) (Version: - Microsoft)Update for Microsoft Office 2010 (KB2837606) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B0D672F7-883E-4279-8E75-D97A5445AB46}) (Version: - Microsoft)Update for Microsoft Office 2010 (KB2878252) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B0DB9F71-E0F7-4FE6-8925-35B860CAC0C4}) (Version: - Microsoft)Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0C0A-0000-0000000FF1CE}_Office14.SingleImage_{794A0574-4E2F-4D58-B2A0-D7460ACDC85C}) (Version: - Microsoft)Update for Microsoft Office 2010 (KB2889828) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{C1954E2B-1672-4E5C-B564-F8CB2D08345B}) (Version: - Microsoft)Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft)Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft)Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0409-0000-0000000FF1CE}_Office14.SingleImage_{DCE104A1-1875-4469-A83D-A5BFA6C4640F}) (Version: - Microsoft)Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version: - Microsoft)Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0409-0000-0000000FF1CE}_Office14.SingleImage_{334AA0A1-2BB1-4D74-B66A-2B2C4D9C2C87}) (Version: - Microsoft)Update for Microsoft PowerPoint 2010 (KB2878251) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{521F54B6-E2E5-462D-946E-8161830DDF18}) (Version: - Microsoft)Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft)Update for Microsoft Visio 2010 (KB2880526) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{7B29D8B8-6A87-496C-A65E-B935E740448A}) (Version: - Microsoft)Update for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{38CF30E4-3348-4BD1-A859-B630C355A56F}) (Version: - Microsoft)Windows Live Communications Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) HiddenWindows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3503.0728 - Microsoft Corporation)Windows Live Essentials (x32 Version: 16.4.3503.0728 - Microsoft Corporation) HiddenWindows Live Installer (x32 Version: 16.4.3503.0728 - Microsoft Corporation) HiddenWindows Live Photo Common (x32 Version: 16.4.3503.0728 - Microsoft Corporation) HiddenWindows Live PIMT Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) HiddenWindows Live SOXE (x32 Version: 16.4.3503.0728 - Microsoft Corporation) HiddenWindows Live SOXE Definitions (x32 Version: 16.4.3503.0728 - Microsoft Corporation) HiddenWindows Live UX Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) HiddenWindows Live UX Platform Language Pack (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden ========================= Devices: ================================ Name: Microsoft AC AdapterDescription: Microsoft AC AdapterClass Guid: {72631e54-78a4-11d0-bcf7-00aa00b7b32a}Manufacturer: MicrosoftService: CmBatt Name: System boardDescription: System boardClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard system devices)Service: Name: Motherboard resourcesDescription: Motherboard resourcesClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard system devices)Service: Name: Motherboard resourcesDescription: Motherboard resourcesClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard system devices)Service: Name: Generic volumeDescription: Generic volumeClass Guid: {71a27cdd-812a-11d0-bec7-08002be2092f}Manufacturer: MicrosoftService: volsnap Name: Microsoft ACPI-Compliant Control Method BatteryDescription: Microsoft ACPI-Compliant Control Method BatteryClass Guid: {72631e54-78a4-11d0-bcf7-00aa00b7b32a}Manufacturer: MicrosoftService: CmBatt Name: Root Print QueueDescription: Local Print QueueClass Guid: {1ed2bbf9-11f0-4084-b21f-ad83a8e6dcdc}Manufacturer: MicrosoftService: Name: USB-IF xHCI USB Host ControllerDescription: USB-IF xHCI USB Host ControllerClass Guid: {8a2edc79-c759-46f2-88af-9d4efe3b5eee}Manufacturer: Intel CorporationService: XHCIPortProblem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)Resolution: Update the driver Name: USB Mass Storage DeviceDescription: USB Mass Storage DeviceClass Guid: {36fc9e60-c465-11cf-8056-444553540000}Manufacturer: Compatible USB storage deviceService: USBSTOR Name: Numeric data processorDescription: Numeric data processorClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard system devices)Service: Name: HP Photosmart C4700 series Class DriverDescription: HP Photosmart C4700 series Class DriverClass Guid: {4d36e979-e325-11ce-bfc1-08002be10318}Manufacturer: HPService: Name: Send To OneNote 2010Description: Local Print QueueClass Guid: {1ed2bbf9-11f0-4084-b21f-ad83a8e6dcdc}Manufacturer: Service: Name: Volume ManagerDescription: Volume ManagerClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: MicrosoftService: volmgr Name: Microsoft Bluetooth EnumeratorDescription: Microsoft Bluetooth EnumeratorClass Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}Manufacturer: MicrosoftService: BthEnum Name: Speakers (Conexant SmartAudio HD)Description: Audio EndpointClass Guid: {c166523c-fe0c-4a94-a586-f1a80cfbbf3e}Manufacturer: MicrosoftService: Name: HID-compliant vendor-defined deviceDescription: HID-compliant vendor-defined deviceClass Guid: {745a17a0-74d3-11d0-b6fe-00a0c90f57da}Manufacturer: (Standard system devices)Service: Name: Microsoft Basic Display DriverDescription: Microsoft Basic Display DriverClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard display types)Service: BasicDisplay Name: Generic USB HubDescription: Generic USB HubClass Guid: {36fc9e60-c465-11cf-8056-444553540000}Manufacturer: (Generic USB Hub)Service: usbhub Name: USB Composite DeviceDescription: USB Composite DeviceClass Guid: {36fc9e60-c465-11cf-8056-444553540000}Manufacturer: (Standard USB Host Controller)Service: usbccgp Name: Bluetooth Device (RFCOMM Protocol TDI)Description: Bluetooth Device (RFCOMM Protocol TDI)Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}Manufacturer: MicrosoftService: RFCOMM Name: High Definition Audio ControllerDescription: High Definition Audio ControllerClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: MicrosoftService: HDAudBus Name: Bluetooth Device (Personal Area Network)Description: Bluetooth Device (Personal Area Network)Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}Manufacturer: MicrosoftService: BthPan Name: Intel® HD Graphics 4000Description: Intel® HD Graphics 4000Class Guid: {4d36e968-e325-11ce-bfc1-08002be10318}Manufacturer: Intel CorporationService: igfx Name: USB Root HubDescription: USB Root HubClass Guid: {36fc9e60-c465-11cf-8056-444553540000}Manufacturer: (Standard USB Host Controller)Service: usbhub Name: Microsoft Windows Management Interface for ACPIDescription: Microsoft Windows Management Interface for ACPIClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: MicrosoftService: WmiAcpi Name: Intel® 82802 Firmware Hub DeviceDescription: Intel® 82802 Firmware Hub DeviceClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: IntelService: Name: Intel® USB 3.0 eXtensible Host Controller - 0100 (Microsoft)Description: USB xHCI Compliant Host ControllerClass Guid: {36fc9e60-c465-11cf-8056-444553540000}Manufacturer: Generic USB xHCI Host ControllerService: USBXHCI Name: High precision event timerDescription: High precision event timerClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard system devices)Service: Name: Intel® 7 Series Chipset Family SATA AHCI ControllerDescription: Intel® 7 Series Chipset Family SATA AHCI ControllerClass Guid: {4d36e96a-e325-11ce-bfc1-08002be10318}Manufacturer: Intel CorporationService: iaStorA Name: Generic USB HubDescription: Generic USB HubClass Guid: {36fc9e60-c465-11cf-8056-444553540000}Manufacturer: (Generic USB Hub)Service: usbhub Name: Composite Bus EnumeratorDescription: Composite Bus EnumeratorClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: MicrosoftService: CompositeBus Name: Microsoft Virtual Drive EnumeratorDescription: Microsoft Virtual Drive EnumeratorClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: MicrosoftService: vdrvroot Name: HID-compliant vendor-defined deviceDescription: HID-compliant vendor-defined deviceClass Guid: {745a17a0-74d3-11d0-b6fe-00a0c90f57da}Manufacturer: (Standard system devices)Service: Name: F:\Description: CruzerClass Guid: {eec5ad98-8080-425f-922a-dabf3de3f69a}Manufacturer: SanDiskService: WUDFWpdFs Name: Intel® Centrino® Wireless-N 2230Description: Intel® Centrino® Wireless-N 2230Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}Manufacturer: Intel CorporationService: NETwNe64 Name: Microsoft Storage Spaces ControllerDescription: Microsoft Storage Spaces ControllerClass Guid: {4d36e97b-e325-11ce-bfc1-08002be10318}Manufacturer: MicrosoftService: spaceport Name: HID-compliant system controllerDescription: HID-compliant system controllerClass Guid: {745a17a0-74d3-11d0-b6fe-00a0c90f57da}Manufacturer: (Standard system devices)Service: Name: Generic volumeDescription: Generic volumeClass Guid: {71a27cdd-812a-11d0-bec7-08002be2092f}Manufacturer: MicrosoftService: volsnap Name: Intel® Management Engine Interface Description: Intel® Management Engine Interface Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: IntelService: MEIx64 Name: HID-compliant consumer control deviceDescription: HID-compliant consumer control deviceClass Guid: {745a17a0-74d3-11d0-b6fe-00a0c90f57da}Manufacturer: MicrosoftService: Name: USB Input Device (Logitech Download Assistant)Description: USB Input Device (Logitech Download Assistant)Class Guid: {745a17a0-74d3-11d0-b6fe-00a0c90f57da}Manufacturer: Logitech (x64)Service: HidUsb Name: Microsoft Kernel Debug Network AdapterDescription: Microsoft Kernel Debug Network AdapterClass Guid: {4d36e972-e325-11ce-bfc1-08002be10318}Manufacturer: MicrosoftService: kdnic Name: Microsoft ACPI-Compliant Embedded ControllerDescription: Microsoft ACPI-Compliant Embedded ControllerClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard system devices)Service: Name: Microsoft XPS Document WriterDescription: Local Print QueueClass Guid: {1ed2bbf9-11f0-4084-b21f-ad83a8e6dcdc}Manufacturer: MicrosoftService: Name: Generic volume shadow copyDescription: Generic volume shadow copyClass Guid: {533c5b84-ec70-11d2-9505-00c04f79deaf}Manufacturer: MicrosoftService: Name: Generic volume shadow copyDescription: Generic volume shadow copyClass Guid: {533c5b84-ec70-11d2-9505-00c04f79deaf}Manufacturer: MicrosoftService: Name: Generic volume shadow copyDescription: Generic volume shadow copyClass Guid: {533c5b84-ec70-11d2-9505-00c04f79deaf}Manufacturer: MicrosoftService: Name: Generic volume shadow copyDescription: Generic volume shadow copyClass Guid: {533c5b84-ec70-11d2-9505-00c04f79deaf}Manufacturer: MicrosoftService: Name: Generic volume shadow copyDescription: Generic volume shadow copyClass Guid: {533c5b84-ec70-11d2-9505-00c04f79deaf}Manufacturer: MicrosoftService: Name: HID-compliant vendor-defined deviceDescription: HID-compliant vendor-defined deviceClass Guid: {745a17a0-74d3-11d0-b6fe-00a0c90f57da}Manufacturer: (Standard system devices)Service: Name: HID-compliant mouseDescription: HID-compliant mouseClass Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}Manufacturer: MicrosoftService: mouhid Name: System timerDescription: System timerClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard system devices)Service: Name: ACPI LidDescription: ACPI LidClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard system devices)Service: Name: Generic volumeDescription: Generic volumeClass Guid: {71a27cdd-812a-11d0-bec7-08002be2092f}Manufacturer: MicrosoftService: volsnap Name: HID Keyboard DeviceDescription: HID Keyboard DeviceClass Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard keyboards)Service: kbdhid Name: Generic volumeDescription: Generic volumeClass Guid: {71a27cdd-812a-11d0-bec7-08002be2092f}Manufacturer: MicrosoftService: volsnap Name: Intel® 7 Series/C216 Chipset Family PCI Express Root Port 1 - 1E10Description: Intel® 7 Series/C216 Chipset Family PCI Express Root Port 1 - 1E10Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: IntelService: pci Name: USB Composite DeviceDescription: USB Composite DeviceClass Guid: {36fc9e60-c465-11cf-8056-444553540000}Manufacturer: (Standard USB Host Controller)Service: usbccgp Name: Standard PS/2 KeyboardDescription: Standard PS/2 KeyboardClass Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard keyboards)Service: i8042prt Name: Generic volumeDescription: Generic volumeClass Guid: {71a27cdd-812a-11d0-bec7-08002be2092f}Manufacturer: MicrosoftService: volsnap Name: Conexant SmartAudio HDDescription: Conexant SmartAudio HDClass Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}Manufacturer: ConexantService: CnxtHdAudService Name: Intel® Centrino® Wireless Bluetooth® 4.0 + High Speed AdapterDescription: Intel® Centrino® Wireless Bluetooth® 4.0 + High Speed AdapterClass Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}Manufacturer: Intel CorporationService: BTHUSB Name: DIRECTV Mediashare RendererDescription: Generic software deviceClass Guid: {62f9c741-b25a-46ce-b54c-9bccce08b6f2}Manufacturer: DIRECTVService: Name: UMBus Root Bus EnumeratorDescription: UMBus Root Bus EnumeratorClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: MicrosoftService: umbus Name: Intel® 7 Series/C216 Chipset Family SMBus Host Controller - 1E22Description: Intel® 7 Series/C216 Chipset Family SMBus Host Controller - 1E22Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: IntelService: Name: Microsoft Device Association Root EnumeratorDescription: Generic software deviceClass Guid: {62f9c741-b25a-46ce-b54c-9bccce08b6f2}Manufacturer: MicrosoftService: Name: ACPI x64-based PCDescription: ACPI x64-based PCClass Guid: {4d36e966-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard computers)Service: \Driver\ACPI_HAL Name: SUSIE: susiepark:Description: Generic software deviceClass Guid: {62f9c741-b25a-46ce-b54c-9bccce08b6f2}Manufacturer: Microsoft CorporationService: Name: PCI Express Root ComplexDescription: PCI Express Root ComplexClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard system devices)Service: pci Name: USB Input DeviceDescription: USB Input DeviceClass Guid: {745a17a0-74d3-11d0-b6fe-00a0c90f57da}Manufacturer: (Standard system devices)Service: HidUsb Name: 3rd Gen Core processor DRAM Controller - 0154Description: 3rd Gen Core processor DRAM Controller - 0154Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: IntelService: Name: Internal Microphone (Conexant SmartAudio HD)Description: Audio EndpointClass Guid: {c166523c-fe0c-4a94-a586-f1a80cfbbf3e}Manufacturer: MicrosoftService: Name: Microsoft ACPI-Compliant SystemDescription: Microsoft ACPI-Compliant SystemClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: MicrosoftService: ACPI Name: Description: Class Guid: Manufacturer: Service: Name: Microsoft Basic Render DriverDescription: Microsoft Basic Render DriverClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: MicrosoftService: BasicRender Name: SanDisk Cruzer USB DeviceDescription: Disk driveClass Guid: {4d36e967-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard disk drives)Service: disk Name: FaxDescription: Local Print QueueClass Guid: {1ed2bbf9-11f0-4084-b21f-ad83a8e6dcdc}Manufacturer: MicrosoftService: Name: Generic PnP MonitorDescription: Generic PnP MonitorClass Guid: {4d36e96e-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard monitor types)Service: monitor Name: Intel® Display AudioDescription: Intel® Display AudioClass Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}Manufacturer: Intel® CorporationService: IntcDAud Name: HP8F6709 (HP Photosmart C4700 series)Description: Generic software deviceClass Guid: {62f9c741-b25a-46ce-b54c-9bccce08b6f2}Manufacturer: HPService: Name: ACPI Fixed Feature ButtonDescription: ACPI Fixed Feature ButtonClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard system devices)Service: Name: Intel® 7 Series/C216 Chipset Family PCI Express Root Port 2 - 1E12Description: Intel® 7 Series/C216 Chipset Family PCI Express Root Port 2 - 1E12Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: IntelService: pci Name: Generic volumeDescription: Generic volumeClass Guid: {71a27cdd-812a-11d0-bec7-08002be2092f}Manufacturer: MicrosoftService: volsnap Name: USB Input DeviceDescription: USB Input DeviceClass Guid: {745a17a0-74d3-11d0-b6fe-00a0c90f57da}Manufacturer: (Standard system devices)Service: HidUsb Name: USB Root HubDescription: USB Root HubClass Guid: {36fc9e60-c465-11cf-8056-444553540000}Manufacturer: (Standard USB Host Controller)Service: usbhub Name: System CMOS/real time clockDescription: System CMOS/real time clockClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard system devices)Service: Name: USB Root Hub (xHCI)Description: USB Root Hub (xHCI)Class Guid: {36fc9e60-c465-11cf-8056-444553540000}Manufacturer: (Standard USB HUBs)Service: USBHUB3 Name: Generic volumeDescription: Generic volumeClass Guid: {71a27cdd-812a-11d0-bec7-08002be2092f}Manufacturer: MicrosoftService: volsnap Name: Microsoft Bluetooth LE EnumeratorDescription: Microsoft Bluetooth LE EnumeratorClass Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}Manufacturer: MicrosoftService: BthLEEnum Name: Programmable interrupt controllerDescription: Programmable interrupt controllerClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard system devices)Service: Name: Generic volumeDescription: Generic volumeClass Guid: {71a27cdd-812a-11d0-bec7-08002be2092f}Manufacturer: MicrosoftService: volsnap Name: Intel® 7 Series/C216 Chipset Family USB Enhanced Host Controller - 1E2DDescription: Intel® 7 Series/C216 Chipset Family USB Enhanced Host Controller - 1E2DClass Guid: {36fc9e60-c465-11cf-8056-444553540000}Manufacturer: IntelService: usbehci Name: ACPI Power ButtonDescription: ACPI Power ButtonClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard system devices)Service: Name: NDIS Virtual Network Adapter EnumeratorDescription: NDIS Virtual Network Adapter EnumeratorClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: MicrosoftService: NdisVirtualBus Name: Integrated WebcamDescription: USB Video DeviceClass Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}Manufacturer: MicrosoftService: usbvideo Name: Realtek USB 2.0 Card ReaderDescription: Realtek USB 2.0 Card ReaderClass Guid: {36fc9e60-c465-11cf-8056-444553540000}Manufacturer: RealtekService: RSUSBVSTOR Name: HP8F6709 (HP Photosmart C4700 series)Description: WSD Print DeviceClass Guid: {c30ecea0-11ef-4ef9-b02e-6af81e6e65c0}Manufacturer: HPService: WSDPrintDevice Name: Intel® HM77 Express Chipset LPC Controller - 1E57Description: Intel® HM77 Express Chipset LPC Controller - 1E57Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: IntelService: msisadrv Name: Motherboard resourcesDescription: Motherboard resourcesClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard system devices)Service: Name: Dell TouchpadDescription: Dell TouchpadClass Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}Manufacturer: ELANService: i8042prt Name: DIRECTV2PC Media ServerDescription: Generic software deviceClass Guid: {62f9c741-b25a-46ce-b54c-9bccce08b6f2}Manufacturer: DIRECTVService: Name: Direct memory access controllerDescription: Direct memory access controllerClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard system devices)Service: Name: HL-DT-ST DVD+-RW GT80NDescription: CD-ROM DriveClass Guid: {4d36e965-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard CD-ROM drives)Service: cdrom Name: WDC WD10JPVT-75A1YT0Description: Disk driveClass Guid: {4d36e967-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard disk drives)Service: disk Name: HP8F6709 (HP Photosmart C4700 series)Description: Local Print QueueClass Guid: {1ed2bbf9-11f0-4084-b21f-ad83a8e6dcdc}Manufacturer: HPService: Name: Microsoft System Management BIOS DriverDescription: Microsoft System Management BIOS DriverClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard system devices)Service: mssmbios Name: Motherboard resourcesDescription: Motherboard resourcesClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard system devices)Service: Name: Airplane Mode Switch CollectionDescription: Airplane Mode Switch CollectionClass Guid: {745a17a0-74d3-11d0-b6fe-00a0c90f57da}Manufacturer: Dell IncService: Name: Intel® Core i5-3210M CPU @ 2.50GHzDescription: Intel ProcessorClass Guid: {50127dc3-0f36-415e-a6cc-4cb3be910b65}Manufacturer: IntelService: intelppm Name: Intel® Core i5-3210M CPU @ 2.50GHzDescription: Intel ProcessorClass Guid: {50127dc3-0f36-415e-a6cc-4cb3be910b65}Manufacturer: IntelService: intelppm Name: Intel® Core i5-3210M CPU @ 2.50GHzDescription: Intel ProcessorClass Guid: {50127dc3-0f36-415e-a6cc-4cb3be910b65}Manufacturer: IntelService: intelppm Name: Intel® Core i5-3210M CPU @ 2.50GHzDescription: Intel ProcessorClass Guid: {50127dc3-0f36-415e-a6cc-4cb3be910b65}Manufacturer: IntelService: intelppm Name: Plug and Play Software Device EnumeratorDescription: Plug and Play Software Device EnumeratorClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard system devices)Service: swenum Name: IWD Bus EnumeratorDescription: IWD Bus EnumeratorClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard system devices)Service: iwdbus Name: Realtek PCIe FE Family ControllerDescription: Realtek PCIe FE Family ControllerClass Guid: {4d36e972-e325-11ce-bfc1-08002be10318}Manufacturer: RealtekService: RTL8168 Name: Remote Desktop Device Redirector BusDescription: Remote Desktop Device Redirector BusClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: MicrosoftService: rdpbus Name: Intel® Centrino® Wireless Bluetooth® + High Speed Virtual AdapterDescription: Intel® Centrino® Wireless Bluetooth® + High Speed Virtual AdapterClass Guid: {dad27e18-2598-4484-98b0-5dba8e007f6a}Manufacturer: Intel CorporationService: AMPPAL Name: Intel® 7 Series/C216 Chipset Family USB Enhanced Host Controller - 1E26Description: Intel® 7 Series/C216 Chipset Family USB Enhanced Host Controller - 1E26Class Guid: {36fc9e60-c465-11cf-8056-444553540000}Manufacturer: IntelService: usbehci Name: Microsoft Wi-Fi Direct Virtual AdapterDescription: Microsoft Wi-Fi Direct Virtual AdapterClass Guid: {4d36e972-e325-11ce-bfc1-08002be10318}Manufacturer: MicrosoftService: vwifimp ========================= Memory info: =================================== Percentage of memory in use: 18%Total physical RAM: 8061.27 MBAvailable physical RAM: 6542.64 MBTotal Pagefile: 9341.27 MBAvailable Pagefile: 7765.41 MBTotal Virtual: 4095.88 MBAvailable Virtual: 3972.35 MB ========================= Partitions: ===================================== 1 Drive c: (OS) (Fixed) (Total:918.01 GB) (Free:871.53 GB) NTFS3 Drive f: () (Removable) (Total:7.45 GB) (Free:1.22 GB) FAT324 Drive x: () (Fixed) (Total:0.44 GB) (Free:0.16 GB) NTFS5 Drive y: (PBR Image) (Fixed) (Total:11.92 GB) (Free:0.26 GB) NTFS ========================= Users: ======================================== User accounts for \\SUSIE Administrator Guest susiepark ========================= Minidump Files ================================== No minidump file found **** End of log ****
  6. jpark1
    I ran chkdsk as the administrator from the command prompt and restarted the computer I reset Browser Reset for Internet Explorer. A restart was required by Windows 8.1 to change the settings. I don't have Firefox or Chrome installed. After the restart, Internet Explorer opens to this homepage http://go.microsoft.com/fwlink/p/?LinkId=255141 Still receiving the proxy setting error. Please advise, thank you much
  7. jpark1
    Here are the results for SystemLook 64-bit SystemLook 30.07.11 by jpshortstuff Log created at 01:51 on 15/11/2014 by susiepark Administrator - Elevation successful Invalid Context: regfind127.0.0.1:8800 -= EOF =- I ran chkdsk as instructed in the links you provided. It did not differentiate a FULL check vs a BASIC check. Do I need to run CHKDSK again? Please advise, thanks
  8. jpark1
    Here are my chkdsk results Chkdsk was executed in scan mode on a volume snapshot. Checking file system on C:Volume label is OS. Stage 1: Examining basic file system structure ... 355072 file records processed. File verification completed. 4287 large file records processed. 0 bad file records processed. Stage 2: Examining file name linkage ... 421898 index entries processed. Index verification completed. Stage 3: Examining security descriptors ...Security descriptor verification completed. 33414 data files processed. CHKDSK is verifying Usn Journal... 40543912 USN bytes processed. Usn Journal verification completed. Windows has scanned the file system and found no problems.No further action is required. 962607103 KB total disk space. 51595128 KB in 148095 files. 103816 KB in 33415 indexes. 492475 KB in use by the system. 65536 KB occupied by the log file. 910415684 KB available on disk. 4096 bytes in each allocation unit. 240651775 total allocation units on disk. 227603921 allocation units available on disk. ---------------------------------------------------------------------- Stage 1: Examining basic file system structure ... Stage 2: Examining file name linkage ... Stage 3: Examining security descriptors ... Windows has scanned the file system and found no problems.No further action is required. I followed the instructions for CMD.exe These were my results netsh winhttp>reset proxy current WinHTTP proxy settings: Direct access (no proxy server). I tried opening Internet Explorer and still receive the same error message "check your proxy settings 127.0.0.1:8800" please advise, thanks!
  9. jpark1
    here is the results.txt log for minitoolbox. Internet Explorer is still giving me the same error on Proxy setting MiniToolBox by Farbar Version: 21-07-2014Ran by susiepark (administrator) on 14-11-2014 at 01:38:36Running from "C:\Users\susiepark\Desktop"Microsoft Windows 8.1 (X64)Boot Mode: Normal*************************************************************************** ========================= Flush DNS: =================================== Windows IP Configuration Successfully flushed the DNS Resolver Cache. ========================= IE Proxy Settings: ============================== Proxy is not enabled.No Proxy Server is set. "Reset IE Proxy Settings": IE Proxy Settings were reset. ========================= FF Proxy Settings: ============================== "Reset FF Proxy Settings": Firefox Proxy settings were reset. ========================= Hosts content: ================================= ========================= IP Configuration: ================================ Intel® Centrino® Wireless-N 2230 = Wi-Fi (Connected)Realtek PCIe FE Family Controller = Ethernet (Media disconnected)Bluetooth Device (Personal Area Network) = Bluetooth Network Connection (Media disconnected) # ----------------------------------# IPv4 Configuration# ----------------------------------pushd interface ipv4 resetset global icmpredirects=enabledset interface interface="Local Area Connection* 1" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabledset interface interface="Ethernet" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabledset interface interface="Wi-Fi" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabledset interface interface="Bluetooth Network Connection" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabledset interface interface="ethernet_12" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabledset interface interface="Local Area Connection* 12" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabledset interface interface="ethernet_11" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabledset interface interface="ethernet_3" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled popd# End of IPv4 configuration Windows IP Configuration Host Name . . . . . . . . . . . . : susie Primary Dns Suffix . . . . . . . : Node Type . . . . . . . . . . . . : Hybrid IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : No DNS Suffix Search List. . . . . . : home Wireless LAN adapter Local Area Connection* 12: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Microsoft Wi-Fi Direct Virtual Adapter Physical Address. . . . . . . . . : 84-A6-C8-B4-0B-C8 DHCP Enabled. . . . . . . . . . . : Yes Autoconfiguration Enabled . . . . : Yes Ethernet adapter Bluetooth Network Connection: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Bluetooth Device (Personal Area Network) Physical Address. . . . . . . . . : 84-A6-C8-B4-0B-CB DHCP Enabled. . . . . . . . . . . : Yes Autoconfiguration Enabled . . . . : Yes Wireless LAN adapter Wi-Fi: Connection-specific DNS Suffix . : home Description . . . . . . . . . . . : Intel® Centrino® Wireless-N 2230 Physical Address. . . . . . . . . : 84-A6-C8-B4-0B-C7 DHCP Enabled. . . . . . . . . . . : Yes Autoconfiguration Enabled . . . . : Yes Link-local IPv6 Address . . . . . : fe80::7cce:d146:1bfb:124d%4(Preferred) IPv4 Address. . . . . . . . . . . : 192.168.1.13(Preferred) Subnet Mask . . . . . . . . . . . : 255.255.255.0 Lease Obtained. . . . . . . . . . : Friday, November 14, 2014 12:14:01 AM Lease Expires . . . . . . . . . . : Saturday, November 15, 2014 1:15:30 AM Default Gateway . . . . . . . . . : 192.168.1.1 DHCP Server . . . . . . . . . . . : 192.168.1.1 DHCPv6 IAID . . . . . . . . . . . : 260351688 DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-18-45-00-5D-84-A6-C8-B4-0B-C7 DNS Servers . . . . . . . . . . . : 192.168.1.1 NetBIOS over Tcpip. . . . . . . . : Enabled Ethernet adapter Ethernet: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Realtek PCIe FE Family Controller Physical Address. . . . . . . . . : E0-DB-55-CE-C1-0E DHCP Enabled. . . . . . . . . . . : Yes Autoconfiguration Enabled . . . . : YesServer: Wireless_Broadband_Router.homeAddress: 192.168.1.1 Name: google.comAddresses: 2001:4860:4007:800::1009 74.125.224.163 74.125.224.164 74.125.224.165 74.125.224.161 74.125.224.166 74.125.224.174 74.125.224.167 74.125.224.169 74.125.224.160 74.125.224.162 74.125.224.168 Pinging google.com [74.125.224.39] with 32 bytes of data:Reply from 74.125.224.39: bytes=32 time=26ms TTL=57Reply from 74.125.224.39: bytes=32 time=26ms TTL=57 Ping statistics for 74.125.224.39: Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),Approximate round trip times in milli-seconds: Minimum = 26ms, Maximum = 26ms, Average = 26msServer: Wireless_Broadband_Router.homeAddress: 192.168.1.1 Name: yahoo.comAddresses: 98.138.253.109 98.139.183.24 206.190.36.45 Pinging yahoo.com [98.139.183.24] with 32 bytes of data:Reply from 98.139.183.24: bytes=32 time=105ms TTL=53Reply from 98.139.183.24: bytes=32 time=104ms TTL=53 Ping statistics for 98.139.183.24: Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),Approximate round trip times in milli-seconds: Minimum = 104ms, Maximum = 105ms, Average = 104ms Pinging 127.0.0.1 with 32 bytes of data:Reply from 127.0.0.1: bytes=32 time<1ms TTL=128Reply from 127.0.0.1: bytes=32 time<1ms TTL=128 Ping statistics for 127.0.0.1: Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),Approximate round trip times in milli-seconds: Minimum = 0ms, Maximum = 0ms, Average = 0ms===========================================================================Interface List 8...84 a6 c8 b4 0b c8 ......Microsoft Wi-Fi Direct Virtual Adapter 6...84 a6 c8 b4 0b cb ......Bluetooth Device (Personal Area Network) 4...84 a6 c8 b4 0b c7 ......Intel® Centrino® Wireless-N 2230 3...e0 db 55 ce c1 0e ......Realtek PCIe FE Family Controller 1...........................Software Loopback Interface 1=========================================================================== IPv4 Route Table===========================================================================Active Routes:Network Destination Netmask Gateway Interface Metric 0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.13 25 127.0.0.0 255.0.0.0 On-link 127.0.0.1 306 127.0.0.1 255.255.255.255 On-link 127.0.0.1 306 127.255.255.255 255.255.255.255 On-link 127.0.0.1 306 192.168.1.0 255.255.255.0 On-link 192.168.1.13 281 192.168.1.13 255.255.255.255 On-link 192.168.1.13 281 192.168.1.255 255.255.255.255 On-link 192.168.1.13 281 224.0.0.0 240.0.0.0 On-link 127.0.0.1 306 224.0.0.0 240.0.0.0 On-link 192.168.1.13 281 255.255.255.255 255.255.255.255 On-link 127.0.0.1 306 255.255.255.255 255.255.255.255 On-link 192.168.1.13 281===========================================================================Persistent Routes: None IPv6 Route Table===========================================================================Active Routes: If Metric Network Destination Gateway 1 306 ::1/128 On-link 4 281 fe80::/64 On-link 4 281 fe80::7cce:d146:1bfb:124d/128 On-link 1 306 ff00::/8 On-link 4 281 ff00::/8 On-link===========================================================================Persistent Routes: None========================= Winsock entries ===================================== Catalog5 01 C:\WINDOWS\SysWOW64\napinsp.dll [53760] (Microsoft Corporation)Catalog5 02 C:\WINDOWS\SysWOW64\pnrpnsp.dll [68096] (Microsoft Corporation)Catalog5 03 C:\WINDOWS\SysWOW64\pnrpnsp.dll [68096] (Microsoft Corporation)Catalog5 04 C:\WINDOWS\SysWOW64\NLAapi.dll [64000] (Microsoft Corporation)Catalog5 05 C:\WINDOWS\SysWOW64\mswsock.dll [270848] (Microsoft Corporation)Catalog5 06 C:\WINDOWS\SysWOW64\winrnr.dll [21504] (Microsoft Corporation)Catalog5 07 C:\WINDOWS\SysWOW64\wshbth.dll [51200] (Microsoft Corporation)Catalog9 01 C:\WINDOWS\SysWOW64\mswsock.dll [270848] (Microsoft Corporation)Catalog9 02 C:\WINDOWS\SysWOW64\mswsock.dll [270848] (Microsoft Corporation)Catalog9 03 C:\WINDOWS\SysWOW64\mswsock.dll [270848] (Microsoft Corporation)Catalog9 04 C:\WINDOWS\SysWOW64\mswsock.dll [270848] (Microsoft Corporation)Catalog9 05 C:\WINDOWS\SysWOW64\mswsock.dll [270848] (Microsoft Corporation)Catalog9 06 C:\WINDOWS\SysWOW64\mswsock.dll [270848] (Microsoft Corporation)Catalog9 07 C:\WINDOWS\SysWOW64\mswsock.dll [270848] (Microsoft Corporation)Catalog9 08 C:\WINDOWS\SysWOW64\mswsock.dll [270848] (Microsoft Corporation)Catalog9 09 C:\WINDOWS\SysWOW64\mswsock.dll [270848] (Microsoft Corporation)Catalog9 10 C:\WINDOWS\SysWOW64\mswsock.dll [270848] (Microsoft Corporation)Catalog9 11 C:\WINDOWS\SysWOW64\mswsock.dll [270848] (Microsoft Corporation)x64-Catalog5 01 C:\Windows\System32\napinsp.dll [67584] (Microsoft Corporation)x64-Catalog5 02 C:\Windows\System32\pnrpnsp.dll [87040] (Microsoft Corporation)x64-Catalog5 03 C:\Windows\System32\pnrpnsp.dll [87040] (Microsoft Corporation)x64-Catalog5 04 C:\Windows\System32\NLAapi.dll [84480] (Microsoft Corporation)x64-Catalog5 05 C:\Windows\System32\mswsock.dll [338432] (Microsoft Corporation)x64-Catalog5 06 C:\Windows\System32\winrnr.dll [30208] (Microsoft Corporation)x64-Catalog5 07 C:\Windows\System32\wshbth.dll [63488] (Microsoft Corporation)x64-Catalog9 01 C:\Windows\System32\mswsock.dll [338432] (Microsoft Corporation)x64-Catalog9 02 C:\Windows\System32\mswsock.dll [338432] (Microsoft Corporation)x64-Catalog9 03 C:\Windows\System32\mswsock.dll [338432] (Microsoft Corporation)x64-Catalog9 04 C:\Windows\System32\mswsock.dll [338432] (Microsoft Corporation)x64-Catalog9 05 C:\Windows\System32\mswsock.dll [338432] (Microsoft Corporation)x64-Catalog9 06 C:\Windows\System32\mswsock.dll [338432] (Microsoft Corporation)x64-Catalog9 07 C:\Windows\System32\mswsock.dll [338432] (Microsoft Corporation)x64-Catalog9 08 C:\Windows\System32\mswsock.dll [338432] (Microsoft Corporation)x64-Catalog9 09 C:\Windows\System32\mswsock.dll [338432] (Microsoft Corporation)x64-Catalog9 10 C:\Windows\System32\mswsock.dll [338432] (Microsoft Corporation)x64-Catalog9 11 C:\Windows\System32\mswsock.dll [338432] (Microsoft Corporation) ========================= Event log errors: =============================== Application errors:==================Error: (11/14/2014 00:14:33 AM) (Source: Application Error) (User: )Description: Faulting application name: Explorer.EXE, version: 6.3.9600.17284, time stamp: 0x53f816dcFaulting module name: twinui.dll, version: 6.3.9600.17284, time stamp: 0x53f81955Exception code: 0x80270249Fault offset: 0x000000000028d77bFaulting process id: 0xd68Faulting application start time: 0xExplorer.EXE0Faulting application path: Explorer.EXE1Faulting module path: Explorer.EXE2Report Id: Explorer.EXE3Faulting package full name: Explorer.EXE4Faulting package-relative application ID: Explorer.EXE5 Error: (11/13/2014 11:52:32 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: SUSIE)Description: Activation of app microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 failed with error: -2147220995 See the Microsoft-Windows-TWinUI/Operational log for additional information. Error: (11/13/2014 11:52:32 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: SUSIE)Description: Activation of app microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 failed with error: -2147220995 See the Microsoft-Windows-TWinUI/Operational log for additional information. System errors:=============Error: (11/14/2014 00:21:41 AM) (Source: DCOM) (User: SUSIE)Description: Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mca Error: (11/14/2014 00:19:41 AM) (Source: DCOM) (User: SUSIE)Description: Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mca Error: (11/14/2014 00:18:41 AM) (Source: DCOM) (User: SUSIE)Description: Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mca Error: (11/14/2014 00:16:41 AM) (Source: DCOM) (User: SUSIE)Description: Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mca Error: (11/14/2014 00:16:30 AM) (Source: Service Control Manager) (User: )Description: The Dell Digital Delivery Service service terminated unexpectedly. It has done this 1 time(s). Error: (11/14/2014 00:14:41 AM) (Source: DCOM) (User: SUSIE)Description: Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mca Error: (11/11/2014 01:22:44 AM) (Source: Service Control Manager) (User: )Description: The Dell Digital Delivery Service service terminated unexpectedly. It has done this 1 time(s). Error: (11/11/2014 00:48:19 AM) (Source: Service Control Manager) (User: )Description: The Dell Digital Delivery Service service terminated unexpectedly. It has done this 1 time(s). Error: (11/11/2014 00:23:46 AM) (Source: Service Control Manager) (User: )Description: The Dell Digital Delivery Service service terminated unexpectedly. It has done this 1 time(s). Error: (11/11/2014 00:15:29 AM) (Source: DCOM) (User: SUSIE)Description: {9AA46009-3CE0-458A-A354-715610A075E6} Microsoft Office Sessions:=========================Error: (11/14/2014 00:14:33 AM) (Source: Application Error)(User: )Description: Explorer.EXE6.3.9600.1728453f816dctwinui.dll6.3.9600.1728453f8195580270249000000000028d77bd6801cfffe3007bfba5C:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\twinui.dll4381a2a2-6bd6-11e4-833e-84a6c8b40bcb Error: (11/13/2014 11:52:32 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: SUSIE)Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1-2147220995 Error: (11/13/2014 11:52:32 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: SUSIE)Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1-2147220995 CodeIntegrity Errors:=================================== Date: 2014-11-01 01:28:54.719 Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Settings Manager\smdmf\x64\sysapcrt.dll that did not meet the Windows signing level requirements. Date: 2014-11-01 01:28:54.578 Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Settings Manager\smdmf\sysapcrt.dll that did not meet the Windows signing level requirements. Date: 2014-10-31 22:35:55.795 Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Malwarebytes Anti-Malware\mbampt.exe that did not meet the Windows signing level requirements. Date: 2014-10-31 22:35:21.508 Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Malwarebytes Anti-Malware\mbampt.exe that did not meet the Windows signing level requirements. Date: 2014-10-31 22:14:49.071 Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Settings Manager\smdmf\x64\sysapcrt.dll that did not meet the Windows signing level requirements. Date: 2014-10-31 22:14:48.899 Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Settings Manager\smdmf\sysapcrt.dll that did not meet the Windows signing level requirements. =========================== Installed Programs ============================avast! Free Antivirus (HKLM-x32\...\avast) (Version: 9.0.2021 - AVAST Software)Conexant SmartAudio HD (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.54.40.0 - Conexant)CyberLink LabelPrint 2.5 (x32 Version: 2.5.5415a - CyberLink Corp.) HiddenCyberLink Media Suite 10 (x32 Version: 10.0.1.1913 - CyberLink Corp.) HiddenCyberLink Media Suite Essentials (HKLM-x32\...\InstallShield_{8F14AA37-5193-4A14-BD5B-BDF9B361AEF7}) (Version: 10.0 - CyberLink Corp.)CyberLink Power2Go 8 (x32 Version: 8.0.0.1904 - CyberLink Corp.) HiddenCyberLink PowerDirector 10 (x32 Version: 10.0.1.1904 - CyberLink Corp.) HiddenCyberLink PowerDVD 10 (x32 Version: 10.0.4318.52 - CyberLink Corp.) HiddenD3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) HiddenDefinition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{650DE870-ECA3-4E63-8D77-778512BE5D4C}) (Version: - Microsoft)Dell Backup and Recovery (HKLM-x32\...\{0ED7EE95-6A97-47AA-AD73-152C08A15B04}) (Version: 1.7.5.63 - Dell Inc.)Dell Digital Delivery (HKLM-x32\...\{D9ED3EFC-AB00-4CE0-ADED-80EE6B1158A7}) (Version: 2.2.2000.0 - Dell Products, LP)Dell Touchpad (HKLM\...\Elantech) (Version: 11.3.1.4 - ELAN Microelectronic Corp.)ERUNT 1.1j (HKLM-x32\...\ERUNT_is1) (Version: - Lars Hederer)Intel® Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1008 - Intel Corporation)Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)Intel® PRO/Wireless Driver (Version: 16.01.5000.0577 - Intel Corporation) HiddenIntel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3621 - Intel Corporation)Intel® PROSet/Wireless for Bluetooth® + High Speed (HKLM\...\{89478C31-5CE8-461A-9084-9A0AF059F84F}) (Version: 15.5.0.0344 - Intel Corporation)Intel® PROSet/Wireless Software for Bluetooth® Technology (HKLM\...\{302600C1-6BDF-4FD1-1309-148929CC1385}) (Version: 3.1.1309.0390 - Intel Corporation)Intel® Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.0.1207 - Intel Corporation)Intel® Turbo Boost Technology Monitor 2.6 (HKLM\...\{6C9365EB-1F9E-4893-9196-3EC77C88D0C5}) (Version: 2.6.2.0 - Intel)Intel® WiDi (HKLM\...\{EDBA2433-0910-4C72-8C5B-8FEDAE3EF18E}) (Version: 3.5.34.0 - Intel Corporation)Intel® PROSet/Wireless Software (HKLM-x32\...\{c9967fbd-e3c3-4ed0-992a-5b33260f2944}) (Version: 16.1.5 - Intel Corporation)Intel® PROSet/Wireless WiFi Software (Version: 16.01.5000.0269 - Intel Corporation) HiddenIntel® Trusted Connect Service Client (Version: 1.24.388.1 - Intel Corporation) HiddenMalwarebytes Anti-Malware version 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)Microsoft App Update for microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe (x64) (Version: 1.0.0.0 - Microsoft Corporation) HiddenMicrosoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) HiddenMicrosoft Office Access MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) HiddenMicrosoft Office Access Setup Metadata MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) HiddenMicrosoft Office Excel MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) HiddenMicrosoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) HiddenMicrosoft Office OneNote MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) HiddenMicrosoft Office Outlook MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) HiddenMicrosoft Office PowerPoint MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) HiddenMicrosoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) HiddenMicrosoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) HiddenMicrosoft Office Proof (Spanish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) HiddenMicrosoft Office Proofing (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) HiddenMicrosoft Office Publisher MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) HiddenMicrosoft Office Shared 64-bit MUI (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) HiddenMicrosoft Office Shared 64-bit Setup Metadata MUI (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) HiddenMicrosoft Office Shared MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) HiddenMicrosoft Office Shared Setup Metadata MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) HiddenMicrosoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) HiddenMicrosoft Office Word MUI (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) HiddenMicrosoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)Movie Maker (x32 Version: 16.4.3503.0728 - Microsoft Corporation) HiddenMSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) HiddenMSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) HiddenMSVCRT110_amd64 (Version: 16.4.1108.0727 - Microsoft) HiddenMy Dell (HKLM\...\PC-Doctor for Windows) (Version: 3.5.6426.22 - PC-Doctor, Inc.)Photo Common (x32 Version: 16.4.3503.0728 - Microsoft Corporation) HiddenPhoto Gallery (x32 Version: 16.4.3503.0728 - Microsoft Corporation) HiddenQuickset64 (HKLM\...\{87CF757E-C1F1-4D22-865C-00C6950B5258}) (Version: 10.15.005 - Dell Inc.)Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.8400.39030 - Realtek Semiconductor Corp.)Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version: - Microsoft) HiddenShared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)Solid YouTube Downloader and Converter 6.1.9.0 (HKLM-x32\...\{66732EEE-ECBC-4CA6-A474-ytd}_is1) (Version: - DreamVideoSoft,Inc.)Update for Korean Microsoft IME Standard Dictionary (HKLM\...\{75A54180-CA5E-47B8-AFBB-29337B976B21}) (Version: 16.0.662.1 - Microsoft Corporation)Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version: - Microsoft)Update for Microsoft Excel 2010 (KB2889836) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9179FC17-97A8-4D98-9E09-05720AF5D44E}) (Version: - Microsoft)Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft)Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft)Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version: - Microsoft)Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version: - Microsoft)Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft)Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft)Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version: - Microsoft)Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version: - Microsoft)Update for Microsoft Office 2010 (KB2687502) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{7DE7DF97-82FE-4B3A-AB8D-1621F9CC464A}) (Version: - Microsoft)Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft)Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft)Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version: - Microsoft)Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version: - Microsoft)Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F1A20C69-9FE5-40FD-9CD5-84EABC2EF64A}) (Version: - Microsoft)Update for Microsoft Office 2010 (KB2837581) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{334FB202-28D7-4BA4-8BC9-4FE4AB233EA0}) (Version: - Microsoft)Update for Microsoft Office 2010 (KB2837606) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B0D672F7-883E-4279-8E75-D97A5445AB46}) (Version: - Microsoft)Update for Microsoft Office 2010 (KB2878252) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B0DB9F71-E0F7-4FE6-8925-35B860CAC0C4}) (Version: - Microsoft)Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{089DBFD7-8211-43B2-AAAE-5BDD8C23E3A8}) (Version: - Microsoft)Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0C0A-0000-0000000FF1CE}_Office14.SingleImage_{794A0574-4E2F-4D58-B2A0-D7460ACDC85C}) (Version: - Microsoft)Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft)Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft)Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0409-0000-0000000FF1CE}_Office14.SingleImage_{DCE104A1-1875-4469-A83D-A5BFA6C4640F}) (Version: - Microsoft)Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version: - Microsoft)Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0409-0000-0000000FF1CE}_Office14.SingleImage_{334AA0A1-2BB1-4D74-B66A-2B2C4D9C2C87}) (Version: - Microsoft)Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version: - Microsoft)Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft)Update for Microsoft Visio 2010 (KB2880526) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{7B29D8B8-6A87-496C-A65E-B935E740448A}) (Version: - Microsoft)Update for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{38CF30E4-3348-4BD1-A859-B630C355A56F}) (Version: - Microsoft)Windows Live Communications Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) HiddenWindows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3503.0728 - Microsoft Corporation)Windows Live Essentials (x32 Version: 16.4.3503.0728 - Microsoft Corporation) HiddenWindows Live Installer (x32 Version: 16.4.3503.0728 - Microsoft Corporation) HiddenWindows Live Photo Common (x32 Version: 16.4.3503.0728 - Microsoft Corporation) HiddenWindows Live PIMT Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) HiddenWindows Live SOXE (x32 Version: 16.4.3503.0728 - Microsoft Corporation) HiddenWindows Live SOXE Definitions (x32 Version: 16.4.3503.0728 - Microsoft Corporation) HiddenWindows Live UX Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) HiddenWindows Live UX Platform Language Pack (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden ========================= Devices: ================================ Name: Microsoft AC AdapterDescription: Microsoft AC AdapterClass Guid: {72631e54-78a4-11d0-bcf7-00aa00b7b32a}Manufacturer: MicrosoftService: CmBatt Name: System boardDescription: System boardClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard system devices)Service: Name: Motherboard resourcesDescription: Motherboard resourcesClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard system devices)Service: Name: Motherboard resourcesDescription: Motherboard resourcesClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard system devices)Service: Name: Generic volumeDescription: Generic volumeClass Guid: {71a27cdd-812a-11d0-bec7-08002be2092f}Manufacturer: MicrosoftService: volsnap Name: Microsoft ACPI-Compliant Control Method BatteryDescription: Microsoft ACPI-Compliant Control Method BatteryClass Guid: {72631e54-78a4-11d0-bcf7-00aa00b7b32a}Manufacturer: MicrosoftService: CmBatt Name: Root Print QueueDescription: Local Print QueueClass Guid: {1ed2bbf9-11f0-4084-b21f-ad83a8e6dcdc}Manufacturer: MicrosoftService: Name: USB-IF xHCI USB Host ControllerDescription: USB-IF xHCI USB Host ControllerClass Guid: {8a2edc79-c759-46f2-88af-9d4efe3b5eee}Manufacturer: Intel CorporationService: XHCIPortProblem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)Resolution: Update the driver Name: USB Mass Storage DeviceDescription: USB Mass Storage DeviceClass Guid: {36fc9e60-c465-11cf-8056-444553540000}Manufacturer: Compatible USB storage deviceService: USBSTOR Name: Numeric data processorDescription: Numeric data processorClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard system devices)Service: Name: HP Photosmart C4700 series Class DriverDescription: HP Photosmart C4700 series Class DriverClass Guid: {4d36e979-e325-11ce-bfc1-08002be10318}Manufacturer: HPService: Name: Send To OneNote 2010Description: Local Print QueueClass Guid: {1ed2bbf9-11f0-4084-b21f-ad83a8e6dcdc}Manufacturer: Service: Name: Volume ManagerDescription: Volume ManagerClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: MicrosoftService: volmgr Name: Microsoft Bluetooth EnumeratorDescription: Microsoft Bluetooth EnumeratorClass Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}Manufacturer: MicrosoftService: BthEnum Name: Speakers (Conexant SmartAudio HD)Description: Audio EndpointClass Guid: {c166523c-fe0c-4a94-a586-f1a80cfbbf3e}Manufacturer: MicrosoftService: Name: HID-compliant vendor-defined deviceDescription: HID-compliant vendor-defined deviceClass Guid: {745a17a0-74d3-11d0-b6fe-00a0c90f57da}Manufacturer: (Standard system devices)Service: Name: Microsoft Basic Display DriverDescription: Microsoft Basic Display DriverClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard display types)Service: BasicDisplay Name: Generic USB HubDescription: Generic USB HubClass Guid: {36fc9e60-c465-11cf-8056-444553540000}Manufacturer: (Generic USB Hub)Service: usbhub Name: USB Composite DeviceDescription: USB Composite DeviceClass Guid: {36fc9e60-c465-11cf-8056-444553540000}Manufacturer: (Standard USB Host Controller)Service: usbccgp Name: Bluetooth Device (RFCOMM Protocol TDI)Description: Bluetooth Device (RFCOMM Protocol TDI)Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}Manufacturer: MicrosoftService: RFCOMM Name: High Definition Audio ControllerDescription: High Definition Audio ControllerClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: MicrosoftService: HDAudBus Name: Bluetooth Device (Personal Area Network)Description: Bluetooth Device (Personal Area Network)Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}Manufacturer: MicrosoftService: BthPan Name: Intel® HD Graphics 4000Description: Intel® HD Graphics 4000Class Guid: {4d36e968-e325-11ce-bfc1-08002be10318}Manufacturer: Intel CorporationService: igfx Name: USB Root HubDescription: USB Root HubClass Guid: {36fc9e60-c465-11cf-8056-444553540000}Manufacturer: (Standard USB Host Controller)Service: usbhub Name: Microsoft Windows Management Interface for ACPIDescription: Microsoft Windows Management Interface for ACPIClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: MicrosoftService: WmiAcpi Name: Intel® 82802 Firmware Hub DeviceDescription: Intel® 82802 Firmware Hub DeviceClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: IntelService: Name: Intel® USB 3.0 eXtensible Host Controller - 0100 (Microsoft)Description: USB xHCI Compliant Host ControllerClass Guid: {36fc9e60-c465-11cf-8056-444553540000}Manufacturer: Generic USB xHCI Host ControllerService: USBXHCI Name: High precision event timerDescription: High precision event timerClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard system devices)Service: Name: Intel® 7 Series Chipset Family SATA AHCI ControllerDescription: Intel® 7 Series Chipset Family SATA AHCI ControllerClass Guid: {4d36e96a-e325-11ce-bfc1-08002be10318}Manufacturer: Intel CorporationService: iaStorA Name: Generic USB HubDescription: Generic USB HubClass Guid: {36fc9e60-c465-11cf-8056-444553540000}Manufacturer: (Generic USB Hub)Service: usbhub Name: Composite Bus EnumeratorDescription: Composite Bus EnumeratorClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: MicrosoftService: CompositeBus Name: Microsoft Virtual Drive EnumeratorDescription: Microsoft Virtual Drive EnumeratorClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: MicrosoftService: vdrvroot Name: HID-compliant vendor-defined deviceDescription: HID-compliant vendor-defined deviceClass Guid: {745a17a0-74d3-11d0-b6fe-00a0c90f57da}Manufacturer: (Standard system devices)Service: Name: F:\Description: CruzerClass Guid: {eec5ad98-8080-425f-922a-dabf3de3f69a}Manufacturer: SanDiskService: WUDFWpdFs Name: Intel® Centrino® Wireless-N 2230Description: Intel® Centrino® Wireless-N 2230Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}Manufacturer: Intel CorporationService: NETwNe64 Name: Microsoft Storage Spaces ControllerDescription: Microsoft Storage Spaces ControllerClass Guid: {4d36e97b-e325-11ce-bfc1-08002be10318}Manufacturer: MicrosoftService: spaceport Name: HID-compliant system controllerDescription: HID-compliant system controllerClass Guid: {745a17a0-74d3-11d0-b6fe-00a0c90f57da}Manufacturer: (Standard system devices)Service: Name: Generic volumeDescription: Generic volumeClass Guid: {71a27cdd-812a-11d0-bec7-08002be2092f}Manufacturer: MicrosoftService: volsnap Name: Intel® Management Engine Interface Description: Intel® Management Engine Interface Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: IntelService: MEIx64 Name: HID-compliant consumer control deviceDescription: HID-compliant consumer control deviceClass Guid: {745a17a0-74d3-11d0-b6fe-00a0c90f57da}Manufacturer: MicrosoftService: Name: USB Input Device (Logitech Download Assistant)Description: USB Input Device (Logitech Download Assistant)Class Guid: {745a17a0-74d3-11d0-b6fe-00a0c90f57da}Manufacturer: Logitech (x64)Service: HidUsb Name: Microsoft Kernel Debug Network AdapterDescription: Microsoft Kernel Debug Network AdapterClass Guid: {4d36e972-e325-11ce-bfc1-08002be10318}Manufacturer: MicrosoftService: kdnic Name: Microsoft ACPI-Compliant Embedded ControllerDescription: Microsoft ACPI-Compliant Embedded ControllerClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard system devices)Service: Name: Microsoft XPS Document WriterDescription: Local Print QueueClass Guid: {1ed2bbf9-11f0-4084-b21f-ad83a8e6dcdc}Manufacturer: MicrosoftService: Name: Generic volume shadow copyDescription: Generic volume shadow copyClass Guid: {533c5b84-ec70-11d2-9505-00c04f79deaf}Manufacturer: MicrosoftService: Name: Generic volume shadow copyDescription: Generic volume shadow copyClass Guid: {533c5b84-ec70-11d2-9505-00c04f79deaf}Manufacturer: MicrosoftService: Name: Generic volume shadow copyDescription: Generic volume shadow copyClass Guid: {533c5b84-ec70-11d2-9505-00c04f79deaf}Manufacturer: MicrosoftService: Name: Generic volume shadow copyDescription: Generic volume shadow copyClass Guid: {533c5b84-ec70-11d2-9505-00c04f79deaf}Manufacturer: MicrosoftService: Name: HID-compliant vendor-defined deviceDescription: HID-compliant vendor-defined deviceClass Guid: {745a17a0-74d3-11d0-b6fe-00a0c90f57da}Manufacturer: (Standard system devices)Service: Name: HID-compliant mouseDescription: HID-compliant mouseClass Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}Manufacturer: MicrosoftService: mouhid Name: System timerDescription: System timerClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard system devices)Service: Name: ACPI LidDescription: ACPI LidClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard system devices)Service: Name: Generic volumeDescription: Generic volumeClass Guid: {71a27cdd-812a-11d0-bec7-08002be2092f}Manufacturer: MicrosoftService: volsnap Name: HID Keyboard DeviceDescription: HID Keyboard DeviceClass Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard keyboards)Service: kbdhid Name: Generic volumeDescription: Generic volumeClass Guid: {71a27cdd-812a-11d0-bec7-08002be2092f}Manufacturer: MicrosoftService: volsnap Name: Intel® 7 Series/C216 Chipset Family PCI Express Root Port 1 - 1E10Description: Intel® 7 Series/C216 Chipset Family PCI Express Root Port 1 - 1E10Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: IntelService: pci Name: USB Composite DeviceDescription: USB Composite DeviceClass Guid: {36fc9e60-c465-11cf-8056-444553540000}Manufacturer: (Standard USB Host Controller)Service: usbccgp Name: Standard PS/2 KeyboardDescription: Standard PS/2 KeyboardClass Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard keyboards)Service: i8042prt Name: Generic volumeDescription: Generic volumeClass Guid: {71a27cdd-812a-11d0-bec7-08002be2092f}Manufacturer: MicrosoftService: volsnap Name: Conexant SmartAudio HDDescription: Conexant SmartAudio HDClass Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}Manufacturer: ConexantService: CnxtHdAudService Name: Intel® Centrino® Wireless Bluetooth® 4.0 + High Speed AdapterDescription: Intel® Centrino® Wireless Bluetooth® 4.0 + High Speed AdapterClass Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}Manufacturer: Intel CorporationService: BTHUSB Name: DIRECTV Mediashare RendererDescription: Generic software deviceClass Guid: {62f9c741-b25a-46ce-b54c-9bccce08b6f2}Manufacturer: DIRECTVService: Name: UMBus Root Bus EnumeratorDescription: UMBus Root Bus EnumeratorClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: MicrosoftService: umbus Name: Intel® 7 Series/C216 Chipset Family SMBus Host Controller - 1E22Description: Intel® 7 Series/C216 Chipset Family SMBus Host Controller - 1E22Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: IntelService: Name: Microsoft Device Association Root EnumeratorDescription: Generic software deviceClass Guid: {62f9c741-b25a-46ce-b54c-9bccce08b6f2}Manufacturer: MicrosoftService: Name: ACPI x64-based PCDescription: ACPI x64-based PCClass Guid: {4d36e966-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard computers)Service: \Driver\ACPI_HAL Name: SUSIE: susiepark:Description: Generic software deviceClass Guid: {62f9c741-b25a-46ce-b54c-9bccce08b6f2}Manufacturer: Microsoft CorporationService: Name: PCI Express Root ComplexDescription: PCI Express Root ComplexClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard system devices)Service: pci Name: USB Input DeviceDescription: USB Input DeviceClass Guid: {745a17a0-74d3-11d0-b6fe-00a0c90f57da}Manufacturer: (Standard system devices)Service: HidUsb Name: 3rd Gen Core processor DRAM Controller - 0154Description: 3rd Gen Core processor DRAM Controller - 0154Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: IntelService: Name: Internal Microphone (Conexant SmartAudio HD)Description: Audio EndpointClass Guid: {c166523c-fe0c-4a94-a586-f1a80cfbbf3e}Manufacturer: MicrosoftService: Name: Microsoft ACPI-Compliant SystemDescription: Microsoft ACPI-Compliant SystemClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: MicrosoftService: ACPI Name: Description: Class Guid: Manufacturer: Service: Name: Microsoft Basic Render DriverDescription: Microsoft Basic Render DriverClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: MicrosoftService: BasicRender Name: SanDisk Cruzer USB DeviceDescription: Disk driveClass Guid: {4d36e967-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard disk drives)Service: disk Name: FaxDescription: Local Print QueueClass Guid: {1ed2bbf9-11f0-4084-b21f-ad83a8e6dcdc}Manufacturer: MicrosoftService: Name: Generic PnP MonitorDescription: Generic PnP MonitorClass Guid: {4d36e96e-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard monitor types)Service: monitor Name: Intel® Display AudioDescription: Intel® Display AudioClass Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}Manufacturer: Intel® CorporationService: IntcDAud Name: HP8F6709 (HP Photosmart C4700 series)Description: Generic software deviceClass Guid: {62f9c741-b25a-46ce-b54c-9bccce08b6f2}Manufacturer: HPService: Name: ACPI Fixed Feature ButtonDescription: ACPI Fixed Feature ButtonClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard system devices)Service: Name: Intel® 7 Series/C216 Chipset Family PCI Express Root Port 2 - 1E12Description: Intel® 7 Series/C216 Chipset Family PCI Express Root Port 2 - 1E12Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: IntelService: pci Name: Generic volumeDescription: Generic volumeClass Guid: {71a27cdd-812a-11d0-bec7-08002be2092f}Manufacturer: MicrosoftService: volsnap Name: USB Input DeviceDescription: USB Input DeviceClass Guid: {745a17a0-74d3-11d0-b6fe-00a0c90f57da}Manufacturer: (Standard system devices)Service: HidUsb Name: USB Root HubDescription: USB Root HubClass Guid: {36fc9e60-c465-11cf-8056-444553540000}Manufacturer: (Standard USB Host Controller)Service: usbhub Name: System CMOS/real time clockDescription: System CMOS/real time clockClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard system devices)Service: Name: USB Root Hub (xHCI)Description: USB Root Hub (xHCI)Class Guid: {36fc9e60-c465-11cf-8056-444553540000}Manufacturer: (Standard USB HUBs)Service: USBHUB3 Name: Generic volumeDescription: Generic volumeClass Guid: {71a27cdd-812a-11d0-bec7-08002be2092f}Manufacturer: MicrosoftService: volsnap Name: Microsoft Bluetooth LE EnumeratorDescription: Microsoft Bluetooth LE EnumeratorClass Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}Manufacturer: MicrosoftService: BthLEEnum Name: Programmable interrupt controllerDescription: Programmable interrupt controllerClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard system devices)Service: Name: Generic volumeDescription: Generic volumeClass Guid: {71a27cdd-812a-11d0-bec7-08002be2092f}Manufacturer: MicrosoftService: volsnap Name: Intel® 7 Series/C216 Chipset Family USB Enhanced Host Controller - 1E2DDescription: Intel® 7 Series/C216 Chipset Family USB Enhanced Host Controller - 1E2DClass Guid: {36fc9e60-c465-11cf-8056-444553540000}Manufacturer: IntelService: usbehci Name: ACPI Power ButtonDescription: ACPI Power ButtonClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard system devices)Service: Name: NDIS Virtual Network Adapter EnumeratorDescription: NDIS Virtual Network Adapter EnumeratorClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: MicrosoftService: NdisVirtualBus Name: Integrated WebcamDescription: USB Video DeviceClass Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}Manufacturer: MicrosoftService: usbvideo Name: Realtek USB 2.0 Card ReaderDescription: Realtek USB 2.0 Card ReaderClass Guid: {36fc9e60-c465-11cf-8056-444553540000}Manufacturer: RealtekService: RSUSBVSTOR Name: HP8F6709 (HP Photosmart C4700 series)Description: WSD Print DeviceClass Guid: {c30ecea0-11ef-4ef9-b02e-6af81e6e65c0}Manufacturer: HPService: WSDPrintDevice Name: Intel® HM77 Express Chipset LPC Controller - 1E57Description: Intel® HM77 Express Chipset LPC Controller - 1E57Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: IntelService: msisadrv Name: Motherboard resourcesDescription: Motherboard resourcesClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard system devices)Service: Name: Dell TouchpadDescription: Dell TouchpadClass Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}Manufacturer: ELANService: i8042prt Name: DIRECTV2PC Media ServerDescription: Generic software deviceClass Guid: {62f9c741-b25a-46ce-b54c-9bccce08b6f2}Manufacturer: DIRECTVService: Name: Direct memory access controllerDescription: Direct memory access controllerClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard system devices)Service: Name: HL-DT-ST DVD+-RW GT80NDescription: CD-ROM DriveClass Guid: {4d36e965-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard CD-ROM drives)Service: cdrom Name: WDC WD10JPVT-75A1YT0Description: Disk driveClass Guid: {4d36e967-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard disk drives)Service: disk Name: HP8F6709 (HP Photosmart C4700 series)Description: Local Print QueueClass Guid: {1ed2bbf9-11f0-4084-b21f-ad83a8e6dcdc}Manufacturer: HPService: Name: Microsoft System Management BIOS DriverDescription: Microsoft System Management BIOS DriverClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard system devices)Service: mssmbios Name: Motherboard resourcesDescription: Motherboard resourcesClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard system devices)Service: Name: Airplane Mode Switch CollectionDescription: Airplane Mode Switch CollectionClass Guid: {745a17a0-74d3-11d0-b6fe-00a0c90f57da}Manufacturer: Dell IncService: Name: HK AVR1700Description: Digital Media DeviceClass Guid: {14b62f50-3f15-11dd-ae16-0800200c9a66}Manufacturer: Harman KardonService: UmPass Name: Intel® Core i5-3210M CPU @ 2.50GHzDescription: Intel ProcessorClass Guid: {50127dc3-0f36-415e-a6cc-4cb3be910b65}Manufacturer: IntelService: intelppm Name: Intel® Core i5-3210M CPU @ 2.50GHzDescription: Intel ProcessorClass Guid: {50127dc3-0f36-415e-a6cc-4cb3be910b65}Manufacturer: IntelService: intelppm Name: Intel® Core i5-3210M CPU @ 2.50GHzDescription: Intel ProcessorClass Guid: {50127dc3-0f36-415e-a6cc-4cb3be910b65}Manufacturer: IntelService: intelppm Name: Intel® Core i5-3210M CPU @ 2.50GHzDescription: Intel ProcessorClass Guid: {50127dc3-0f36-415e-a6cc-4cb3be910b65}Manufacturer: IntelService: intelppm Name: Plug and Play Software Device EnumeratorDescription: Plug and Play Software Device EnumeratorClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard system devices)Service: swenum Name: IWD Bus EnumeratorDescription: IWD Bus EnumeratorClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: (Standard system devices)Service: iwdbus Name: Realtek PCIe FE Family ControllerDescription: Realtek PCIe FE Family ControllerClass Guid: {4d36e972-e325-11ce-bfc1-08002be10318}Manufacturer: RealtekService: RTL8168 Name: Remote Desktop Device Redirector BusDescription: Remote Desktop Device Redirector BusClass Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}Manufacturer: MicrosoftService: rdpbus Name: Intel® Centrino® Wireless Bluetooth® + High Speed Virtual AdapterDescription: Intel® Centrino® Wireless Bluetooth® + High Speed Virtual AdapterClass Guid: {dad27e18-2598-4484-98b0-5dba8e007f6a}Manufacturer: Intel CorporationService: AMPPAL Name: Intel® 7 Series/C216 Chipset Family USB Enhanced Host Controller - 1E26Description: Intel® 7 Series/C216 Chipset Family USB Enhanced Host Controller - 1E26Class Guid: {36fc9e60-c465-11cf-8056-444553540000}Manufacturer: IntelService: usbehci Name: Microsoft Wi-Fi Direct Virtual AdapterDescription: Microsoft Wi-Fi Direct Virtual AdapterClass Guid: {4d36e972-e325-11ce-bfc1-08002be10318}Manufacturer: MicrosoftService: vwifimp ========================= Memory info: =================================== Percentage of memory in use: 17%Total physical RAM: 8061.27 MBAvailable physical RAM: 6684.6 MBTotal Pagefile: 9341.27 MBAvailable Pagefile: 7563.27 MBTotal Virtual: 4095.88 MBAvailable Virtual: 3969.68 MB ========================= Partitions: ===================================== 1 Drive c: (OS) (Fixed) (Total:918.01 GB) (Free:868.9 GB) NTFS3 Drive f: () (Removable) (Total:7.45 GB) (Free:1.22 GB) FAT324 Drive x: () (Fixed) (Total:0.44 GB) (Free:0.16 GB) NTFS5 Drive y: (PBR Image) (Fixed) (Total:11.92 GB) (Free:0.26 GB) NTFS ========================= Users: ======================================== User accounts for \\SUSIE Administrator Guest susiepark ========================= Minidump Files ================================== No minidump file found **** End of log **** Please advise, thank you!
  10. jpark1
    yes I am still getting the proxy error here is the checkup.txt log from Security Check Results of screen317's Security Check version 0.99.89 x64 (UAC is enabled) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` Windows Firewall Enabled! Windows Defender avast! Antivirus Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` ````````Process Check: objlist.exe by Laurent```````` Malwarebytes Anti-Malware mbamservice.exe Malwarebytes Anti-Malware mbam.exe Malwarebytes Anti-Malware mbamscheduler.exe AVAST Software Avast AvastSvc.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: % ````````````````````End of Log`````````````````````` After running Security Check the proxy error is still present. Please advise, thank you
  11. jpark1
    Here is the fixlog Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-11-2014 02Ran by susiepark at 2014-11-14 00:12:28 Run:1Running from C:\Users\susiepark\DesktopLoaded Profile: susiepark (Available profiles: susiepark)Boot Mode: Normal============================================== Content of fixlist:*****************GroupPolicy: Group Policy on Chrome detected <======= ATTENTIONCHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTIONHKU\S-1-5-21-1190109235-2420750292-1459495116-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTIONSearchScopes: HKLM - {790D632D-3BBD-4593-BD36-2123878DC74A} URL = http://search.condui...rchTerms}&SSPV=SearchScopes: HKCU - SuggestionsURL_JSON http://suggest.searc...x={searchTerms}SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = SearchScopes: HKCU - {790D632D-3BBD-4593-BD36-2123878DC74A} URL = FF Extension: Shopping Helper Smartbar - C:\Users\susiepark\AppData\Roaming\Mozilla\Firefox\Profiles\05hilobe.default\Extensions\{bbfb0264-2bab-7b26-4286-95e0d34cee00} [2014-10-31]FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found]C:\Users\susiepark\AppData\Local\Temp\49ezfvtf.dllC:\Users\susiepark\AppData\Local\Temp\fu9zi3u3.dllC:\Users\susiepark\AppData\Local\Temp\levcamyg.dllC:\Users\susiepark\AppData\Local\Temp\Quarantine.exeC:\Users\susiepark\AppData\Local\Temp\sqlite3.dllC:\Users\susiepark\AppData\Local\Temp\vcredist_x64.exeTask: {3ED9FEAC-7AF4-441E-8135-5AEF3199F15F} - System32\Tasks\SVNBFRX => C:\Users\susiepark\AppData\Roaming\SVNBFRX.exe <==== ATTENTIONTask: {6E02F1AB-8F4E-48DF-8B3F-CFA62C818AF3} - System32\Tasks\DJBVB => C:\Users\susiepark\AppData\Roaming\DJBVB.exe <==== ATTENTIONC:\Users\susiepark\AppData\Roaming\SVNBFRX.exeC:\Users\susiepark\AppData\Roaming\DJBVB.exeTask: {CD853C49-482B-4EEF-A04C-A853AFC148E2} - System32\Tasks\ProPCCleaner_Start => C:\Program Files (x86)\Pro PC Cleaner\ProPCCleaner.exeTask: {D3EA0BD6-4BA0-4B77-A3DE-30F58B3400FD} - System32\Tasks\ProPCCleaner_Popup => C:\Program Files (x86)\Pro PC Cleaner\Splash.exeTask: C:\WINDOWS\Tasks\DJBVB.job => C:\Users\susiepark\AppData\Roaming\DJBVB.exe <==== ATTENTIONTask: C:\WINDOWS\Tasks\SVNBFRX.job => C:\Users\susiepark\AppData\Roaming\SVNBFRX.exe <==== ATTENTIONC:\WINDOWS\Tasks\DJBVB.jobC:\WINDOWS\Tasks\SVNBFRX.jobAlternateDataStreams: C:\Users\susiepark\OneDrive:ms-propertiesAlternateDataStreams: C:\Users\susiepark\Downloads\passport.eml:OECustomPropertyEmptyTemp:Reboot: ***************** C:\WINDOWS\system32\GroupPolicy\Machine => Moved successfully.C:\WINDOWS\system32\GroupPolicy\GPT.ini => Moved successfully."HKLM\SOFTWARE\Policies\Google" => Key deleted successfully."HKU\S-1-5-21-1190109235-2420750292-1459495116-1001\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully."HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{790D632D-3BBD-4593-BD36-2123878DC74A}" => Key deleted successfully."HKCR\CLSID\{790D632D-3BBD-4593-BD36-2123878DC74A}" => Key not found.HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\URL => value deleted successfully.HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\SuggestionsURL_JSON => value deleted successfully."HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" => Key deleted successfully."HKCR\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" => Key not found."HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{790D632D-3BBD-4593-BD36-2123878DC74A}" => Key deleted successfully."HKCR\CLSID\{790D632D-3BBD-4593-BD36-2123878DC74A}" => Key not found.C:\Users\susiepark\AppData\Roaming\Mozilla\Firefox\Profiles\05hilobe.default\Extensions\{bbfb0264-2bab-7b26-4286-95e0d34cee00} => Moved successfully.C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} not found.C:\Users\susiepark\AppData\Local\Temp\49ezfvtf.dll => Moved successfully.C:\Users\susiepark\AppData\Local\Temp\fu9zi3u3.dll => Moved successfully.C:\Users\susiepark\AppData\Local\Temp\levcamyg.dll => Moved successfully.C:\Users\susiepark\AppData\Local\Temp\Quarantine.exe => Moved successfully.C:\Users\susiepark\AppData\Local\Temp\sqlite3.dll => Moved successfully.C:\Users\susiepark\AppData\Local\Temp\vcredist_x64.exe => Moved successfully."HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{3ED9FEAC-7AF4-441E-8135-5AEF3199F15F}" => Error deleting key. The key could be protected."HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3ED9FEAC-7AF4-441E-8135-5AEF3199F15F}" => Error deleting key. The key could be protected.C:\Windows\System32\Tasks\SVNBFRX => Moved successfully."HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SVNBFRX" => Error deleting key. The key could be protected."HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{6E02F1AB-8F4E-48DF-8B3F-CFA62C818AF3}" => Error deleting key. The key could be protected."HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6E02F1AB-8F4E-48DF-8B3F-CFA62C818AF3}" => Error deleting key. The key could be protected.C:\Windows\System32\Tasks\DJBVB => Moved successfully."HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DJBVB" => Error deleting key. The key could be protected."C:\Users\susiepark\AppData\Roaming\SVNBFRX.exe" => File/Directory not found."C:\Users\susiepark\AppData\Roaming\DJBVB.exe" => File/Directory not found."HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{CD853C49-482B-4EEF-A04C-A853AFC148E2}" => Error deleting key. The key could be protected."HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CD853C49-482B-4EEF-A04C-A853AFC148E2}" => Error deleting key. The key could be protected.C:\Windows\System32\Tasks\ProPCCleaner_Start => Moved successfully."HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ProPCCleaner_Start" => Error deleting key. The key could be protected."HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D3EA0BD6-4BA0-4B77-A3DE-30F58B3400FD}" => Error deleting key. The key could be protected."HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D3EA0BD6-4BA0-4B77-A3DE-30F58B3400FD}" => Error deleting key. The key could be protected.C:\Windows\System32\Tasks\ProPCCleaner_Popup => Moved successfully."HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ProPCCleaner_Popup" => Error deleting key. The key could be protected.C:\WINDOWS\Tasks\DJBVB.job => Moved successfully.C:\WINDOWS\Tasks\SVNBFRX.job => Moved successfully."C:\WINDOWS\Tasks\DJBVB.job" => File/Directory not found."C:\WINDOWS\Tasks\SVNBFRX.job" => File/Directory not found."C:\Users\susiepark\OneDrive" => ":ms-properties" ADS not found.C:\Users\susiepark\Downloads\passport.eml => ":OECustomProperty" ADS removed successfully.EmptyTemp: => Removed 1.6 GB temporary data. The system needed a reboot. ==== End of Fixlog ==== please advise. Thank you
  12. jpark1
    here are the logs for FRST Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-11-2014Ran by susiepark (administrator) on SUSIE on 11-11-2014 01:23:08Running from F:\malware fixLoaded Profile: susiepark (Available profiles: susiepark)Platform: Windows 8.1 (X64) OS Language: English (United States)Internet Explorer Version 11Boot Mode: NormalTutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Intel Corporation) C:\Windows\System32\igfxCUIService.exe(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe(Microsoft Corporation) C:\Windows\System32\wlanext.exe(Conexant Systems, Inc.) C:\Program Files\CONEXANT\SA3\CxUtilSvc.exe(Microsoft Corporation) C:\Windows\System32\dasHost.exe(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe(Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe(Intel® Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe(MicroStudio) C:\Program Files (x86)\Windows Network Accelerater\v3\winvxm.exe(MicroTools) C:\Program Files (x86)\YouTube Downloader Services\P1\youtubeserv.exe(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20605_x64__8wekyb3d8bbwe\livecomm.exe(Microsoft Corporation) C:\Windows\System32\InputMethod\KOR\KorIME.exe(Intel Corporation) C:\Windows\System32\igfxEM.exe(Intel Corporation) C:\Windows\System32\igfxHK.exe(Intel Corporation) C:\Windows\System32\igfxTray.exe(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDGesture.exe(Conexant Systems, Inc.) C:\Program Files\CONEXANT\SA3\SmartAudio3.exe(Microsoft Corporation) C:\Windows\System32\rundll32.exe(Microsoft Corporation) C:\Windows\System32\dllhost.exe(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe(Intel® Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe(SoftThinks SAS) C:\Program Files (x86)\Dell Backup and Recovery\SftService.exe(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2898768 2012-07-09] (ELAN Microelectronics Corp.)HKLM\...\Run: [QuickSet] => c:\Program Files\Dell\QuickSet\QuickSet.exe [5752480 2012-07-11] (Dell Inc.)HKLM\...\Run: [smartAudio] => C:\Program Files\CONEXANT\SA3\SACpl.exe [1647616 2012-06-13] (Conexant Systems, Inc.)HKLM\...\Run: [intelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"HKLM\...\Run: [bTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayAppHKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetchHKLM-x32\...\Run: [iAStorIcon] => C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [277504 2012-07-09] (Intel Corporation)HKLM-x32\...\Run: [CLMLServer_For_P2G8] => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-07] (CyberLink)HKLM-x32\...\Run: [CLVirtualDrive] => C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-04] (CyberLink Corp.)HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [143888 2012-06-01] (CyberLink Corp.)HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-08-14] (AVAST Software)Winlogon\Notify\igfxcui: igfxdev.dll [X]HKU\S-1-5-21-1190109235-2420750292-1459495116-1001\...\Run: [PCKeeper2] => "C:\Program Files\Kromtech\PCKeeper\PCKeeper.exe" /autorunShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)GroupPolicy: Group Policy on Chrome detected <======= ATTENTIONCHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKU\S-1-5-21-1190109235-2420750292-1459495116-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTIONSearchScopes: HKLM - {790D632D-3BBD-4593-BD36-2123878DC74A} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MDDCJSSearchScopes: HKCU - URL http://search.conduit.com/Results.aspx?ctid=CT3325809&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=5&UP=SPEEED6747-E8FA-4B85-842A-C1681E21023D&q={searchTerms}&SSPV=SearchScopes: HKCU - SuggestionsURL_JSON http://suggest.search.conduit.com/CSuggestJson.ashx?prefix={searchTerms}SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = SearchScopes: HKCU - {790D632D-3BBD-4593-BD36-2123878DC74A} URL = BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No FileToolbar: HKU\S-1-5-21-1190109235-2420750292-1459495116-1001 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No FileTcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox:========FF ProfilePath: C:\Users\susiepark\AppData\Roaming\Mozilla\Firefox\Profiles\05hilobe.defaultFF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)FF Extension: Shopping Helper Smartbar - C:\Users\susiepark\AppData\Roaming\Mozilla\Firefox\Profiles\05hilobe.default\Extensions\{bbfb0264-2bab-7b26-4286-95e0d34cee00} [2014-10-31]FF Extension: Techgile - C:\Users\susiepark\AppData\Roaming\Mozilla\Firefox\Profiles\05hilobe.default\Extensions\{049bbcc5-fa2f-4f64-ac57-0d003a8907b3}.xpi [2014-10-31]FF Extension: Astro New Tab - C:\Users\susiepark\AppData\Roaming\Mozilla\Firefox\Profiles\05hilobe.default\Extensions\{f2548724-373f-45fe-be6a-3a85e87b7711}.xpi [2014-10-31]FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FFFF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-05-28]FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSKFF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found] Chrome: =======CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-08-14] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-08-14] (AVAST Software)R2 CxUtilSvc; C:\Program Files\Conexant\SA3\CxUtilSvc.exe [109184 2012-08-06] (Conexant Systems, Inc.)S2 DellDigitalDelivery; c:\Program Files (x86)\Dell Digital Delivery\DeliveryService.exe [173056 2012-06-19] (Dell Products, LP.) [File not signed]R2 IAStorDataMgrSvc; C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [7168 2012-07-09] (Intel Corporation) [File not signed]R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [314696 2014-05-20] (Intel Corporation)R2 Intel® Wireless Bluetooth® 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [157128 2013-09-18] (Intel Corporation)R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [165760 2012-07-17] (Intel Corporation)R3 KeyIso; C:\Windows\SysWOW64\keyiso.dll [44032 2013-08-21] (Microsoft Corporation)S3 lfsvc; C:\Windows\SysWOW64\GeofenceMonitorService.dll [357376 2014-07-09] (Microsoft Corporation)R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-10-01] (Malwarebytes Corporation)R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [968504 2014-10-01] (Malwarebytes Corporation)S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273136 2013-08-28] ()S3 Netlogon; C:\Windows\SysWOW64\netlogon.dll [688640 2014-07-09] (Microsoft Corporation)R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [254512 2012-04-24] ()R2 SftService; C:\Program Files (x86)\Dell Backup and Recovery\sftservice.exe [1924328 2014-09-18] (SoftThinks SAS)S3 smphost; C:\Windows\SysWOW64\smphost.dll [11776 2013-08-21] (Microsoft Corporation)S3 StorSvc; C:\Windows\SysWOW64\storsvc.dll [18944 2013-08-21] (Microsoft Corporation)S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-07-09] (Microsoft Corporation)S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-07-09] (Microsoft Corporation)R2 WindowsVNT_R3; C:\Program Files (x86)\Windows Network Accelerater\v3\winvxm.exe [2973600 2014-10-20] (MicroStudio) [File not signed]R2 YouTubeDownload_P1; C:\Program Files (x86)\YouTube Downloader Services\P1\youtubeserv.exe [2966648 2014-10-31] (MicroTools)R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3378416 2013-08-28] (Intel® Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-08-14] ()R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-08-14] (AVAST Software)R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-08-14] (AVAST Software)R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-08-14] ()R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1041168 2014-08-14] (AVAST Software)R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427360 2014-08-14] (AVAST Software)R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [92008 2014-08-14] (AVAST Software)R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-08-14] ()R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1390904 2013-09-05] (Motorola Solutions, Inc.)R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)S3 DellRbtn; C:\Windows\System32\drivers\DellRbtn.sys [10752 2012-08-04] (OSR Open Systems Resources, Inc.)S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows ® Win 7 DDK provider)S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows ® Win 7 DDK provider)S3 hitmanpro37; C:\WINDOWS\system32\drivers\hitmanpro37.sys [43664 2014-11-01] ()R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2014-10-01] (Malwarebytes Corporation)R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [129752 2014-11-11] (Malwarebytes Corporation)R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2014-10-01] (Malwarebytes Corporation)R3 NETwNe64; C:\Windows\system32\DRIVERS\Netwew00.sys [3345376 2013-10-08] (Intel Corporation)S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-07-09] (Microsoft Corporation)S3 XHCIPort; C:\Windows\System32\drivers\XHCIPort.sys [188384 2012-08-09] (Windows ® Win 7 DDK provider) ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-11-07 22:45 - 2014-11-11 01:02 - 00000000 ____D () C:\Users\susiepark\Desktop\malware fix2014-11-06 10:39 - 2014-11-06 10:39 - 00000942 _____ () C:\Users\susiepark\Desktop\NTREGOPT.lnk2014-11-06 10:39 - 2014-11-06 10:39 - 00000923 _____ () C:\Users\susiepark\Desktop\ERUNT.lnk2014-11-06 10:39 - 2014-11-06 10:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ERUNT2014-11-06 10:39 - 2014-11-06 10:39 - 00000000 ____D () C:\Program Files (x86)\ERUNT2014-11-01 21:56 - 2014-11-01 21:56 - 00003996 _____ () C:\WINDOWS\system32\.crusader2014-11-01 21:49 - 2014-11-01 21:57 - 00043664 _____ () C:\WINDOWS\system32\Drivers\hitmanpro37.sys2014-11-01 21:48 - 2014-11-01 21:56 - 00000000 ____D () C:\ProgramData\HitmanPro2014-11-01 21:48 - 2014-11-01 21:44 - 11222744 _____ (SurfRight B.V.) C:\Users\susiepark\Desktop\HitmanPro_x64.exe2014-11-01 21:41 - 2014-11-01 21:32 - 02114048 _____ (Farbar) C:\Users\susiepark\Desktop\FRST64.exe2014-11-01 21:33 - 2014-11-11 01:23 - 00000000 ____D () C:\FRST2014-11-01 02:29 - 2014-11-11 00:20 - 00000000 ____D () C:\AdwCleaner2014-11-01 00:29 - 2014-11-01 00:29 - 00000258 __RSH () C:\ProgramData\ntuser.pol2014-10-31 23:28 - 2014-10-31 23:28 - 00003094 _____ () C:\WINDOWS\System32\Tasks\{14C760F1-B560-4E3F-A835-EC053B0579E9}2014-10-31 17:32 - 2014-10-31 17:32 - 00612340 _____ (CMI Limited) C:\Users\susiepark\AppData\Local\nsl91BB.tmp2014-10-31 17:13 - 2014-10-31 17:13 - 00000000 ____D () C:\ProgramData\Windows VXM2014-10-31 17:13 - 2014-10-31 17:13 - 00000000 ____D () C:\Program Files (x86)\Windows Network Accelerater2014-10-31 17:09 - 2014-10-31 17:10 - 00000000 ____D () C:\Program Files (x86)\YouTube Downloader Services2014-10-31 17:09 - 2014-10-31 17:09 - 00612340 _____ (CMI Limited) C:\Users\susiepark\AppData\Local\nszC931.tmp2014-10-31 17:09 - 2014-10-31 17:09 - 00000000 ____D () C:\ProgramData\Optimizer2014-10-31 17:08 - 2014-11-01 00:34 - 00003462 _____ () C:\WINDOWS\System32\Tasks\ProPCCleaner_Popup2014-10-31 17:08 - 2014-10-31 17:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Solid YouTube Downloader and Converter2014-10-31 17:08 - 2014-10-31 17:08 - 00003198 _____ () C:\WINDOWS\System32\Tasks\ProPCCleaner_Start2014-10-31 17:08 - 2014-10-31 17:08 - 00000000 ____D () C:\Users\susiepark\AppData\Roaming\youtube-downloader-and-converter2014-10-31 17:08 - 2014-10-31 17:08 - 00000000 ____D () C:\Program Files (x86)\Solid YouTube Downloader and Converter2014-10-31 16:58 - 2014-11-11 01:20 - 00001364 _____ () C:\WINDOWS\Tasks\DJBVB.job2014-10-31 16:58 - 2014-10-31 16:58 - 00004370 _____ () C:\WINDOWS\System32\Tasks\DJBVB2014-10-31 16:58 - 2014-10-31 16:58 - 00000000 ____D () C:\Users\susiepark\AppData\Local\Zeoinsight2014-10-31 16:58 - 2014-10-31 16:58 - 00000000 ____D () C:\Users\susiepark\AppData\Local\ZBAnalyticsCore2014-10-31 16:58 - 2014-10-31 16:58 - 00000000 ____D () C:\Users\susiepark\AppData\Local\Kromtech2014-10-31 16:57 - 2014-11-11 01:20 - 00001712 _____ () C:\WINDOWS\Tasks\SVNBFRX.job2014-10-31 16:57 - 2014-11-01 02:32 - 00001118 _____ () C:\Users\susiepark\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk2014-10-31 16:57 - 2014-10-31 16:57 - 00004720 _____ () C:\WINDOWS\System32\Tasks\SVNBFRX2014-10-31 16:57 - 2014-10-31 16:57 - 00003402 _____ () C:\WINDOWS\System32\Tasks\DonutQuotes2014-10-31 16:56 - 2014-10-31 16:58 - 00000000 ____D () C:\ProgramData\Kromtech2014-10-25 10:02 - 2014-10-25 10:02 - 00022528 _____ () C:\Users\susiepark\AppData\Local\2909328dsisetup29110932.exe2014-10-25 10:02 - 2014-10-25 10:02 - 00000001 _____ () C:\Users\susiepark\AppData\Local\DSI.DAT2014-10-23 20:02 - 2014-10-31 17:02 - 00000124 _____ () C:\Users\susiepark\AppData\Roaming\WB.CFG2014-10-23 19:01 - 2014-10-23 19:01 - 29419944 _____ (Oracle Corporation) C:\Users\susiepark\Downloads\jre-7u60-windows.exe2014-10-16 10:00 - 2014-09-27 14:25 - 04183040 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys2014-10-16 10:00 - 2014-09-03 15:57 - 00921600 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll2014-10-16 10:00 - 2014-09-03 15:49 - 00626688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll2014-10-16 09:59 - 2014-09-07 19:15 - 00054752 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe2014-10-16 09:59 - 2014-09-07 17:46 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll2014-10-16 09:59 - 2014-09-07 17:46 - 00050688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll2014-10-16 09:59 - 2014-09-07 16:08 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe2014-10-16 09:59 - 2014-09-07 16:07 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll2014-10-16 09:59 - 2014-09-07 16:05 - 03448320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll2014-10-16 09:59 - 2014-09-07 16:04 - 00388608 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll2014-10-16 09:59 - 2014-09-07 16:04 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll2014-10-16 09:59 - 2014-09-07 16:03 - 01702400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll2014-10-16 09:59 - 2014-09-07 16:03 - 00839680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll2014-10-16 09:59 - 2014-09-07 15:59 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll2014-10-16 09:59 - 2014-09-07 15:59 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe2014-10-16 09:59 - 2014-09-07 15:56 - 00672256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll2014-10-16 09:59 - 2014-09-07 15:56 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll2014-10-16 09:59 - 2014-09-03 16:10 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll2014-10-16 09:58 - 2014-09-25 14:50 - 13619200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll2014-10-16 09:58 - 2014-09-25 14:43 - 11807232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll2014-10-16 09:58 - 2014-09-18 18:25 - 23631360 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll2014-10-16 09:58 - 2014-09-18 17:44 - 17484800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll2014-10-16 09:58 - 2014-09-18 17:41 - 02796032 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll2014-10-16 09:58 - 2014-09-18 17:36 - 05829632 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll2014-10-16 09:58 - 2014-09-18 17:25 - 04201472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll2014-10-16 09:58 - 2014-09-18 16:55 - 02187264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll2014-10-16 09:58 - 2014-09-18 16:33 - 02309632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll2014-10-16 09:58 - 2014-09-18 15:59 - 01810944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll2014-10-16 09:58 - 2014-09-12 22:29 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\packager.dll2014-10-16 09:58 - 2014-09-12 21:49 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\packager.dll2014-10-16 09:57 - 2014-10-09 14:16 - 00678400 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll2014-10-16 09:57 - 2014-10-08 14:09 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll2014-10-16 09:57 - 2014-09-25 14:46 - 00243200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll2014-10-16 09:57 - 2014-09-25 14:46 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll2014-10-16 09:57 - 2014-09-25 14:32 - 02017280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl2014-10-16 09:57 - 2014-09-25 14:31 - 02108416 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl2014-10-16 09:57 - 2014-09-18 17:40 - 00547328 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll2014-10-16 09:57 - 2014-09-18 17:38 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll2014-10-16 09:57 - 2014-09-18 17:25 - 00758272 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll2014-10-16 09:57 - 2014-09-18 17:24 - 00527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll2014-10-16 09:57 - 2014-09-18 17:02 - 00454656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll2014-10-16 09:57 - 2014-09-18 17:00 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll2014-10-16 09:57 - 2014-09-18 16:59 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll2014-10-16 09:57 - 2014-09-18 16:58 - 00289280 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll2014-10-16 09:57 - 2014-09-18 16:42 - 00731136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll2014-10-16 09:57 - 2014-09-18 16:42 - 00710656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe2014-10-16 09:57 - 2014-09-18 16:42 - 00363008 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll2014-10-16 09:57 - 2014-09-18 16:20 - 00607744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll2014-10-16 09:57 - 2014-09-18 16:20 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll2014-10-16 09:57 - 2014-09-18 16:14 - 01447936 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll2014-10-16 09:57 - 2014-09-18 15:59 - 00775168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll2014-10-16 09:57 - 2014-09-18 15:53 - 01190400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll2014-10-16 09:57 - 2014-09-18 15:52 - 00678400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll2014-10-16 09:57 - 2014-09-12 22:02 - 02779648 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll2014-10-16 09:57 - 2014-09-12 21:30 - 03117568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll2014-10-16 09:57 - 2014-09-03 16:12 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll2014-10-16 09:57 - 2014-09-03 16:01 - 00514048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll2014-10-16 09:57 - 2014-08-28 17:58 - 00109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll2014-10-16 09:57 - 2014-08-28 15:56 - 02646016 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll2014-10-16 09:57 - 2014-08-28 15:47 - 02321920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll2014-10-16 09:57 - 2014-08-15 20:08 - 21195616 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll2014-10-16 09:57 - 2014-08-15 20:08 - 01507648 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll2014-10-16 09:57 - 2014-08-15 20:01 - 01710184 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll2014-10-16 09:57 - 2014-08-15 19:58 - 01112512 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll2014-10-16 09:57 - 2014-08-15 19:57 - 02498880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys2014-10-16 09:57 - 2014-08-15 19:57 - 00428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS2014-10-16 09:57 - 2014-08-15 19:16 - 18722600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll2014-10-16 09:57 - 2014-08-15 19:16 - 01205976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll2014-10-16 09:57 - 2014-08-15 19:03 - 01467384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll2014-10-16 09:57 - 2014-08-15 18:03 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\PJLMON.DLL2014-10-16 09:57 - 2014-08-15 17:31 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll2014-10-16 09:57 - 2014-08-15 17:04 - 00359424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wldap32.dll2014-10-16 09:57 - 2014-08-15 16:58 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll2014-10-16 09:57 - 2014-08-15 16:53 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll2014-10-16 09:57 - 2014-08-15 16:46 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityService.dll2014-10-16 09:57 - 2014-08-15 16:45 - 00267776 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll2014-10-16 09:57 - 2014-08-15 16:43 - 00321024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wldap32.dll2014-10-16 09:57 - 2014-08-15 16:43 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhsvc.dll2014-10-16 09:57 - 2014-08-15 16:31 - 00914432 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll2014-10-16 09:57 - 2014-08-15 16:31 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcsvDevice.dll2014-10-16 09:57 - 2014-08-15 16:29 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll2014-10-16 09:57 - 2014-08-15 16:23 - 01106432 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll2014-10-16 09:57 - 2014-08-15 16:22 - 00717824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll2014-10-16 09:57 - 2014-08-15 16:22 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll2014-10-16 09:57 - 2014-08-15 16:19 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll2014-10-16 09:57 - 2014-08-15 16:18 - 04758528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll2014-10-16 09:57 - 2014-08-15 16:17 - 08757760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll2014-10-16 09:57 - 2014-08-15 16:14 - 00265216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll2014-10-16 09:57 - 2014-08-15 16:13 - 06649344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll2014-10-16 09:57 - 2014-08-15 16:13 - 05902848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll2014-10-16 09:57 - 2014-08-15 16:13 - 00840192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll2014-10-16 09:57 - 2014-08-15 16:11 - 00920064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll2014-10-16 09:57 - 2014-08-15 16:10 - 01120768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe2014-10-16 09:57 - 2014-08-15 16:08 - 05777408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll2014-10-16 09:57 - 2014-08-15 16:07 - 00756224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll2014-10-16 09:57 - 2014-07-31 15:22 - 00388729 _____ () C:\WINDOWS\system32\ApnDatabase.xml ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-11-11 01:22 - 2013-05-28 22:22 - 00004182 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update2014-11-11 01:22 - 2012-11-26 01:03 - 00000000 ____D () C:\Program Files (x86)\Dell Backup and Recovery2014-11-11 01:20 - 2014-07-09 08:28 - 00000000 __RDO () C:\Users\susiepark\OneDrive2014-11-11 01:20 - 2014-06-25 13:59 - 00129752 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys2014-11-11 01:20 - 2013-08-22 06:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT2014-11-11 01:19 - 2014-03-18 01:54 - 00838266 _____ () C:\WINDOWS\PFRO.log2014-11-11 01:19 - 2013-08-22 05:25 - 00524288 ___SH () C:\WINDOWS\system32\config\BBI2014-11-11 01:02 - 2013-08-22 07:36 - 00000000 ____D () C:\WINDOWS\system32\sru2014-11-11 01:00 - 2013-08-22 07:36 - 00000000 ____D () C:\WINDOWS\system32\NDF2014-11-11 00:58 - 2012-12-27 12:28 - 00003600 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1190109235-2420750292-1459495116-10012014-11-11 00:50 - 2014-03-18 02:03 - 00865408 _____ () C:\WINDOWS\system32\PerfStringBackup.INI2014-11-11 00:45 - 2014-07-09 08:52 - 00000000 ___DC () C:\WINDOWS\Panther2014-11-11 00:34 - 2014-07-09 08:17 - 01195781 _____ () C:\WINDOWS\WindowsUpdate.log2014-11-11 00:07 - 2013-08-22 07:36 - 00000000 ____D () C:\WINDOWS\AppReadiness2014-11-10 23:59 - 2014-07-09 08:29 - 00003930 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{2C196E90-D127-45AF-9187-339AEDC61227}2014-11-07 23:02 - 2012-12-27 12:21 - 00000000 ____D () C:\Users\susiepark\AppData\Local\VirtualStore2014-11-01 22:32 - 2014-03-18 01:45 - 00000000 ____D () C:\WINDOWS\SKB2014-11-01 22:21 - 2013-05-21 14:50 - 00000000 ____D () C:\Program Files\My Dell2014-11-01 09:32 - 2013-05-28 22:22 - 00000000 ____D () C:\Program Files (x86)\Google2014-11-01 09:24 - 2013-05-28 22:24 - 00000000 ____D () C:\Program Files\Google2014-11-01 08:45 - 2013-05-28 22:22 - 00000000 ____D () C:\Users\susiepark\AppData\Local\Google2014-11-01 02:29 - 2013-08-22 06:46 - 00292913 _____ () C:\WINDOWS\setupact.log2014-11-01 02:08 - 2014-07-09 08:02 - 00000000 ____D () C:\Users\susiepark2014-11-01 01:29 - 2013-08-22 07:36 - 00000000 ____D () C:\WINDOWS\Web2014-10-31 22:35 - 2012-07-26 00:12 - 00000000 ____D () C:\WINDOWS\LiveKernelReports2014-10-31 21:25 - 2014-06-25 13:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware2014-10-31 21:25 - 2014-06-25 13:59 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware2014-10-31 21:25 - 2013-05-28 22:48 - 00001120 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk2014-10-31 21:19 - 2012-07-25 21:26 - 00000226 _____ () C:\WINDOWS\win.ini2014-10-31 21:16 - 2013-08-22 07:36 - 00000000 ____D () C:\WINDOWS\system32\GroupPolicy2014-10-26 18:56 - 2012-12-29 13:56 - 00212480 _____ () C:\Users\susiepark\Documents\가계부 2013.xls2014-10-25 18:09 - 2012-12-29 13:56 - 00000000 ____D () C:\Users\susiepark\Documents\Golden West2014-10-22 15:54 - 2013-08-26 10:48 - 00000000 ____D () C:\WINDOWS\system32\MRT2014-10-22 15:51 - 2013-01-04 09:44 - 103265616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe2014-10-21 18:36 - 2013-08-22 07:36 - 00000000 ____D () C:\WINDOWS\rescache2014-10-18 20:13 - 2014-07-15 11:26 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel2014-10-18 20:13 - 2013-08-22 07:36 - 00000000 ___RD () C:\WINDOWS\ToastData2014-10-18 20:13 - 2013-08-22 07:36 - 00000000 ____D () C:\WINDOWS\WinStore2014-10-18 20:13 - 2013-08-22 07:36 - 00000000 ____D () C:\WINDOWS\MediaViewer2014-10-18 20:13 - 2013-08-22 07:36 - 00000000 ____D () C:\WINDOWS\FileManager2014-10-18 20:13 - 2013-08-22 07:36 - 00000000 ____D () C:\WINDOWS\Camera2014-10-18 08:38 - 2013-01-18 00:20 - 00000000 ____D () C:\ProgramData\Microsoft Help2014-10-18 08:38 - 2012-07-25 23:59 - 00000000 ____D () C:\WINDOWS\CbsTemp2014-10-18 07:49 - 2013-08-22 06:44 - 00419872 _____ () C:\WINDOWS\system32\FNTCACHE.DAT2014-10-12 14:26 - 2013-08-22 07:36 - 00000000 ____D () C:\WINDOWS\system32\Recovery Some content of TEMP:====================C:\Users\susiepark\AppData\Local\Temp\49ezfvtf.dllC:\Users\susiepark\AppData\Local\Temp\fu9zi3u3.dllC:\Users\susiepark\AppData\Local\Temp\levcamyg.dllC:\Users\susiepark\AppData\Local\Temp\Quarantine.exeC:\Users\susiepark\AppData\Local\Temp\sqlite3.dllC:\Users\susiepark\AppData\Local\Temp\vcredist_x64.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signedC:\Windows\System32\wininit.exe => File is digitally signedC:\Windows\explorer.exe => File is digitally signedC:\Windows\SysWOW64\explorer.exe => File is digitally signedC:\Windows\System32\svchost.exe => File is digitally signedC:\Windows\SysWOW64\svchost.exe => File is digitally signedC:\Windows\System32\services.exe => File is digitally signedC:\Windows\System32\User32.dll => File is digitally signedC:\Windows\SysWOW64\User32.dll => File is digitally signedC:\Windows\System32\userinit.exe => File is digitally signedC:\Windows\SysWOW64\userinit.exe => File is digitally signedC:\Windows\System32\rpcss.dll => File is digitally signedC:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-11-11 00:58 ==================== End Of Log ============================ Here is the Addition.txt log Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-11-2014Ran by susiepark at 2014-11-11 01:23:53Running from F:\malware fixBoot Mode: Normal========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) avast! Free Antivirus (HKLM-x32\...\avast) (Version: 9.0.2021 - AVAST Software)Conexant SmartAudio HD (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.54.40.0 - Conexant)CyberLink Media Suite Essentials (HKLM-x32\...\InstallShield_{8F14AA37-5193-4A14-BD5B-BDF9B361AEF7}) (Version: 10.0 - CyberLink Corp.)D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) HiddenDell Backup and Recovery (HKLM-x32\...\{0ED7EE95-6A97-47AA-AD73-152C08A15B04}) (Version: 1.7.5.63 - Dell Inc.)Dell Digital Delivery (HKLM-x32\...\{D9ED3EFC-AB00-4CE0-ADED-80EE6B1158A7}) (Version: 2.2.2000.0 - Dell Products, LP)Dell Touchpad (HKLM\...\Elantech) (Version: 11.3.1.4 - ELAN Microelectronic Corp.)ERUNT 1.1j (HKLM-x32\...\ERUNT_is1) (Version: - Lars Hederer)Intel® Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1008 - Intel Corporation)Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3621 - Intel Corporation)Intel® PROSet/Wireless for Bluetooth® + High Speed (HKLM\...\{89478C31-5CE8-461A-9084-9A0AF059F84F}) (Version: 15.5.0.0344 - Intel Corporation)Intel® PROSet/Wireless Software for Bluetooth® Technology (HKLM\...\{302600C1-6BDF-4FD1-1309-148929CC1385}) (Version: 3.1.1309.0390 - Intel Corporation)Intel® Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.0.1207 - Intel Corporation)Intel® Turbo Boost Technology Monitor 2.6 (HKLM\...\{6C9365EB-1F9E-4893-9196-3EC77C88D0C5}) (Version: 2.6.2.0 - Intel)Intel® WiDi (HKLM\...\{EDBA2433-0910-4C72-8C5B-8FEDAE3EF18E}) (Version: 3.5.34.0 - Intel Corporation)Intel® PROSet/Wireless Software (HKLM-x32\...\{c9967fbd-e3c3-4ed0-992a-5b33260f2944}) (Version: 16.1.5 - Intel Corporation)Malwarebytes Anti-Malware version 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)Movie Maker (x32 Version: 16.4.3503.0728 - Microsoft Corporation) HiddenMSVCRT110_amd64 (Version: 16.4.1108.0727 - Microsoft) HiddenMy Dell (HKLM\...\PC-Doctor for Windows) (Version: 3.5.6426.22 - PC-Doctor, Inc.)Photo Common (x32 Version: 16.4.3503.0728 - Microsoft Corporation) HiddenPhoto Gallery (x32 Version: 16.4.3503.0728 - Microsoft Corporation) HiddenQuickset64 (HKLM\...\{87CF757E-C1F1-4D22-865C-00C6950B5258}) (Version: 10.15.005 - Dell Inc.)Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.8400.39030 - Realtek Semiconductor Corp.)Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)Solid YouTube Downloader and Converter 6.1.9.0 (HKLM-x32\...\{66732EEE-ECBC-4CA6-A474-ytd}_is1) (Version: - DreamVideoSoft,Inc.)Update for Korean Microsoft IME Standard Dictionary (HKLM\...\{75A54180-CA5E-47B8-AFBB-29337B976B21}) (Version: 16.0.662.1 - Microsoft Corporation)Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3503.0728 - Microsoft Corporation) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-1190109235-2420750292-1459495116-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation) ==================== Restore Points ========================= 21-10-2014 16:31:13 Windows Update01-11-2014 05:42:27 Scheduled Checkpoint02-11-2014 05:55:17 Checkpoint by HitmanPro11-11-2014 09:06:29 Scheduled Checkpoint ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2013-08-22 05:25 - 2013-08-22 05:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {3ED9FEAC-7AF4-441E-8135-5AEF3199F15F} - System32\Tasks\SVNBFRX => C:\Users\susiepark\AppData\Roaming\SVNBFRX.exe <==== ATTENTIONTask: {6E02F1AB-8F4E-48DF-8B3F-CFA62C818AF3} - System32\Tasks\DJBVB => C:\Users\susiepark\AppData\Roaming\DJBVB.exe <==== ATTENTIONTask: {78E03475-CC35-4E27-A40C-39949103CEDE} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-08-14] (AVAST Software)Task: {8F2A63CB-2965-40E7-ADBF-525577D1ADFD} - System32\Tasks\PCDEventLauncherTask => C:\Program Files\My Dell\sessionchecker.exe [2014-01-31] (PC-Doctor, Inc.)Task: {B0A0955F-827E-465A-B955-71CF801D27A2} - System32\Tasks\DonutQuotes => C:\Program Files (x86)\donutleads\ScheduledTask.exeTask: {B6CF9369-EE80-4A89-A48F-9C944D631710} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\My Dell\uaclauncher.exe [2014-01-31] (PC-Doctor, Inc.)Task: {CD853C49-482B-4EEF-A04C-A853AFC148E2} - System32\Tasks\ProPCCleaner_Start => C:\Program Files (x86)\Pro PC Cleaner\ProPCCleaner.exeTask: {D3EA0BD6-4BA0-4B77-A3DE-30F58B3400FD} - System32\Tasks\ProPCCleaner_Popup => C:\Program Files (x86)\Pro PC Cleaner\Splash.exeTask: {E8CFEF5D-9583-4E92-B927-E758F44B8A64} - System32\Tasks\SystemToolsDailyTest => uaclauncher.exeTask: C:\WINDOWS\Tasks\DJBVB.job => C:\Users\susiepark\AppData\Roaming\DJBVB.exe <==== ATTENTIONTask: C:\WINDOWS\Tasks\SVNBFRX.job => C:\Users\susiepark\AppData\Roaming\SVNBFRX.exe <==== ATTENTION ==================== Loaded Modules (whitelisted) ============= 2012-11-26 00:59 - 2012-04-24 18:43 - 00254512 ____N () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe2014-09-10 07:18 - 2014-09-10 07:18 - 00183296 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20605_x64__8wekyb3d8bbwe\ErrorReporting.dll2012-11-26 00:52 - 2012-07-18 09:03 - 00165024 _____ () C:\Program Files\Conexant\SA3\MaxxAudioWrapper.dll2014-08-14 22:11 - 2014-08-14 22:11 - 00301152 _____ () C:\Program Files\AVAST Software\Avast\aswProperty.dll2014-11-11 00:22 - 2014-11-11 00:22 - 02902016 _____ () C:\Program Files\AVAST Software\Avast\defs\14111100\algo.dll2012-11-26 00:58 - 2012-06-07 19:34 - 00627216 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll2012-06-08 09:34 - 2012-06-08 09:34 - 00016400 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll2014-08-14 22:11 - 2014-08-14 22:11 - 19329904 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll2014-10-21 18:18 - 2014-10-21 18:18 - 00016384 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\PSIClient\80a14cd14e9579821dba2282b4349fef\PSIClient.ni.dll2012-11-26 00:52 - 2012-06-25 10:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\ACE.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) AlternateDataStreams: C:\Users\susiepark\OneDrive:ms-propertiesAlternateDataStreams: C:\Users\susiepark\Downloads\passport.eml:OECustomProperty ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) HKLM\...\StartupApproved\Run32: => "ConvertAd"HKCU\...\StartupApproved\StartupFolder: => "MyPC Backup.lnk"HKCU\...\StartupApproved\Run: => "Optimizer Pro"HKCU\...\StartupApproved\Run: => "PCKeeper2" ========================= Accounts: ========================== Administrator (S-1-5-21-1190109235-2420750292-1459495116-500 - Administrator - Disabled)Guest (S-1-5-21-1190109235-2420750292-1459495116-501 - Limited - Disabled)HomeGroupUser$ (S-1-5-21-1190109235-2420750292-1459495116-1398 - Limited - Enabled)susiepark (S-1-5-21-1190109235-2420750292-1459495116-1001 - Administrator - Enabled) => C:\Users\susiepark ==================== Faulty Device Manager Devices ============= Name: USB-IF xHCI USB Host ControllerDescription: USB-IF xHCI USB Host ControllerClass Guid: {8a2edc79-c759-46f2-88af-9d4efe3b5eee}Manufacturer: Intel CorporationService: XHCIPortProblem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)Resolution: Update the driver ==================== Event log errors: ========================= Application errors:================== System errors:=============Error: (11/11/2014 01:22:44 AM) (Source: Service Control Manager) (EventID: 7034) (User: )Description: The Dell Digital Delivery Service service terminated unexpectedly. It has done this 1 time(s). Error: (11/11/2014 00:48:19 AM) (Source: Service Control Manager) (EventID: 7034) (User: )Description: The Dell Digital Delivery Service service terminated unexpectedly. It has done this 1 time(s). Error: (11/11/2014 00:23:46 AM) (Source: Service Control Manager) (EventID: 7034) (User: )Description: The Dell Digital Delivery Service service terminated unexpectedly. It has done this 1 time(s). Error: (11/11/2014 00:15:29 AM) (Source: DCOM) (EventID: 10010) (User: SUSIE)Description: {9AA46009-3CE0-458A-A354-715610A075E6} Error: (11/11/2014 00:14:59 AM) (Source: DCOM) (EventID: 10010) (User: SUSIE)Description: {9AA46009-3CE0-458A-A354-715610A075E6} Error: (11/11/2014 00:14:29 AM) (Source: DCOM) (EventID: 10010) (User: SUSIE)Description: {9AA46009-3CE0-458A-A354-715610A075E6} Error: (11/11/2014 00:13:59 AM) (Source: DCOM) (EventID: 10010) (User: SUSIE)Description: {9AA46009-3CE0-458A-A354-715610A075E6} Error: (11/11/2014 00:13:29 AM) (Source: DCOM) (EventID: 10010) (User: SUSIE)Description: {9AA46009-3CE0-458A-A354-715610A075E6} Error: (11/11/2014 00:12:59 AM) (Source: DCOM) (EventID: 10010) (User: SUSIE)Description: {9AA46009-3CE0-458A-A354-715610A075E6} Error: (11/11/2014 00:12:29 AM) (Source: DCOM) (EventID: 10010) (User: SUSIE)Description: {9AA46009-3CE0-458A-A354-715610A075E6} Microsoft Office Sessions:========================= CodeIntegrity Errors:=================================== Date: 2014-11-01 01:28:54.719 Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Settings Manager\smdmf\x64\sysapcrt.dll that did not meet the Windows signing level requirements. Date: 2014-11-01 01:28:54.578 Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Settings Manager\smdmf\sysapcrt.dll that did not meet the Windows signing level requirements. Date: 2014-10-31 22:35:55.795 Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Malwarebytes Anti-Malware\mbampt.exe that did not meet the Windows signing level requirements. Date: 2014-10-31 22:35:21.508 Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Malwarebytes Anti-Malware\mbampt.exe that did not meet the Windows signing level requirements. Date: 2014-10-31 22:14:49.071 Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Settings Manager\smdmf\x64\sysapcrt.dll that did not meet the Windows signing level requirements. Date: 2014-10-31 22:14:48.899 Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Settings Manager\smdmf\sysapcrt.dll that did not meet the Windows signing level requirements. ==================== Memory info =========================== Processor: Intel® Core i5-3210M CPU @ 2.50GHzPercentage of memory in use: 18%Total physical RAM: 8061.27 MBAvailable physical RAM: 6531.02 MBTotal Pagefile: 9341.27 MBAvailable Pagefile: 7733.44 MBTotal Virtual: 131072 MBAvailable Virtual: 131071.84 MB ==================== Drives ================================ Drive c: (OS) (Fixed) (Total:918.01 GB) (Free:868.32 GB) NTFSDrive f: () (Removable) (Total:7.45 GB) (Free:1.22 GB) FAT32 ==================== MBR & Partition Table ================== ========================================================Disk: 0 (Size: 931.5 GB) (Disk ID: DAACC22E) Partition: GPT Partition Type. ========================================================Disk: 1 (Size: 7.5 GB) (Disk ID: 00000000) Partition: GPT Partition Type. ==================== End Of Log ============================ please advise. Thanks!
  13. jpark1
    Here are the logs for steps 4-6, I was unable to run Step 7 because I am still receiving the message "check your proxy settings 127.0.0.1:8800" in Internet Explorer STEP 4: JRT ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~Junkware Removal Tool (JRT) by ThisisuVersion: 6.3.7 (11.08.2014:1)OS: Windows 8.1 x64Ran by susiepark on Tue 11/11/2014 at 0:06:10.03~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Start PageSuccessfully repaired: [Registry Value] HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Start PageSuccessfully repaired: [Registry Value] HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Main\\Start PageSuccessfully repaired: [Registry Value] HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\Main\\Start PageSuccessfully repaired: [Registry Value] HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\Main\\Start PageSuccessfully repaired: [Registry Value] HKEY_USERS\S-1-5-21-1190109235-2420750292-1459495116-1001\Software\Microsoft\Internet Explorer\Main\\Start Page ~~~ Registry Keys ~~~ Files ~~~ Folders Successfully deleted: [Folder] "C:\Users\susiepark\appdata\local\pro_pc_cleaner"Successfully deleted: [Folder] "C:\Users\susiepark\documents\propccleaner" ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~Scan was completed on Tue 11/11/2014 at 0:10:06.12End of JRT log~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ STEP 5:ADWCLEANER # AdwCleaner v4.101 - Report created 11/11/2014 at 00:20:22# Updated 09/11/2014 by Xplode# Database : 2014-11-07.1 [Local]# Operating System : Windows 8.1 (64 bits)# Username : susiepark - SUSIE# Running from : F:\malware fix\AdwCleaner.exe# Option : Clean ***** [ Services ] ***** ***** [ Files / Folders ] ***** ***** [ Scheduled Tasks ] ***** ***** [ Shortcuts ] ***** ***** [ Registry ] ***** ***** [ Browsers ] ***** -\\ Internet Explorer v11.0.9600.17344 -\\ Mozilla Firefox v ************************* AdwCleaner[R0].txt - [13454 octets] - [01/11/2014 02:30:00]AdwCleaner[R1].txt - [1048 octets] - [01/11/2014 02:43:59]AdwCleaner[R2].txt - [945 octets] - [11/11/2014 00:14:24]AdwCleaner[s0].txt - [13078 octets] - [01/11/2014 02:32:22]AdwCleaner[s1].txt - [1110 octets] - [01/11/2014 02:46:10]AdwCleaner[s2].txt - [867 octets] - [11/11/2014 00:20:22] ########## EOF - C:\AdwCleaner\AdwCleaner[s2].txt - [926 octets] ########## STEP 6:MalwarebytesMalwarebytes Anti-Malwarewww.malwarebytes.org Scan Date: 11/11/2014Scan Time: 12:24:51 AMLogfile: mbam.txtAdministrator: Yes Version: 2.00.3.1025Malware Database: v2014.11.11.03Rootkit Database: v2014.11.10.01License: TrialMalware Protection: EnabledMalicious Website Protection: EnabledSelf-protection: Disabled OS: Windows 8.1CPU: x64File System: NTFSUser: susiepark Scan Type: Threat ScanResult: CompletedObjects Scanned: 319678Time Elapsed: 18 min, 41 sec Memory: EnabledStartup: EnabledFilesystem: EnabledArchives: EnabledRootkits: EnabledHeuristics: EnabledPUP: EnabledPUM: Enabled Processes: 0(No malicious items detected) Modules: 0(No malicious items detected) Registry Keys: 0(No malicious items detected) Registry Values: 0(No malicious items detected) Registry Data: 0(No malicious items detected) Folders: 1PUP.Optional.MaintainerSvc.A, C:\ProgramData\685d26dc-c30a-434b-bda2-3004e8743669, Quarantined, [f02fcf6badcf4aec4fda2608e91a5ca4], Files: 1PUP.Optional.MaintainerSvc.A, C:\ProgramData\685d26dc-c30a-434b-bda2-3004e8743669\maintainer.exe, Quarantined, [b9668baf94e87bbbad999946669b47b9], Physical Sectors: 0(No malicious items detected) (end) please advise what to do next. Thank you
  14. jpark1
    STEP 1: I ran ERUNT. I received these 8 error messages window 1: Error saving file C:\Users\susiepark\Desktop\registry\11-6-2014\SOFTWARE ! Continue with the next file? [ RegCreateKeyEx: 5 - Access is denied ] window 2: Error saving file C:\Users\susiepark\Desktop\registry\11-6-2014\SYSTEM ! Continue with the next file? [ RegCreateKeyEx: 5 - Access is denied ] window 3: Error saving file C:\Users\susiepark\Desktop\registry\11-6-2014\DEFAULT ! Continue with the next file? [ RegCreateKeyEx: 5 - Access is denied ] window 4: Error saving file C:\Users\susiepark\Desktop\registry\11-6-2014\SECURITY ! Continue with the next file? [ RegCreateKeyEx: 5 - Access is denied ] window 5: Error saving file C:\Users\susiepark\Desktop\registry\11-6-2014\SAM ! Continue with the next file? [ RegCreateKeyEx: 5 - Access is denied ] window 6: Error saving file C:\Users\susiepark\Desktop\registry\11-6-2014\BCD ! Continue with the next file? [ RegCreateKeyEx: 5 - Access is denied ] window 7: Error saving file C:\Users\susiepark\Desktop\registry\11-6-2014\00000001\ ! Continue with the next file? [ RegCreateKeyEx: 5 - Access is denied ] window 8: Error saving file C:\Users\susiepark\Desktop\registry\11-6-2014\00000002\ ! Continue with the next file? [ RegCreateKeyEx: 5 - Access is denied ]
  15. jpark1
    I ran RKill. The log is listed below. I am still not able to use any browsers. The same message continues to appear "check your proxy settings 127.0.0.1:8800" Rkill 2.6.8 by Lawrence Abrams (Grinler) http://www.bleepingcomputer.com/Copyright 2008-2014 BleepingComputer.comMore Information about Rkill can be found at this link: http://www.bleepingcomputer.com/forums/topic308364.html Program started at: 11/06/2014 09:45:05 AM in x64 mode.Windows Version: Windows 8.1 Checking for Windows services to stop: * No malware services found to stop. Checking for processes to terminate: * No malware processes found to kill. Checking Registry for malware related settings: * No issues found in the Registry. Resetting .EXE, .COM, & .BAT associations in the Windows Registry. Performing miscellaneous checks: * Windows Defender Disabled [HKLM\SOFTWARE\Microsoft\Windows Defender] "DisableAntiSpyware" = dword:00000001 * Reparse Point/Junctions Found (Most likely legitimate)! * C:\WINDOWS\apppatch\spbin => C:\PROGRA~2\SearchProtect\SearchProtect\bin [Dir] Checking Windows Service Integrity: * MsKeyboardFilter [Missing Service] * CSC [Missing Service] * E1G60 [Missing Service] * HdAudAddService [Missing Service] * kbldfltr [Missing Service] * storvsp [Missing Service] * Vid [Missing Service] * vmbusr [Missing Service] * vpcivsp [Missing Service] Searching for Missing Digital Signatures: * No issues found. Checking HOSTS File: * No issues found. Program finished at: 11/06/2014 09:46:04 AMExecution time: 0 hours(s), 0 minute(s), and 58 seconds(s)
  16. jpark1
    I recently removed over 10 malware/adware programs and now I am left unable to access the internet from any of my browsers. I've tried changing the proxy settings in Internet Options but it continues to revert back and I receive this message when I open Internet Explorer "check your proxy settings 127.0.0.1:8800". Your help would be greatly appreciated. Here are my FRST logs Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-11-2014Ran by susiepark (administrator) on SUSIE on 01-11-2014 23:43:15Running from C:\Users\susiepark\DesktopLoaded Profile: susiepark (Available profiles: susiepark)Platform: Windows 8.1 (X64) OS Language: English (United States)Internet Explorer Version 11Boot Mode: NormalTutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Intel Corporation) C:\Windows\System32\igfxCUIService.exe(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe(Microsoft Corporation) C:\Windows\System32\wlanext.exe(Conexant Systems, Inc.) C:\Program Files\CONEXANT\SA3\CxUtilSvc.exe(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe(Microsoft Corporation) C:\Windows\System32\dasHost.exe(Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe(Intel® Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe(MicroStudio) C:\Program Files (x86)\Windows Network Accelerater\v3\winvxm.exe(MicroTools) C:\Program Files (x86)\YouTube Downloader Services\P1\youtubeserv.exe(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe(Microsoft Corporation) C:\Windows\System32\dllhost.exe(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe(Intel® Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe(SoftThinks SAS) C:\Program Files (x86)\Dell Backup and Recovery\SftService.exe(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe(Microsoft Corporation) C:\Windows\System32\InputMethod\KOR\KorIME.exe(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe(Intel Corporation) C:\Windows\System32\igfxEM.exe(Intel Corporation) C:\Windows\System32\igfxHK.exe(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20605_x64__8wekyb3d8bbwe\livecomm.exe(Intel Corporation) C:\Windows\System32\igfxTray.exe(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDGesture.exe(Conexant Systems, Inc.) C:\Program Files\CONEXANT\SA3\SmartAudio3.exe(Microsoft Corporation) C:\Windows\System32\rundll32.exe(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIconLaunch.exe(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2898768 2012-07-09] (ELAN Microelectronics Corp.)HKLM\...\Run: [QuickSet] => c:\Program Files\Dell\QuickSet\QuickSet.exe [5752480 2012-07-11] (Dell Inc.)HKLM\...\Run: [smartAudio] => C:\Program Files\CONEXANT\SA3\SACpl.exe [1647616 2012-06-13] (Conexant Systems, Inc.)HKLM\...\Run: [intelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"HKLM\...\Run: [bTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayAppHKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetchHKLM-x32\...\Run: [iAStorIcon] => C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [277504 2012-07-09] (Intel Corporation)HKLM-x32\...\Run: [CLMLServer_For_P2G8] => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-07] (CyberLink)HKLM-x32\...\Run: [CLVirtualDrive] => C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-04] (CyberLink Corp.)HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [143888 2012-06-01] (CyberLink Corp.)HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-08-14] (AVAST Software)Winlogon\Notify\igfxcui: igfxdev.dll [X]HKU\S-1-5-21-1190109235-2420750292-1459495116-1001\...\Run: [PCKeeper2] => "C:\Program Files\Kromtech\PCKeeper\PCKeeper.exe" /autorunShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)GroupPolicy: Group Policy on Chrome detected <======= ATTENTIONCHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) SearchScopes: HKLM - {790D632D-3BBD-4593-BD36-2123878DC74A} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MDDCJSSearchScopes: HKCU - URL http://search.conduit.com/Results.aspx?ctid=CT3325809&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=5&UP=SPEEED6747-E8FA-4B85-842A-C1681E21023D&q={searchTerms}&SSPV=SearchScopes: HKCU - SuggestionsURL_JSON http://suggest.search.conduit.com/CSuggestJson.ashx?prefix={searchTerms}SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = SearchScopes: HKCU - {790D632D-3BBD-4593-BD36-2123878DC74A} URL = BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No FileToolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No FileTcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox:========FF ProfilePath: C:\Users\susiepark\AppData\Roaming\Mozilla\Firefox\Profiles\05hilobe.defaultFF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)FF Extension: Shopping Helper Smartbar - C:\Users\susiepark\AppData\Roaming\Mozilla\Firefox\Profiles\05hilobe.default\Extensions\{bbfb0264-2bab-7b26-4286-95e0d34cee00} [2014-10-31]FF Extension: Techgile - C:\Users\susiepark\AppData\Roaming\Mozilla\Firefox\Profiles\05hilobe.default\Extensions\{049bbcc5-fa2f-4f64-ac57-0d003a8907b3}.xpi [2014-10-31]FF Extension: Astro New Tab - C:\Users\susiepark\AppData\Roaming\Mozilla\Firefox\Profiles\05hilobe.default\Extensions\{f2548724-373f-45fe-be6a-3a85e87b7711}.xpi [2014-10-31]FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FFFF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-05-28]FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSKFF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found] Chrome: =======CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-08-14] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-08-14] (AVAST Software)R2 CxUtilSvc; C:\Program Files\Conexant\SA3\CxUtilSvc.exe [109184 2012-08-06] (Conexant Systems, Inc.)S2 DellDigitalDelivery; c:\Program Files (x86)\Dell Digital Delivery\DeliveryService.exe [173056 2012-06-19] (Dell Products, LP.) [File not signed]R2 IAStorDataMgrSvc; C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [7168 2012-07-09] (Intel Corporation) [File not signed]R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [314696 2014-05-21] (Intel Corporation)R2 Intel® Wireless Bluetooth® 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [157128 2013-09-18] (Intel Corporation)R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [165760 2012-07-17] (Intel Corporation)R3 KeyIso; C:\Windows\SysWOW64\keyiso.dll [44032 2013-08-21] (Microsoft Corporation)S3 lfsvc; C:\Windows\SysWOW64\GeofenceMonitorService.dll [357376 2014-07-09] (Microsoft Corporation)R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-10-01] (Malwarebytes Corporation)S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [968504 2014-10-01] (Malwarebytes Corporation)S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273136 2013-08-28] ()S3 Netlogon; C:\Windows\SysWOW64\netlogon.dll [688640 2014-07-09] (Microsoft Corporation)R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [254512 2012-04-24] ()R2 SftService; C:\Program Files (x86)\Dell Backup and Recovery\sftservice.exe [1924328 2014-09-18] (SoftThinks SAS)S3 smphost; C:\Windows\SysWOW64\smphost.dll [11776 2013-08-21] (Microsoft Corporation)S3 StorSvc; C:\Windows\SysWOW64\storsvc.dll [18944 2013-08-21] (Microsoft Corporation)S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-07-09] (Microsoft Corporation)S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-07-09] (Microsoft Corporation)R2 WindowsVNT_R3; C:\Program Files (x86)\Windows Network Accelerater\v3\winvxm.exe [2973600 2014-10-20] (MicroStudio) [File not signed]R2 YouTubeDownload_P1; C:\Program Files (x86)\YouTube Downloader Services\P1\youtubeserv.exe [2966648 2014-10-31] (MicroTools)R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3378416 2013-08-28] (Intel® Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-08-14] ()R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-08-14] (AVAST Software)R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-08-14] (AVAST Software)R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-08-14] ()R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1041168 2014-08-14] (AVAST Software)R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427360 2014-08-14] (AVAST Software)S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [92008 2014-08-14] (AVAST Software)R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-08-14] ()R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1390904 2013-09-05] (Motorola Solutions, Inc.)R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)S3 DellRbtn; C:\Windows\System32\drivers\DellRbtn.sys [10752 2012-08-04] (OSR Open Systems Resources, Inc.)S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows ® Win 7 DDK provider)S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows ® Win 7 DDK provider)S3 hitmanpro37; C:\WINDOWS\system32\drivers\hitmanpro37.sys [43664 2014-11-01] ()R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2014-10-01] (Malwarebytes Corporation)S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2014-10-01] (Malwarebytes Corporation)R3 NETwNe64; C:\Windows\system32\DRIVERS\Netwew00.sys [3345376 2013-10-08] (Intel Corporation)S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-07-09] (Microsoft Corporation)S3 XHCIPort; C:\Windows\System32\drivers\XHCIPort.sys [188384 2012-08-09] (Windows ® Win 7 DDK provider) ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-11-01 23:43 - 2014-11-01 23:43 - 00014982 _____ () C:\Users\susiepark\Desktop\FRST.txt2014-11-01 22:56 - 2014-11-01 22:56 - 00003996 _____ () C:\WINDOWS\system32\.crusader2014-11-01 22:49 - 2014-11-01 22:57 - 00043664 _____ () C:\WINDOWS\system32\Drivers\hitmanpro37.sys2014-11-01 22:48 - 2014-11-01 22:56 - 00000000 ____D () C:\ProgramData\HitmanPro2014-11-01 22:48 - 2014-11-01 22:44 - 11222744 _____ (SurfRight B.V.) C:\Users\susiepark\Desktop\HitmanPro_x64.exe2014-11-01 22:41 - 2014-11-01 22:32 - 02114048 _____ (Farbar) C:\Users\susiepark\Desktop\FRST64.exe2014-11-01 22:33 - 2014-11-01 23:43 - 00000000 ____D () C:\FRST2014-11-01 03:43 - 2014-11-01 03:28 - 01375089 _____ () C:\Users\susiepark\Desktop\adwcleaner_3.311.exe2014-11-01 03:29 - 2014-11-01 03:46 - 00000000 ____D () C:\AdwCleaner2014-11-01 01:29 - 2014-11-01 01:29 - 00000258 __RSH () C:\ProgramData\ntuser.pol2014-11-01 00:28 - 2014-11-01 00:28 - 00003094 _____ () C:\WINDOWS\System32\Tasks\{14C760F1-B560-4E3F-A835-EC053B0579E9}2014-10-31 19:41 - 2014-10-31 19:41 - 00000000 ____D () C:\ProgramData\685d26dc-c30a-434b-bda2-3004e87436692014-10-31 18:32 - 2014-10-31 18:32 - 00612340 _____ (CMI Limited) C:\Users\susiepark\AppData\Local\nsl91BB.tmp2014-10-31 18:13 - 2014-10-31 18:13 - 00000000 ____D () C:\ProgramData\Windows VXM2014-10-31 18:13 - 2014-10-31 18:13 - 00000000 ____D () C:\Program Files (x86)\Windows Network Accelerater2014-10-31 18:09 - 2014-10-31 18:10 - 00000000 ____D () C:\Program Files (x86)\YouTube Downloader Services2014-10-31 18:09 - 2014-10-31 18:09 - 00612340 _____ (CMI Limited) C:\Users\susiepark\AppData\Local\nszC931.tmp2014-10-31 18:09 - 2014-10-31 18:09 - 00000000 ____D () C:\ProgramData\Optimizer2014-10-31 18:08 - 2014-11-01 01:37 - 00000000 ____D () C:\Users\susiepark\Documents\ProPCCleaner2014-10-31 18:08 - 2014-11-01 01:34 - 00003462 _____ () C:\WINDOWS\System32\Tasks\ProPCCleaner_Popup2014-10-31 18:08 - 2014-10-31 18:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Solid YouTube Downloader and Converter2014-10-31 18:08 - 2014-10-31 18:08 - 00003198 _____ () C:\WINDOWS\System32\Tasks\ProPCCleaner_Start2014-10-31 18:08 - 2014-10-31 18:08 - 00000000 ____D () C:\Users\susiepark\AppData\Roaming\youtube-downloader-and-converter2014-10-31 18:08 - 2014-10-31 18:08 - 00000000 ____D () C:\Users\susiepark\AppData\Local\Pro_PC_Cleaner2014-10-31 18:08 - 2014-10-31 18:08 - 00000000 ____D () C:\Program Files (x86)\Solid YouTube Downloader and Converter2014-10-31 17:58 - 2014-11-01 23:42 - 00001364 _____ () C:\WINDOWS\Tasks\DJBVB.job2014-10-31 17:58 - 2014-10-31 17:58 - 00004370 _____ () C:\WINDOWS\System32\Tasks\DJBVB2014-10-31 17:58 - 2014-10-31 17:58 - 00000000 ____D () C:\Users\susiepark\AppData\Local\Zeoinsight2014-10-31 17:58 - 2014-10-31 17:58 - 00000000 ____D () C:\Users\susiepark\AppData\Local\ZBAnalyticsCore2014-10-31 17:58 - 2014-10-31 17:58 - 00000000 ____D () C:\Users\susiepark\AppData\Local\Kromtech2014-10-31 17:57 - 2014-11-01 23:42 - 00001712 _____ () C:\WINDOWS\Tasks\SVNBFRX.job2014-10-31 17:57 - 2014-11-01 03:32 - 00001118 _____ () C:\Users\susiepark\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk2014-10-31 17:57 - 2014-10-31 17:57 - 00004720 _____ () C:\WINDOWS\System32\Tasks\SVNBFRX2014-10-31 17:57 - 2014-10-31 17:57 - 00003402 _____ () C:\WINDOWS\System32\Tasks\DonutQuotes2014-10-31 17:56 - 2014-10-31 17:58 - 00000000 ____D () C:\ProgramData\Kromtech2014-10-25 11:02 - 2014-10-25 11:02 - 00022528 _____ () C:\Users\susiepark\AppData\Local\2909328dsisetup29110932.exe2014-10-25 11:02 - 2014-10-25 11:02 - 00000001 _____ () C:\Users\susiepark\AppData\Local\DSI.DAT2014-10-23 21:02 - 2014-10-31 18:02 - 00000124 _____ () C:\Users\susiepark\AppData\Roaming\WB.CFG2014-10-23 20:01 - 2014-10-23 20:01 - 29419944 _____ (Oracle Corporation) C:\Users\susiepark\Downloads\jre-7u60-windows.exe2014-10-16 11:00 - 2014-09-27 15:25 - 04183040 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys2014-10-16 11:00 - 2014-09-03 16:57 - 00921600 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll2014-10-16 11:00 - 2014-09-03 16:49 - 00626688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll2014-10-16 10:59 - 2014-09-07 20:15 - 00054752 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe2014-10-16 10:59 - 2014-09-07 18:46 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll2014-10-16 10:59 - 2014-09-07 18:46 - 00050688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll2014-10-16 10:59 - 2014-09-07 17:08 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe2014-10-16 10:59 - 2014-09-07 17:07 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll2014-10-16 10:59 - 2014-09-07 17:05 - 03448320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll2014-10-16 10:59 - 2014-09-07 17:04 - 00388608 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll2014-10-16 10:59 - 2014-09-07 17:04 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll2014-10-16 10:59 - 2014-09-07 17:03 - 01702400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll2014-10-16 10:59 - 2014-09-07 17:03 - 00839680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll2014-10-16 10:59 - 2014-09-07 16:59 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll2014-10-16 10:59 - 2014-09-07 16:59 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe2014-10-16 10:59 - 2014-09-07 16:56 - 00672256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll2014-10-16 10:59 - 2014-09-07 16:56 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll2014-10-16 10:59 - 2014-09-03 17:10 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll2014-10-16 10:58 - 2014-09-25 15:50 - 13619200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll2014-10-16 10:58 - 2014-09-25 15:43 - 11807232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll2014-10-16 10:58 - 2014-09-18 19:25 - 23631360 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll2014-10-16 10:58 - 2014-09-18 18:44 - 17484800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll2014-10-16 10:58 - 2014-09-18 18:41 - 02796032 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll2014-10-16 10:58 - 2014-09-18 18:36 - 05829632 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll2014-10-16 10:58 - 2014-09-18 18:25 - 04201472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll2014-10-16 10:58 - 2014-09-18 17:55 - 02187264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll2014-10-16 10:58 - 2014-09-18 17:33 - 02309632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll2014-10-16 10:58 - 2014-09-18 16:59 - 01810944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll2014-10-16 10:58 - 2014-09-12 23:29 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\packager.dll2014-10-16 10:58 - 2014-09-12 22:49 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\packager.dll2014-10-16 10:57 - 2014-10-09 15:16 - 00678400 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll2014-10-16 10:57 - 2014-10-08 15:09 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll2014-10-16 10:57 - 2014-09-25 15:46 - 00243200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll2014-10-16 10:57 - 2014-09-25 15:46 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll2014-10-16 10:57 - 2014-09-25 15:32 - 02017280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl2014-10-16 10:57 - 2014-09-25 15:31 - 02108416 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl2014-10-16 10:57 - 2014-09-18 18:40 - 00547328 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll2014-10-16 10:57 - 2014-09-18 18:38 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll2014-10-16 10:57 - 2014-09-18 18:25 - 00758272 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll2014-10-16 10:57 - 2014-09-18 18:24 - 00527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll2014-10-16 10:57 - 2014-09-18 18:02 - 00454656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll2014-10-16 10:57 - 2014-09-18 18:00 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll2014-10-16 10:57 - 2014-09-18 17:59 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll2014-10-16 10:57 - 2014-09-18 17:58 - 00289280 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll2014-10-16 10:57 - 2014-09-18 17:42 - 00731136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll2014-10-16 10:57 - 2014-09-18 17:42 - 00710656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe2014-10-16 10:57 - 2014-09-18 17:42 - 00363008 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll2014-10-16 10:57 - 2014-09-18 17:20 - 00607744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll2014-10-16 10:57 - 2014-09-18 17:20 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll2014-10-16 10:57 - 2014-09-18 17:14 - 01447936 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll2014-10-16 10:57 - 2014-09-18 16:59 - 00775168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll2014-10-16 10:57 - 2014-09-18 16:53 - 01190400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll2014-10-16 10:57 - 2014-09-18 16:52 - 00678400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll2014-10-16 10:57 - 2014-09-12 23:02 - 02779648 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll2014-10-16 10:57 - 2014-09-12 22:30 - 03117568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll2014-10-16 10:57 - 2014-09-03 17:12 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll2014-10-16 10:57 - 2014-09-03 17:01 - 00514048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll2014-10-16 10:57 - 2014-08-28 18:58 - 00109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll2014-10-16 10:57 - 2014-08-28 16:56 - 02646016 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll2014-10-16 10:57 - 2014-08-28 16:47 - 02321920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll2014-10-16 10:57 - 2014-08-15 21:08 - 21195616 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll2014-10-16 10:57 - 2014-08-15 21:08 - 01507648 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll2014-10-16 10:57 - 2014-08-15 21:01 - 01710184 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll2014-10-16 10:57 - 2014-08-15 20:58 - 01112512 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll2014-10-16 10:57 - 2014-08-15 20:57 - 02498880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys2014-10-16 10:57 - 2014-08-15 20:57 - 00428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS2014-10-16 10:57 - 2014-08-15 20:16 - 18722600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll2014-10-16 10:57 - 2014-08-15 20:16 - 01205976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll2014-10-16 10:57 - 2014-08-15 20:03 - 01467384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll2014-10-16 10:57 - 2014-08-15 19:03 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\PJLMON.DLL2014-10-16 10:57 - 2014-08-15 18:31 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll2014-10-16 10:57 - 2014-08-15 18:04 - 00359424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wldap32.dll2014-10-16 10:57 - 2014-08-15 17:58 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll2014-10-16 10:57 - 2014-08-15 17:53 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll2014-10-16 10:57 - 2014-08-15 17:46 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityService.dll2014-10-16 10:57 - 2014-08-15 17:45 - 00267776 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll2014-10-16 10:57 - 2014-08-15 17:43 - 00321024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wldap32.dll2014-10-16 10:57 - 2014-08-15 17:43 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhsvc.dll2014-10-16 10:57 - 2014-08-15 17:31 - 00914432 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll2014-10-16 10:57 - 2014-08-15 17:31 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcsvDevice.dll2014-10-16 10:57 - 2014-08-15 17:29 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll2014-10-16 10:57 - 2014-08-15 17:23 - 01106432 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll2014-10-16 10:57 - 2014-08-15 17:22 - 00717824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll2014-10-16 10:57 - 2014-08-15 17:22 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll2014-10-16 10:57 - 2014-08-15 17:19 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll2014-10-16 10:57 - 2014-08-15 17:18 - 04758528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll2014-10-16 10:57 - 2014-08-15 17:17 - 08757760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll2014-10-16 10:57 - 2014-08-15 17:14 - 00265216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll2014-10-16 10:57 - 2014-08-15 17:13 - 06649344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll2014-10-16 10:57 - 2014-08-15 17:13 - 05902848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll2014-10-16 10:57 - 2014-08-15 17:13 - 00840192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll2014-10-16 10:57 - 2014-08-15 17:11 - 00920064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll2014-10-16 10:57 - 2014-08-15 17:10 - 01120768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe2014-10-16 10:57 - 2014-08-15 17:08 - 05777408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll2014-10-16 10:57 - 2014-08-15 17:07 - 00756224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll2014-10-16 10:57 - 2014-07-31 16:22 - 00388729 _____ () C:\WINDOWS\system32\ApnDatabase.xml ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-11-01 23:42 - 2014-07-09 09:28 - 00000000 __RDO () C:\Users\susiepark\OneDrive2014-11-01 23:37 - 2014-03-18 03:03 - 00865408 _____ () C:\WINDOWS\system32\PerfStringBackup.INI2014-11-01 23:35 - 2012-11-26 02:03 - 00000000 ____D () C:\Program Files (x86)\Dell Backup and Recovery2014-11-01 23:33 - 2013-08-22 07:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT2014-11-01 23:32 - 2014-07-09 09:17 - 01882656 _____ () C:\WINDOWS\WindowsUpdate.log2014-11-01 23:32 - 2014-03-18 02:54 - 00836732 _____ () C:\WINDOWS\PFRO.log2014-11-01 23:32 - 2014-03-18 02:45 - 00000000 ____D () C:\WINDOWS\SKB2014-11-01 23:32 - 2013-08-22 06:25 - 00524288 ___SH () C:\WINDOWS\system32\config\BBI2014-11-01 23:29 - 2012-12-27 13:28 - 00003600 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1190109235-2420750292-1459495116-10012014-11-01 23:21 - 2013-05-21 15:50 - 00000000 ____D () C:\Program Files\My Dell2014-11-01 23:08 - 2014-06-25 14:59 - 00129752 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys2014-11-01 23:08 - 2013-08-22 08:36 - 00000000 ____D () C:\WINDOWS\system32\sru2014-11-01 22:36 - 2014-07-09 09:29 - 00003930 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{2C196E90-D127-45AF-9187-339AEDC61227}2014-11-01 10:32 - 2013-05-28 23:22 - 00000000 ____D () C:\Program Files (x86)\Google2014-11-01 10:24 - 2013-05-28 23:24 - 00000000 ____D () C:\Program Files\Google2014-11-01 09:45 - 2013-05-28 23:22 - 00000000 ____D () C:\Users\susiepark\AppData\Local\Google2014-11-01 08:49 - 2013-05-28 23:22 - 00004182 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update2014-11-01 03:29 - 2013-08-22 07:46 - 00292913 _____ () C:\WINDOWS\setupact.log2014-11-01 03:08 - 2014-07-09 09:02 - 00000000 ____D () C:\Users\susiepark2014-11-01 03:04 - 2013-08-22 08:36 - 00000000 ____D () C:\WINDOWS\system32\NDF2014-11-01 02:29 - 2013-08-22 08:36 - 00000000 ____D () C:\WINDOWS\Web2014-10-31 23:35 - 2012-07-26 01:12 - 00000000 ____D () C:\WINDOWS\LiveKernelReports2014-10-31 22:36 - 2013-08-22 08:36 - 00000000 ____D () C:\WINDOWS\AppReadiness2014-10-31 22:25 - 2014-06-25 14:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware2014-10-31 22:25 - 2014-06-25 14:59 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware2014-10-31 22:25 - 2013-05-28 23:48 - 00001120 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk2014-10-31 22:19 - 2012-07-25 22:26 - 00000226 _____ () C:\WINDOWS\win.ini2014-10-31 22:16 - 2013-08-22 08:36 - 00000000 ____D () C:\WINDOWS\system32\GroupPolicy2014-10-26 19:56 - 2012-12-29 14:56 - 00212480 _____ () C:\Users\susiepark\Documents\가계부 2013.xls2014-10-25 19:09 - 2012-12-29 14:56 - 00000000 ____D () C:\Users\susiepark\Documents\Golden West2014-10-22 16:54 - 2013-08-26 11:48 - 00000000 ____D () C:\WINDOWS\system32\MRT2014-10-22 16:51 - 2013-01-04 10:44 - 103265616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe2014-10-21 19:36 - 2013-08-22 08:36 - 00000000 ____D () C:\WINDOWS\rescache2014-10-18 21:13 - 2014-07-15 12:26 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel2014-10-18 21:13 - 2013-08-22 08:36 - 00000000 ___RD () C:\WINDOWS\ToastData2014-10-18 21:13 - 2013-08-22 08:36 - 00000000 ____D () C:\WINDOWS\WinStore2014-10-18 21:13 - 2013-08-22 08:36 - 00000000 ____D () C:\WINDOWS\MediaViewer2014-10-18 21:13 - 2013-08-22 08:36 - 00000000 ____D () C:\WINDOWS\FileManager2014-10-18 21:13 - 2013-08-22 08:36 - 00000000 ____D () C:\WINDOWS\Camera2014-10-18 09:38 - 2013-01-18 01:20 - 00000000 ____D () C:\ProgramData\Microsoft Help2014-10-18 09:38 - 2012-07-26 00:59 - 00000000 ____D () C:\WINDOWS\CbsTemp2014-10-18 08:49 - 2013-08-22 07:44 - 00419872 _____ () C:\WINDOWS\system32\FNTCACHE.DAT2014-10-12 15:26 - 2013-08-22 08:36 - 00000000 ____D () C:\WINDOWS\system32\Recovery Some content of TEMP:====================C:\Users\susiepark\AppData\Local\Temp\49ezfvtf.dllC:\Users\susiepark\AppData\Local\Temp\fu9zi3u3.dllC:\Users\susiepark\AppData\Local\Temp\levcamyg.dllC:\Users\susiepark\AppData\Local\Temp\Quarantine.exeC:\Users\susiepark\AppData\Local\Temp\vcredist_x64.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signedC:\Windows\System32\wininit.exe => File is digitally signedC:\Windows\explorer.exe => File is digitally signedC:\Windows\SysWOW64\explorer.exe => File is digitally signedC:\Windows\System32\svchost.exe => File is digitally signedC:\Windows\SysWOW64\svchost.exe => File is digitally signedC:\Windows\System32\services.exe => File is digitally signedC:\Windows\System32\User32.dll => File is digitally signedC:\Windows\SysWOW64\User32.dll => File is digitally signedC:\Windows\System32\userinit.exe => File is digitally signedC:\Windows\SysWOW64\userinit.exe => File is digitally signedC:\Windows\System32\rpcss.dll => File is digitally signedC:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-11-01 23:29 ==================== End Of Log ============================ here is the addition log Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-11-2014Ran by susiepark at 2014-11-01 23:43:54Running from C:\Users\susiepark\DesktopBoot Mode: Normal========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) avast! Free Antivirus (HKLM-x32\...\avast) (Version: 9.0.2021 - AVAST Software)Conexant SmartAudio HD (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.54.40.0 - Conexant)CyberLink Media Suite Essentials (HKLM-x32\...\InstallShield_{8F14AA37-5193-4A14-BD5B-BDF9B361AEF7}) (Version: 10.0 - CyberLink Corp.)D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) HiddenDell Backup and Recovery (HKLM-x32\...\{0ED7EE95-6A97-47AA-AD73-152C08A15B04}) (Version: 1.7.5.63 - Dell Inc.)Dell Digital Delivery (HKLM-x32\...\{D9ED3EFC-AB00-4CE0-ADED-80EE6B1158A7}) (Version: 2.2.2000.0 - Dell Products, LP)Dell Touchpad (HKLM\...\Elantech) (Version: 11.3.1.4 - ELAN Microelectronic Corp.)Intel® Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1008 - Intel Corporation)Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3621 - Intel Corporation)Intel® PROSet/Wireless for Bluetooth® + High Speed (HKLM\...\{89478C31-5CE8-461A-9084-9A0AF059F84F}) (Version: 15.5.0.0344 - Intel Corporation)Intel® PROSet/Wireless Software for Bluetooth® Technology (HKLM\...\{302600C1-6BDF-4FD1-1309-148929CC1385}) (Version: 3.1.1309.0390 - Intel Corporation)Intel® Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.0.1207 - Intel Corporation)Intel® Turbo Boost Technology Monitor 2.6 (HKLM\...\{6C9365EB-1F9E-4893-9196-3EC77C88D0C5}) (Version: 2.6.2.0 - Intel)Intel® WiDi (HKLM\...\{EDBA2433-0910-4C72-8C5B-8FEDAE3EF18E}) (Version: 3.5.34.0 - Intel Corporation)Intel® PROSet/Wireless Software (HKLM-x32\...\{c9967fbd-e3c3-4ed0-992a-5b33260f2944}) (Version: 16.1.5 - Intel Corporation)Malwarebytes Anti-Malware version 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)Movie Maker (x32 Version: 16.4.3503.0728 - Microsoft Corporation) HiddenMSVCRT110_amd64 (Version: 16.4.1108.0727 - Microsoft) HiddenMy Dell (HKLM\...\PC-Doctor for Windows) (Version: 3.5.6426.22 - PC-Doctor, Inc.)Photo Common (x32 Version: 16.4.3503.0728 - Microsoft Corporation) HiddenPhoto Gallery (x32 Version: 16.4.3503.0728 - Microsoft Corporation) HiddenQuickset64 (HKLM\...\{87CF757E-C1F1-4D22-865C-00C6950B5258}) (Version: 10.15.005 - Dell Inc.)Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.8400.39030 - Realtek Semiconductor Corp.)Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)Solid YouTube Downloader and Converter 6.1.9.0 (HKLM-x32\...\{66732EEE-ECBC-4CA6-A474-ytd}_is1) (Version: - DreamVideoSoft,Inc.)Update for Korean Microsoft IME Standard Dictionary (HKLM\...\{75A54180-CA5E-47B8-AFBB-29337B976B21}) (Version: 16.0.662.1 - Microsoft Corporation)Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3503.0728 - Microsoft Corporation) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-1190109235-2420750292-1459495116-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation) ==================== Restore Points ========================= 16-10-2014 19:30:24 Windows Update21-10-2014 16:31:13 Windows Update01-11-2014 05:42:27 Scheduled Checkpoint02-11-2014 05:55:17 Checkpoint by HitmanPro ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2013-08-22 06:25 - 2013-08-22 06:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTaskTask: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsListTask: {0F500CFC-4FAF-431A-AC35-A7445FCD15F2} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network => Sc.exe start wuauservTask: {1FB2F143-87EB-4BF4-BAD1-EC8286ACC2FD} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUploadTask: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTaskTask: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulateTask: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-21] (Microsoft Corporation)Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)Task: {3ED9FEAC-7AF4-441E-8135-5AEF3199F15F} - System32\Tasks\SVNBFRX => C:\Users\susiepark\AppData\Roaming\SVNBFRX.exe <==== ATTENTIONTask: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalanceTask: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play CleanupTask: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance TaskTask: {6E02F1AB-8F4E-48DF-8B3F-CFA62C818AF3} - System32\Tasks\DJBVB => C:\Users\susiepark\AppData\Roaming\DJBVB.exe <==== ATTENTIONTask: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTaskTask: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryStateTask: {78E03475-CC35-4E27-A40C-39949103CEDE} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-08-14] (AVAST Software)Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance TaskTask: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTaskTask: {8F2A63CB-2965-40E7-ADBF-525577D1ADFD} - System32\Tasks\PCDEventLauncherTask => C:\Program Files\My Dell\sessionchecker.exe [2014-01-31] (PC-Doctor, Inc.)Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance WorkTask: {B0A0955F-827E-465A-B955-71CF801D27A2} - System32\Tasks\DonutQuotes => C:\Program Files (x86)\donutleads\ScheduledTask.exeTask: {B6CF9369-EE80-4A89-A48F-9C944D631710} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\My Dell\uaclauncher.exe [2014-01-31] (PC-Doctor, Inc.)Task: {BF58E14B-1069-43E0-80DD-BB525A2FD9CD} - System32\Tasks\Microsoft\Windows\DiskFootprint\DiagnosticsTask: {CD853C49-482B-4EEF-A04C-A853AFC148E2} - System32\Tasks\ProPCCleaner_Start => C:\Program Files (x86)\Pro PC Cleaner\ProPCCleaner.exeTask: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTaskTask: {D08F1AB1-8F5E-4779-937E-7A750E734C77} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\Windows\system32\cleanmgr.exe [2014-03-18] (Microsoft Corporation)Task: {D3EA0BD6-4BA0-4B77-A3DE-30F58B3400FD} - System32\Tasks\ProPCCleaner_Popup => C:\Program Files (x86)\Pro PC Cleaner\Splash.exeTask: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensingTask: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon SynchronizationTask: {E2ACF668-4308-4463-9ECA-B3DD4467FB01} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-ValidationTask: {E3BDCA69-0278-4D27-AE94-D673C4802877} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-ManagementTask: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRETask: {E8CFEF5D-9583-4E92-B927-E758F44B8A64} - System32\Tasks\SystemToolsDailyTest => uaclauncher.exeTask: C:\WINDOWS\Tasks\DJBVB.job => C:\Users\susiepark\AppData\Roaming\DJBVB.exe <==== ATTENTIONTask: C:\WINDOWS\Tasks\SVNBFRX.job => C:\Users\susiepark\AppData\Roaming\SVNBFRX.exe <==== ATTENTION ==================== Loaded Modules (whitelisted) ============= 2012-11-26 01:59 - 2012-04-24 19:43 - 00254512 ____N () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe2014-09-10 08:18 - 2014-09-10 08:18 - 00183296 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20605_x64__8wekyb3d8bbwe\ErrorReporting.dll2012-11-26 01:52 - 2012-07-18 10:03 - 00165024 _____ () C:\Program Files\Conexant\SA3\MaxxAudioWrapper.dll2014-08-14 23:11 - 2014-08-14 23:11 - 00301152 _____ () C:\Program Files\AVAST Software\Avast\aswProperty.dll2014-11-01 22:25 - 2014-11-01 22:25 - 02898944 _____ () C:\Program Files\AVAST Software\Avast\defs\14110101\algo.dll2014-10-21 19:18 - 2014-10-21 19:18 - 00016384 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\PSIClient\80a14cd14e9579821dba2282b4349fef\PSIClient.ni.dll2012-11-26 01:52 - 2012-06-25 11:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\ACE.dll2012-11-26 01:58 - 2012-06-07 20:34 - 00627216 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll2012-06-08 10:34 - 2012-06-08 10:34 - 00016400 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll2014-08-14 23:11 - 2014-08-14 23:11 - 19329904 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) AlternateDataStreams: C:\Users\susiepark\OneDrive:ms-propertiesAlternateDataStreams: C:\Users\susiepark\Downloads\passport.eml:OECustomProperty ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) HKLM\...\StartupApproved\Run32: => "ConvertAd"HKCU\...\StartupApproved\StartupFolder: => "MyPC Backup.lnk"HKCU\...\StartupApproved\Run: => "Optimizer Pro"HKCU\...\StartupApproved\Run: => "PCKeeper2" ========================= Accounts: ========================== Administrator (S-1-5-21-1190109235-2420750292-1459495116-500 - Administrator - Disabled)Guest (S-1-5-21-1190109235-2420750292-1459495116-501 - Limited - Disabled)HomeGroupUser$ (S-1-5-21-1190109235-2420750292-1459495116-1398 - Limited - Enabled)susiepark (S-1-5-21-1190109235-2420750292-1459495116-1001 - Administrator - Enabled) => C:\Users\susiepark ==================== Faulty Device Manager Devices ============= Name: USB-IF xHCI USB Host ControllerDescription: USB-IF xHCI USB Host ControllerClass Guid: {8a2edc79-c759-46f2-88af-9d4efe3b5eee}Manufacturer: Intel CorporationService: XHCIPortProblem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)Resolution: Update the driver ==================== Event log errors: ========================= Application errors:==================Error: (11/01/2014 10:56:01 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )Description: 80070005 Error: (11/01/2014 10:55:16 PM) (Source: VSS) (EventID: 8194) (User: )Description: Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface. hr = 0x80070005, Access is denied..This is often caused by incorrect security settings in either the writer or requestor process. Operation: Gathering Writer Data Context: Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220} Writer Name: System Writer Writer Instance ID: {ec126272-57b1-4932-8237-10866d4d8ead} Error: (11/01/2014 02:31:11 AM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application name: ZeroConfigService.exe, version: 16.1.0.0, time stamp: 0x521e80f5Faulting module name: MurocApi.dll, version: 16.1.0.0, time stamp: 0x521e7ff7Exception code: 0xc0000005Fault offset: 0x0000000000026570Faulting process id: 0x870Faulting application start time: 0xZeroConfigService.exe0Faulting application path: ZeroConfigService.exe1Faulting module path: ZeroConfigService.exe2Report Id: ZeroConfigService.exe3Faulting package full name: ZeroConfigService.exe4Faulting package-relative application ID: ZeroConfigService.exe5 Error: (11/01/2014 02:17:33 AM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application name: explorer.exe, version: 6.3.9600.17284, time stamp: 0x53f816dcFaulting module name: DUI70.dll, version: 6.3.9600.17031, time stamp: 0x53086a1cException code: 0xc0000005Fault offset: 0x0000000000004f7dFaulting process id: 0x1728Faulting application start time: 0xexplorer.exe0Faulting application path: explorer.exe1Faulting module path: explorer.exe2Report Id: explorer.exe3Faulting package full name: explorer.exe4Faulting package-relative application ID: explorer.exe5 Error: (11/01/2014 02:14:43 AM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application name: explorer.exe, version: 6.3.9600.17284, time stamp: 0x53f816dcFaulting module name: DUI70.dll, version: 6.3.9600.17031, time stamp: 0x53086a1cException code: 0xc0000005Fault offset: 0x0000000000005f8aFaulting process id: 0x1d80Faulting application start time: 0xexplorer.exe0Faulting application path: explorer.exe1Faulting module path: explorer.exe2Report Id: explorer.exe3Faulting package full name: explorer.exe4Faulting package-relative application ID: explorer.exe5 Error: (11/01/2014 02:14:15 AM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application name: explorer.exe, version: 6.3.9600.17284, time stamp: 0x53f816dcFaulting module name: DUI70.dll, version: 6.3.9600.17031, time stamp: 0x53086a1cException code: 0xc0000005Fault offset: 0x0000000000005f8aFaulting process id: 0x18c4Faulting application start time: 0xexplorer.exe0Faulting application path: explorer.exe1Faulting module path: explorer.exe2Report Id: explorer.exe3Faulting package full name: explorer.exe4Faulting package-relative application ID: explorer.exe5 Error: (11/01/2014 01:40:58 AM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application name: explorer.exe, version: 6.3.9600.17284, time stamp: 0x53f816dcFaulting module name: DUI70.dll, version: 6.3.9600.17031, time stamp: 0x53086a1cException code: 0xc0000005Fault offset: 0x0000000000005f8aFaulting process id: 0x1754Faulting application start time: 0xexplorer.exe0Faulting application path: explorer.exe1Faulting module path: explorer.exe2Report Id: explorer.exe3Faulting package full name: explorer.exe4Faulting package-relative application ID: explorer.exe5 Error: (11/01/2014 01:37:23 AM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application name: explorer.exe, version: 6.3.9600.17284, time stamp: 0x53f816dcFaulting module name: DUI70.dll, version: 6.3.9600.17031, time stamp: 0x53086a1cException code: 0xc0000005Fault offset: 0x0000000000005f8aFaulting process id: 0x1e10Faulting application start time: 0xexplorer.exe0Faulting application path: explorer.exe1Faulting module path: explorer.exe2Report Id: explorer.exe3Faulting package full name: explorer.exe4Faulting package-relative application ID: explorer.exe5 Error: (11/01/2014 01:34:05 AM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application name: explorer.exe, version: 6.3.9600.17284, time stamp: 0x53f816dcFaulting module name: DUI70.dll, version: 6.3.9600.17031, time stamp: 0x53086a1cException code: 0xc0000005Fault offset: 0x0000000000005f8aFaulting process id: 0x19a8Faulting application start time: 0xexplorer.exe0Faulting application path: explorer.exe1Faulting module path: explorer.exe2Report Id: explorer.exe3Faulting package full name: explorer.exe4Faulting package-relative application ID: explorer.exe5 Error: (11/01/2014 01:33:09 AM) (Source: Application Error) (EventID: 1000) (User: )Description: Faulting application name: Explorer.EXE, version: 6.3.9600.17284, time stamp: 0x53f816dcFaulting module name: DUI70.dll, version: 6.3.9600.17031, time stamp: 0x53086a1cException code: 0xc0000005Fault offset: 0x0000000000005f8aFaulting process id: 0x129cFaulting application start time: 0xExplorer.EXE0Faulting application path: Explorer.EXE1Faulting module path: Explorer.EXE2Report Id: Explorer.EXE3Faulting package full name: Explorer.EXE4Faulting package-relative application ID: Explorer.EXE5 System errors:=============Error: (11/01/2014 11:35:32 PM) (Source: Service Control Manager) (EventID: 7034) (User: )Description: The Dell Digital Delivery Service service terminated unexpectedly. It has done this 1 time(s). Error: (11/01/2014 11:00:14 PM) (Source: Service Control Manager) (EventID: 7034) (User: )Description: The Dell Digital Delivery Service service terminated unexpectedly. It has done this 1 time(s). Error: (11/01/2014 10:58:04 PM) (Source: Service Control Manager) (EventID: 7024) (User: )Description: The HitmanPro 3.7 Crusader (Boot) service terminated with the following service-specific error: %%0 Error: (11/01/2014 10:31:40 PM) (Source: Service Control Manager) (EventID: 7034) (User: )Description: The Dell Digital Delivery Service service terminated unexpectedly. It has done this 1 time(s). Error: (11/01/2014 10:27:28 AM) (Source: Service Control Manager) (EventID: 7034) (User: )Description: The Dell Digital Delivery Service service terminated unexpectedly. It has done this 1 time(s). Error: (11/01/2014 03:49:33 AM) (Source: Service Control Manager) (EventID: 7034) (User: )Description: The Dell Digital Delivery Service service terminated unexpectedly. It has done this 1 time(s). Error: (11/01/2014 03:43:28 AM) (Source: Service Control Manager) (EventID: 7034) (User: )Description: The Dell Digital Delivery Service service terminated unexpectedly. It has done this 1 time(s). Error: (11/01/2014 03:40:04 AM) (Source: Service Control Manager) (EventID: 7023) (User: )Description: The Superfetch service terminated with the following error: %%1062 Error: (11/01/2014 03:36:24 AM) (Source: Service Control Manager) (EventID: 7034) (User: )Description: The Dell Digital Delivery Service service terminated unexpectedly. It has done this 1 time(s). Error: (11/01/2014 02:32:57 AM) (Source: Service Control Manager) (EventID: 7034) (User: )Description: The Dell Digital Delivery Service service terminated unexpectedly. It has done this 1 time(s). Microsoft Office Sessions:=========================Error: (11/01/2014 10:56:01 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )Description: 80070005 Error: (11/01/2014 10:55:16 PM) (Source: VSS) (EventID: 8194) (User: )Description: 0x80070005, Access is denied. Operation: Gathering Writer Data Context: Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220} Writer Name: System Writer Writer Instance ID: {ec126272-57b1-4932-8237-10866d4d8ead} Error: (11/01/2014 02:31:11 AM) (Source: Application Error) (EventID: 1000) (User: )Description: ZeroConfigService.exe16.1.0.0521e80f5MurocApi.dll16.1.0.0521e7ff7c0000005000000000002657087001cff5b67dca8827C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exeC:\Program Files\Intel\WiFi\bin\MurocApi.dlld0a17330-61a9-11e4-8333-84a6c8b40bcb Error: (11/01/2014 02:17:33 AM) (Source: Application Error) (EventID: 1000) (User: )Description: explorer.exe6.3.9600.1728453f816dcDUI70.dll6.3.9600.1703153086a1cc00000050000000000004f7d172801cff5b448a74fddC:\WINDOWS\explorer.exeC:\WINDOWS\SYSTEM32\DUI70.dlle8e99e7c-61a7-11e4-8332-84a6c8b40bcb Error: (11/01/2014 02:14:43 AM) (Source: Application Error) (EventID: 1000) (User: )Description: explorer.exe6.3.9600.1728453f816dcDUI70.dll6.3.9600.1703153086a1cc00000050000000000005f8a1d8001cff5b438b497a5C:\WINDOWS\explorer.exeC:\WINDOWS\SYSTEM32\DUI70.dll83aeb6de-61a7-11e4-8332-84a6c8b40bcb Error: (11/01/2014 02:14:15 AM) (Source: Application Error) (EventID: 1000) (User: )Description: explorer.exe6.3.9600.1728453f816dcDUI70.dll6.3.9600.1703153086a1cc00000050000000000005f8a18c401cff5b418aa1344C:\WINDOWS\explorer.exeC:\WINDOWS\SYSTEM32\DUI70.dll7348477e-61a7-11e4-8332-84a6c8b40bcb Error: (11/01/2014 01:40:58 AM) (Source: Application Error) (EventID: 1000) (User: )Description: explorer.exe6.3.9600.1728453f816dcDUI70.dll6.3.9600.1703153086a1cc00000050000000000005f8a175401cff5af12081356C:\WINDOWS\explorer.exeC:\WINDOWS\SYSTEM32\DUI70.dllccb8abc0-61a2-11e4-8332-84a6c8b40bcb Error: (11/01/2014 01:37:23 AM) (Source: Application Error) (EventID: 1000) (User: )Description: explorer.exe6.3.9600.1728453f816dcDUI70.dll6.3.9600.1703153086a1cc00000050000000000005f8a1e1001cff5ae9aba3e9aC:\WINDOWS\explorer.exeC:\WINDOWS\SYSTEM32\DUI70.dll4cbc7aaf-61a2-11e4-8332-84a6c8b40bcb Error: (11/01/2014 01:34:05 AM) (Source: Application Error) (EventID: 1000) (User: )Description: explorer.exe6.3.9600.1728453f816dcDUI70.dll6.3.9600.1703153086a1cc00000050000000000005f8a19a801cff5ae814809cbC:\WINDOWS\explorer.exeC:\WINDOWS\SYSTEM32\DUI70.dlld67f5c66-61a1-11e4-8332-84a6c8b40bcb Error: (11/01/2014 01:33:09 AM) (Source: Application Error) (EventID: 1000) (User: )Description: Explorer.EXE6.3.9600.1728453f816dcDUI70.dll6.3.9600.1703153086a1cc00000050000000000005f8a129c01cff5ae2cb9e7a7C:\WINDOWS\Explorer.EXEC:\WINDOWS\SYSTEM32\DUI70.dllb4fa7c2a-61a1-11e4-8332-84a6c8b40bcb CodeIntegrity Errors:=================================== Date: 2014-11-01 01:28:54.719 Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Settings Manager\smdmf\x64\sysapcrt.dll that did not meet the Windows signing level requirements. Date: 2014-11-01 01:28:54.578 Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Settings Manager\smdmf\sysapcrt.dll that did not meet the Windows signing level requirements. Date: 2014-10-31 22:35:55.795 Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Malwarebytes Anti-Malware\mbampt.exe that did not meet the Windows signing level requirements. Date: 2014-10-31 22:35:21.508 Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Malwarebytes Anti-Malware\mbampt.exe that did not meet the Windows signing level requirements. Date: 2014-10-31 22:14:49.071 Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Settings Manager\smdmf\x64\sysapcrt.dll that did not meet the Windows signing level requirements. Date: 2014-10-31 22:14:48.899 Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Settings Manager\smdmf\sysapcrt.dll that did not meet the Windows signing level requirements. ==================== Memory info =========================== Processor: Intel® Core i5-3210M CPU @ 2.50GHzPercentage of memory in use: 15%Total physical RAM: 8061.27 MBAvailable physical RAM: 6799.51 MBTotal Pagefile: 9341.27 MBAvailable Pagefile: 8009.63 MBTotal Virtual: 131072 MBAvailable Virtual: 131071.84 MB ==================== Drives ================================ Drive c: (OS) (Fixed) (Total:918.01 GB) (Free:868.76 GB) NTFSDrive f: () (Removable) (Total:7.45 GB) (Free:1.24 GB) FAT32 ==================== MBR & Partition Table ================== ========================================================Disk: 0 (Size: 931.5 GB) (Disk ID: DAACC22E) Partition: GPT Partition Type. ========================================================Disk: 1 (Size: 7.5 GB) (Disk ID: 00000000) Partition: GPT Partition Type. ==================== End Of Log ============================
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.