Jump to content

Machine running slow

Batman91

By Batman91
in Resolved Malware Removal Logs

 Share

Recommended Posts

Batman91

Batman91

Posted
Posted

Hi , my machine is running a little slow and last night I heard a noise as if the webcam took a photo, I have the internal webcam disabled and the exernal one did not have the light on.

 

see logs requested :

 

**********************Attach****************************

 

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-11-20.01)
.
Microsoft Windows 7 Home Premium 
Boot Device: \Device\HarddiskVolume1
Install Date: 27/02/2013 19:34:27
System Uptime: 25/08/2013 15:26:24 (0 hours ago)
.
Motherboard: ASUSTeK COMPUTER INC. |  | X401A1
Processor: Intel® Celeron® CPU B820 @ 1.70GHz | SOCKET 0 | 1700/100mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 119 GiB total, 31.435 GiB free.
D: is FIXED (NTFS) - 154 GiB total, 153.249 GiB free.
E: is FIXED (FAT32) - 466 GiB total, 409.667 GiB free.
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
RP75: 15/08/2013 03:00:22 - Windows Update
RP76: 20/08/2013 17:45:16 - Windows Update
.
==== Installed Programs ======================
.
??? ActiveX ?? Windows Live Mesh ???? ??????? ???????
???? ??? Windows Live
???? ???? ActiveX ????? ?? Windows Live Mesh ????????? ???????
???? Windows Live
????? Windows Live
?????? ??????? ?? Windows Live
??????? ?????????? Windows Live Mesh ActiveX ??? ????????? ???????????
??????? Windows Live Mesh ActiveX ???
???????? ?????????? Windows Live
?????????? Windows Live
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader X MUI
Apple Application Support
Apple Mobile Device Support
Apple Software Update
ASUS AI Recovery
ASUS FaceLogon
ASUS Instant Connect
ASUS LifeFrame3
ASUS Live Update
ASUS Power4Gear Hybrid
ASUS Splendid Video Enhancement Technology
ASUS Virtual Camera
ASUS Virtual Touch
ASUS WebStorage
AsusVibe2.0
ATK Package
avast! Free Antivirus
Bonjour
BrowserProtect
Bubbletown
Camtasia Studio 8
Contrôle ActiveX Windows Live Mesh pour connexions à distance
Control ActiveX de Windows Live Mesh para conexiones remotas
Controlo ActiveX do Windows Live Mesh para Ligações Remotas
CyberLink LabelPrint
CyberLink Media Suite
CyberLink Power2Go
D3DX10
Deadtime Stories
Delta toolbar  
Dream Day First Home
Dream Vacation Solitaire
Dual Package
ETDWare PS/2-X64 10.5.9.0
Facebook Video Calling 1.2.0.287
Farm Frenzy 3 - Madagascar
ffdshow v1.2.4422 [2012-04-09]
Galapago
Galeria de Fotografias do Windows Live
Galerie de photos Windows Live
Galería fotográfica de Windows Live
Game Park Console
GIMP 2.8.4
Go Go Gourmet Chef of the Year
Google Chrome
Google Earth
Google Toolbar for Internet Explorer
Google Update Helper
HDVidCodec
InstantOn for NB
Intel® Control Center
Intel® Manageability Engine Firmware Recovery Agent
Intel® Management Engine Components
Intel® OpenCL CPU Runtime
Intel® Processor Graphics
Intel® USB 3.0 eXtensible Host Controller Driver
Intel® Trusted Connect Service Client
iTunes
Junk Mail filter update
Mahjong Memoirs
Malwarebytes Anti-Malware version 1.75.0.1300
Mesh Runtime
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Extended
Microsoft Application Error Reporting
Microsoft Office 2010
Microsoft Office Click-to-Run 2010
Microsoft Office Starter 2010 - English
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
MSVCRT
MSVCRT_amd64
myBitCast 1.0.0.3
Plants vs Zombies
Raccolta foto di Windows Live
Ralink RT2860 Wireless LAN Card
Realtek Ethernet Controller Driver
Realtek High Definition Audio Driver
Realtek PCIE Card Reader
S?????? f?t???af??? t?? Windows Live
SceneSwitch
Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2736428)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2804576)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2835393)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2840628)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2840628v2)
Security Update for Microsoft .NET Framework 4 Extended (KB2487367)
Security Update for Microsoft .NET Framework 4 Extended (KB2656351)
Security Update for Microsoft .NET Framework 4 Extended (KB2736428)
Security Update for Microsoft .NET Framework 4 Extended (KB2742595)
Skype Click to Call
Skype™ 6.5
St???e?? e?????? ActiveX t?? Windows Live Mesh ??a ap?µa???sµ??e? s??d?se??
Turbo Fiesta
UltraMon
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939)
Update for Microsoft .NET Framework 4 Extended (KB2468871)
Update for Microsoft .NET Framework 4 Extended (KB2533523)
Update for Microsoft .NET Framework 4 Extended (KB2600217)
Update for Microsoft .NET Framework 4 Extended (KB2836939)
VirtualDJ Home FREE
VLC media player 2.0.5
Windows Live
Windows Live ???
Windows Live ????
Windows Live Communications Platform
Windows Live Essentials
Windows Live Family Safety
Windows Live Fotogalerie
Windows Live ID Sign-in Assistant
Windows Live Installer
Windows Live Language Selector
Windows Live Mail
Windows Live Mesh
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen
Windows Live Mesh ActiveX Control for Remote Connections
Windows Live Messenger
Windows Live MIME IFilter
Windows Live Movie Maker
Windows Live Photo Common
Windows Live Photo Gallery
Windows Live PIMT Platform
Windows Live Remote Client
Windows Live Remote Client Resources
Windows Live Remote Service
Windows Live Remote Service Resources
Windows Live SOXE
Windows Live SOXE Definitions
Windows Live UX Platform
Windows Live UX Platform Language Pack
Windows Live Writer
Windows Live Writer Resources
WinFlash
WinRAR 5.00 beta 6 (64-bit)
Wireless Console 3
World of Goo
Yontoo 2.04
.
==== Event Viewer Messages From Past Week ========
.
25/08/2013 15:44:14, Error: NetBT [4321]  - The name "WORKGROUP      :1d" could not be registered on the interface with IP address 192.168.1.104. The computer with the IP address 192.168.1.101 did not allow the name to be claimed by this computer.
25/08/2013 15:27:33, Error: Service Control Manager [7000]  - The McAfee SiteAdvisor Service service failed to start due to the following error:  The system cannot find the file specified.
22/08/2013 18:51:50, Error: NetBT [4321]  - The name "WORKGROUP      :1d" could not be registered on the interface with IP address 192.168.1.104. The computer with the IP address 192.168.1.108 did not allow the name to be claimed by this computer.
22/08/2013 18:44:15, Error: bowser [8003]  - The master browser has received a server announcement from the computer USER-PC that believes that it is the master browser for the domain on transport NetBT_Tcpip_{C9C7E464-8B13-456F-994C-76E1E581573B}. The master browser is stopping or an election is being forced.
.
==== End Of File ===========================
 
 
 
************************************DDS**********************************************
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64 
Internet Explorer: 10.0.9200.16660
Run by Blain at 15:58:18 on 2013-08-25
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.353.1033.18.3980.1395 [GMT 1:00]
.
AV: avast! Antivirus *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\SYSTEM32\WISPTIS.EXE
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\ProgramData\BrowserProtect\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe
C:\Program Files\Intel\iCLS Client\HeciServer.exe
C:\Windows\SysWOW64\schtasks.exe
C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe
C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files (x86)\Yontoo\Y2Desktop.Updater.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\ProgramData\BrowserProtect\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnWMI.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
C:\Windows\system32\taskeng.exe
C:\Windows\SYSTEM32\WISPTIS.EXE
C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe
C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe
C:\Program Files (x86)\ASUS\FaceLogon\sensorsrv.exe
C:\Program Files\ASUS\P4G\BatteryLife.exe
C:\Program Files (x86)\ASUS\ASUS Virtual Touch\QuickGesture\x86\QuickGesture.exe
C:\Program Files (x86)\ASUS\ASUS Virtual Touch\QuickGesture\x64\QuickGesture64.exe
C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler.exe
C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler64.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
C:\Program Files\Elantech\ETDCtrl.exe
C:\Users\Blain\AppData\Roaming\Yontoo\YontooDesktop.exe
C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files\Elantech\ETDCtrlHelper.exe
C:\Program Files\Elantech\ETDGesture.exe
C:\Program Files (x86)\LG Soft India Pvt Ltd\Dual Package\bin\Dual Package.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\LG Soft India Pvt Ltd\Dual Package\bin\TestDDCCI.exe
C:\Program Files (x86)\LG Soft India Pvt Ltd\Dual Package\bin\TestDDCCI.exe
C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\LG Soft India Pvt Ltd\Dual Package\bin\DualPackageHookApp.exe
C:\Program Files\UltraMon\UltraMon.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
C:\Windows\SysWOW64\schtasks.exe
C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\UltraMon\UltraMonTaskbar.exe
C:\Windows\SysWOW64\ACEngSvr.exe
C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\igfxpers.exe
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Program Files (x86)\Common Files\Realtime Soft\RTSHookInterop\x32\RTSHookInterop.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe
C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe
C:\Windows\SysWOW64\NOTEPAD.EXE
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\System32\cscript.exe
.
============== Pseudo HJT Report ===============
.
mWinlogon: Userinit = userinit.exe,
BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: avast! WebRep: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
BHO: Skype Browser Helper: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
BHO: delta Helper Object: {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files (x86)\Delta\delta\1.8.10.0\bh\delta.dll
BHO: Yontoo: {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files (x86)\Yontoo\YontooIEClient.dll
TB: Google Toolbar: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
TB: avast! WebRep: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
TB: Delta Toolbar: {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files (x86)\Delta\delta\1.8.10.0\deltaTlbr.dll
TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
uRun: [iSUSPM Startup] C:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
uRun: [Yontoo Desktop] "C:\Users\Blain\AppData\Roaming\Yontoo\YontooDesktop.exe"
uRun: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
uRun: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
uRun: [skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
uRun: [Facebook Update] "C:\Users\Blain\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
mRun: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun: [ASUSWebStorage] C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe /S
mRun: [uSB3MON] "C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
mRun: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
mRun: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
mRun: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
mRun: [ACMON] C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
mRun: [Wireless Console 3] C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
mRun: [CLMLServer] "C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe"
mRun: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
mRun: [iSUSScheduler] "C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe" -start
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\DUALPA~1.LNK - C:\Program Files (x86)\LG Soft India Pvt Ltd\Dual Package\bin\Dual Package.exe
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\UltraMon.lnk - C:\Windows\Installer\{9069EE0A-7615-4D86-AD80-CA263E936DA6}\IcoUltraMon.ico
uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
mPolicies-Explorer: NoActiveDesktop = dword:1
mPolicies-Explorer: NoActiveDesktopChanges = dword:1
mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableLUA = dword:0
mPolicies-System: EnableUIADesktopToggle = dword:0
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
TCP: NameServer = 89.101.160.4 89.101.160.5
TCP: Interfaces\{C9C7E464-8B13-456F-994C-76E1E581573B} : DHCPNameServer = 89.101.160.4 89.101.160.5
TCP: Interfaces\{C9C7E464-8B13-456F-994C-76E1E581573B}\56962736F6D64373033333334303 : DHCPNameServer = 192.168.1.254
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
AppInit_DLLs= c:\progra~3\browse~1\261519~1.190\{c16c1~1\browse~1.dll
SSODL: WebCheck - <orphaned>
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.57\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
x64-BHO: avast! WebRep: {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll
x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
x64-BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll
x64-BHO: Skype add-on for Internet Explorer: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll
x64-TB: avast! WebRep: {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll
x64-TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll
x64-Run: [igfxTray] C:\Windows\System32\igfxtray.exe
x64-Run: [HotKeysCmds] C:\Windows\System32\hkcmd.exe
x64-Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
x64-Run: [ETDCtrl] C:\Program Files (x86)\Elantech\ETDCtrl.exe
x64-IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll
x64-Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll
x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>
x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>
x64-Notify: igfxcui - igfxdev.dll
x64-SSODL: WebCheck - <orphaned>
.
============= SERVICES / DRIVERS ===============
.
R0 iusb3hcs;Intel® USB 3.0 Host Controller Switch Driver;C:\Windows\System32\drivers\iusb3hcs.sys [2012-5-3 19224]
R1 aswSnx;aswSnx;C:\Windows\System32\drivers\aswSnx.sys [2013-2-27 984144]
R1 aswSP;aswSP;C:\Windows\System32\drivers\aswSP.sys [2013-2-27 370288]
R1 ATKWMIACPIIO;ATKWMIACPI Driver;C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [2011-9-7 17536]
R2 ASMMAP64;ASMMAP64;C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-7-3 15416]
R2 ASUS InstantOn;ASUS InstantOn Service;C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe [2012-4-13 277120]
R2 aswFsBlk;aswFsBlk;C:\Windows\System32\drivers\aswFsBlk.sys [2013-2-27 25232]
R2 aswMonFlt;aswMonFlt;C:\Windows\System32\drivers\aswMonFlt.sys [2013-2-27 71600]
R2 avast! Antivirus;avast! Antivirus;C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2013-2-27 44808]
R2 BrowserProtect;BrowserProtect;C:\ProgramData\BrowserProtect\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe [2013-8-5 2847696]
R2 cvhsvc;Client Virtualization Handler;C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE [2012-1-4 822624]
R2 Intel® Capability Licensing Service Interface;Intel® Capability Licensing Service Interface;C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-2-3 628448]
R2 Intel® ME Service;Intel® ME Service;C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe [2012-7-13 128280]
R2 jhi_service;Intel® Dynamic Application Loader Host Interface Service;C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe [2012-7-13 161560]
R2 MBAMScheduler;MBAMScheduler;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2013-8-25 418376]
R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2013-8-25 701512]
R2 sftlist;Application Virtualization Client;C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2011-10-1 508776]
R2 Skype C2C Service;Skype C2C Service;C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2013-8-14 3291008]
R2 UltraMonUtility;UltraMon Utility Driver;C:\Program Files (x86)\Common Files\Realtime Soft\UltraMonMirrorDrv\x64\UltraMonUtility.sys [2012-8-24 20512]
R2 UNS;Intel® Management and Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2012-7-13 363800]
R2 Yontoo Desktop Updater;Yontoo Desktop Updater;C:\Program Files (x86)\Yontoo\Y2Desktop.Updater.exe [2013-3-6 23552]
R3 AsusVBus;AsusVBus;C:\Windows\System32\drivers\AsusVBus.sys [2012-4-11 35968]
R3 AsusVTouch;AsusVTouch;C:\Windows\System32\drivers\AsusVTouch.sys [2012-4-11 16512]
R3 ETD;ELAN PS/2 Port Input Device;C:\Windows\System32\drivers\ETD.sys [2012-5-3 200488]
R3 IntcDAud;Intel® Display Audio;C:\Windows\System32\drivers\IntcDAud.sys [2012-5-3 331264]
R3 iusb3hub;Intel® USB 3.0 Hub Driver;C:\Windows\System32\drivers\iusb3hub.sys [2012-5-3 356632]
R3 iusb3xhc;Intel® USB 3.0 eXtensible Host Controller Driver;C:\Windows\System32\drivers\iusb3xhc.sys [2012-5-3 789272]
R3 MBAMProtector;MBAMProtector;C:\Windows\System32\drivers\mbam.sys [2013-8-25 25928]
R3 netr28x;Ralink 802.11n Extensible Wireless Driver;C:\Windows\System32\drivers\netr28x.sys [2012-7-13 1838656]
R3 RSBASTOR;Realtek PCIE CardReader Driver - BA;C:\Windows\System32\drivers\RtsBaStor.sys [2012-7-13 292968]
R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2012-7-13 565352]
R3 Sftfs;Sftfs;C:\Windows\System32\drivers\Sftfslh.sys [2011-10-1 764264]
R3 Sftplay;Sftplay;C:\Windows\System32\drivers\Sftplaylh.sys [2011-10-1 268648]
R3 Sftredir;Sftredir;C:\Windows\System32\drivers\Sftredirlh.sys [2011-10-1 25960]
R3 Sftvol;Sftvol;C:\Windows\System32\drivers\Sftvollh.sys [2011-10-1 22376]
R3 sftvsa;Application Virtualization Service Agent;C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2011-10-1 219496]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe --> c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe [?]
S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-6-3 162408]
S3 fssfltr;fssfltr;C:\Windows\System32\drivers\fssfltr.sys [2012-2-24 48488]
S3 fsssvc;Windows Live Family Safety Service;C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2011-5-14 1492840]
S3 L1C;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20);C:\Windows\System32\drivers\L1C62x64.sys [2009-6-10 57344]
S3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver;C:\Windows\System32\drivers\SiSG664.sys [2009-6-10 56832]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2011-2-18 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device;C:\Windows\System32\drivers\TsUsbGD.sys [2011-2-18 31232]
S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys [2012-12-13 54784]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2013-2-28 1255736]
S4 wlcrasvc;Windows Live Mesh remote connections service;C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-9-23 57184]
.
=============== Created Last 30 ================
.
2013-08-25 13:05:20 -------- d-----w- C:\Users\Blain\AppData\Roaming\Malwarebytes
2013-08-25 13:04:59 -------- d-----w- C:\ProgramData\Malwarebytes
2013-08-25 13:04:57 25928 ----a-w- C:\Windows\System32\drivers\mbam.sys
2013-08-25 13:04:57 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-08-24 01:56:44 76232 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{4905C628-0679-4547-97CA-E77EF4B1EF2A}\offreg.dll
2013-08-23 16:46:40 9515512 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{4905C628-0679-4547-97CA-E77EF4B1EF2A}\mpengine.dll
2013-08-14 17:26:02 224256 ----a-w- C:\Windows\System32\wintrust.dll
2013-08-14 17:26:02 175104 ----a-w- C:\Windows\SysWow64\wintrust.dll
2013-08-14 17:26:02 1472512 ----a-w- C:\Windows\System32\crypt32.dll
2013-08-14 17:26:02 1166848 ----a-w- C:\Windows\SysWow64\crypt32.dll
2013-08-14 17:26:01 184320 ----a-w- C:\Windows\System32\cryptsvc.dll
2013-08-14 17:26:01 140288 ----a-w- C:\Windows\SysWow64\cryptsvc.dll
2013-08-14 17:26:01 139776 ----a-w- C:\Windows\System32\cryptnet.dll
2013-08-14 17:26:00 103936 ----a-w- C:\Windows\SysWow64\cryptnet.dll
2013-08-14 17:25:26 2048 ----a-w- C:\Windows\System32\tzres.dll
2013-08-14 17:25:25 2048 ----a-w- C:\Windows\SysWow64\tzres.dll
2013-08-14 17:25:02 1888768 ----a-w- C:\Windows\System32\WMVDECOD.DLL
2013-08-14 17:25:02 1620992 ----a-w- C:\Windows\SysWow64\WMVDECOD.DLL
2013-08-14 17:25:00 1217024 ----a-w- C:\Windows\System32\rpcrt4.dll
2013-08-05 20:46:11 0 ----a-w- C:\Windows\SysWow64\sho1DFA.tmp
2013-08-01 21:11:06 -------- d-----w- C:\Users\Blain\AppData\Local\CrashDumps
2013-08-01 20:28:00 -------- d-----w- C:\Users\Blain\AppData\Local\Facebook
2013-07-28 01:29:35 -------- d-----w- C:\Users\Blain\AppData\Local\{AFF343B2-B7E1-42E1-B3CD-86DFD799647C}
2013-07-27 13:29:13 -------- d-----w- C:\Users\Blain\AppData\Local\{4E19E13B-10DB-4B6D-AD68-09A12E29D859}
2013-07-27 01:29:03 -------- d-----w- C:\Users\Blain\AppData\Local\{326C67C0-07AE-44D2-98E3-0F695D890702}
.
==================== Find3M  ====================
.
2013-08-25 14:28:51 387 ----a-w- C:\Users\Blain\AppData\Roaming\sp_data.sys
2013-07-26 05:13:37 2241024 ----a-w- C:\Windows\System32\wininet.dll
2013-07-26 05:12:08 3958784 ----a-w- C:\Windows\System32\jscript9.dll
2013-07-26 05:12:04 136704 ----a-w- C:\Windows\System32\iesysprep.dll
2013-07-26 05:12:03 67072 ----a-w- C:\Windows\System32\iesetup.dll
2013-07-26 03:35:08 2706432 ----a-w- C:\Windows\System32\mshtml.tlb
2013-07-26 03:13:24 1767936 ----a-w- C:\Windows\SysWow64\wininet.dll
2013-07-26 03:12:04 2877440 ----a-w- C:\Windows\SysWow64\jscript9.dll
2013-07-26 03:12:00 61440 ----a-w- C:\Windows\SysWow64\iesetup.dll
2013-07-26 03:12:00 109056 ----a-w- C:\Windows\SysWow64\iesysprep.dll
2013-07-26 02:49:14 2706432 ----a-w- C:\Windows\SysWow64\mshtml.tlb
2013-07-26 02:39:38 89600 ----a-w- C:\Windows\System32\RegisterIEPKEYs.exe
2013-07-26 01:59:38 71680 ----a-w- C:\Windows\SysWow64\RegisterIEPKEYs.exe
2013-07-09 06:03:30 5550528 ----a-w- C:\Windows\System32\ntoskrnl.exe
2013-07-09 05:54:22 1732032 ----a-w- C:\Windows\System32\ntdll.dll
2013-07-09 05:53:12 243712 ----a-w- C:\Windows\System32\wow64.dll
2013-07-09 05:03:34 3968960 ----a-w- C:\Windows\SysWow64\ntkrnlpa.exe
2013-07-09 05:03:34 3913664 ----a-w- C:\Windows\SysWow64\ntoskrnl.exe
2013-07-09 04:53:47 1292192 ----a-w- C:\Windows\SysWow64\ntdll.dll
2013-07-09 04:52:33 663552 ----a-w- C:\Windows\SysWow64\rpcrt4.dll
2013-07-09 04:52:33 5120 ----a-w- C:\Windows\SysWow64\wow32.dll
2013-07-09 04:45:07 44032 ----a-w- C:\Windows\apppatch\acwow64.dll
2013-07-09 02:49:42 25600 ----a-w- C:\Windows\SysWow64\setup16.exe
2013-07-09 02:49:41 7680 ----a-w- C:\Windows\SysWow64\instnm.exe
2013-07-09 02:49:39 14336 ----a-w- C:\Windows\SysWow64\ntvdm64.dll
2013-07-09 02:49:38 2048 ----a-w- C:\Windows\SysWow64\user.exe
2013-07-06 06:03:53 1910208 ----a-w- C:\Windows\System32\drivers\tcpip.sys
2013-06-27 02:23:56 0 ----a-w- C:\Windows\SysWow64\shoB483.tmp
2013-06-18 15:48:17 0 ----a-w- C:\Windows\SysWow64\shoEBCB.tmp
2013-06-15 04:32:16 39936 ----a-w- C:\Windows\System32\drivers\tssecsrv.sys
2013-06-05 07:15:09 0 ----a-w- C:\Windows\SysWow64\sho1DFB.tmp
2013-06-05 03:34:27 3153920 ----a-w- C:\Windows\System32\win32k.sys
2013-06-04 06:00:13 624128 ----a-w- C:\Windows\System32\qedit.dll
2013-06-04 04:53:07 509440 ----a-w- C:\Windows\SysWow64\qedit.dll
2013-05-28 13:05:16 163328 ----a-w- C:\Windows\SysWow64\FlashPlayerUpdateService.exe
.
============= FINISH: 15:59:52.54 ===============
 
 
 
Thanks guys!

 

Link to post
Share on other sites
Maniac

Maniac

Posted
Posted

Hello Batman91! My name is Borislav and I will be glad to help you solve your malware problem.

Please note:

  • If you are a paying customer, you have the privilege to contact the help desk at Consumer Support. If you choose this option to get help, please let me know.
  • I recommend you to keep the instructions I will be giving you so that they are available to you at any time. You can save them in a text file or print them.
  • Make sure you read all of the instructions and fixes thoroughly before continuing with them.
  • Follow my instructions strictly and don’t hesitate to stop and ask me if you have any questions.
  • Post your log files, don't attach them. Every log file should be copy/pasted in your next reply.
  • Do not perform any kind of scanning and fixing without my instructions. If you want to proceed on your own, please let me know.
Step 1

Please uninstall the following applications:

BrowserProtect

Delta toolbar

Yontoo 2.04

Step 2

Please download Junkware Removal Tool to your desktop.

  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista or Seven, right-mouse click it and select Run as Administrator.
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.
Step 3

Please download AdwCleaner by Xplode onto your desktop.

  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click on Delete.
  • Confirm each time with Ok.
  • Your computer will be rebooted automatically. A text file will open after the restart.
  • Please post the content of that logfile with your next answer.
  • You can find the logfile at C:\AdwCleaner[s1].txt as well.
Step 4
  • Launch Malwarebytes' Anti-Malware
  • Go to Update tab and select Check for Updates. If an update is found, it will download and install the latest version.
  • Go to Scanner tab and select Perform Quick Scan, then click Scan.
  • The scan may take some time to finish,so please be patient.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Make sure that everything is checked, and click Remove Selected.
  • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Extra Note)
  • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  • Copy&Paste the entire report in your next reply.
Extra Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer,please do so immediately.

Step 5

  • Download on the desktop RogueKiller
  • Quit all programs
  • Start RogueKiller.exe
  • Wait until Prescan has finished ...
  • Click on Scan. Click on Report and copy/paste the content of the notepad in your next reply.
In your next reply, post the following log files:
  • Junkware Removal Tool log
  • AdwCleaner log
  • Malwarebytes' Anti-Malware log
  • RogueKiller log
Link to post
Share on other sites
Batman91

Batman91

Posted
  • Author
Posted
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 5.5.4 (08.22.2013:1)

OS: Windows 7 Home Premium x64

Ran by Blain on 26/08/2013 at 23:09:11.41

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

 

 

 

~~~ Services

 

 

 

~~~ Registry Values

 

 

 

~~~ Registry Keys

 

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}

Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\1clickdownload

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\babsolution

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\babylontoolbar

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\filescout

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\sweetim

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{82E1477C-B154-48D3-9891-33D83C26BCD3}

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\babylon

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\sweetim

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\prod.cap

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\mybabylontb_rasapi32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\mybabylontb_rasmancs

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}

Successfully deleted: [Registry Key] "hkey_current_user\software\apn pip"

Successfully deleted: [Registry Key] "hkey_local_machine\software\pip"

 

 

 

~~~ Files

 

Successfully deleted: [File] C:\Windows\syswow64\sho1DFA.tmp

Successfully deleted: [File] C:\Windows\syswow64\sho1DFB.tmp

Successfully deleted: [File] C:\Windows\syswow64\shoB483.tmp

Successfully deleted: [File] C:\Windows\syswow64\shoEBCB.tmp

 

 

 

~~~ Folders

 

Successfully deleted: [Folder] "C:\ProgramData\babylon"

Failed to delete: [Folder] "C:\ProgramData\browserprotect"

Successfully deleted: [Folder] "C:\ProgramData\tarma installer"

Successfully deleted: [Folder] "C:\Users\Blain\AppData\Roaming\babylon"

Successfully deleted: [Folder] "C:\Users\Blain\AppData\Roaming\file scout"

Successfully deleted: [Folder] "C:\Users\Blain\appdata\local\conduit"

Successfully deleted: [Folder] "C:\Users\Blain\appdata\local\cre"

Successfully deleted: [Folder] "C:\Users\Blain\appdata\locallow\conduit"

Successfully deleted: [Folder] "C:\Users\Blain\appdata\locallow\delta"

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{03EC61F5-7B6C-47F3-BB9D-5A11DA7DBD67}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{051967CC-B809-4B98-B54D-EA47ABDC4622}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{099BE27A-5EEE-4493-8824-775DE864AA7B}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{0CF1119E-F1DB-4C6D-8812-CBB05A09871B}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{0D9AC845-6F92-4243-9AF1-C89B5BD5C61D}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{10C6DDA5-FECA-480E-9F30-55B4460B8E38}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{1E65FD39-6353-4B28-89A7-624E72CD4DF9}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{1E8C908F-D05C-46A3-B420-73732FE6FCCD}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{27F2B47E-0BD4-4B73-AAD4-0FD6DA50F718}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{2C3865CE-62C5-429A-952D-21A0721EF552}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{2DEC3543-3EB6-40A4-BF95-E7476FC17F8E}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{3032002F-B331-4819-B181-42D955361C65}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{3238C38D-BEE1-4CF4-99CF-BACB9CF904EB}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{326C67C0-07AE-44D2-98E3-0F695D890702}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{3335E9CE-E7F3-4746-945E-B6E4A2D224BC}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{37FEFF43-2D7B-4189-B30C-687FA53C21EA}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{3863B3D8-73DE-48F5-B9C2-6443C7BCE3DC}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{3B174857-EEEC-4924-8C9C-B191E0680EF5}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{3CFB2882-E8C2-430E-A624-AA009222F0E6}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{3E79FB92-24B0-4F35-B60C-EA274606416D}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{408B0619-2DB7-4255-BFA7-BAB283D70B4A}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{4167927E-EC97-449E-8AFD-3D7AF861237B}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{457E0F5C-1F9D-4523-A7CF-CA18FA0C6E04}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{45C7AF65-FBA4-45D0-972D-AD03369896E2}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{46ACB4FC-AF47-4FC1-966D-7871E98212F9}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{483B6F2B-5B93-4C79-B868-9FC7634BC4F3}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{4E19E13B-10DB-4B6D-AD68-09A12E29D859}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{4E5AFDE2-391F-4ADD-961F-92D21C04BEFD}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{4E679CE9-C552-4872-A210-7F0DB0DA788B}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{51403F26-458E-4AC4-B12B-1DC177E85A98}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{553BCEFD-0103-4134-8F2E-A08D1C56C4B7}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{581B375C-2881-443A-9145-AB158E07B428}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{59680612-1A54-4AFE-8A85-AE53640F6430}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{5B902523-36C1-46C1-B247-F1D5EC118ED9}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{60FF9CEF-AA3C-42A1-87CF-BD4C5BB77DD8}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{617E32CE-DE91-4943-ADCE-A92AC94493D7}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{68C85D9E-E52B-4D93-BBB7-4097C2EAC6EA}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{6FBADAFE-F3CC-41A6-8EF0-80977FB5B6FA}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{7212FB59-CB5C-4480-92B8-01298B852834}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{7277FA8C-77A4-4DA1-94E9-8A85644413CA}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{78242B0E-0703-4853-B622-246EF033F357}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{7CBA9648-8D80-4543-A600-905A9EACEC63}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{83F5117F-11BB-46F1-9ED0-EC0CF6E0D52A}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{87ABDDF5-69C9-4ECA-8522-67D726AFB3F2}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{88734CED-3EE2-4B22-A3A4-B1615308FF65}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{8894337B-655D-49DC-BAF0-65FB27A875A7}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{88AEEC01-A9F4-431F-85C1-EDBD5AE71E53}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{8A9A84FD-7962-4FA3-B087-0B6C62A3FB88}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{8C037642-3E76-4D69-8FA3-A4A00179D824}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{915F9F93-A20C-4098-9D66-4CE86CE99A8D}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{971E99F2-43CA-4325-A582-F999A144726B}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{99317D6A-F826-4D52-8168-B35C3751A690}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{9B90B5D9-A904-443E-A079-20339F819E6E}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{9BFC8E46-D740-4CB3-9C36-E8C7D5DF7F81}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{9C270104-48E5-4976-A412-995882558688}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{9FBDABAD-DBD6-4F26-85B6-610AA83A7198}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{A2DA72CF-F23D-40EB-9471-E34CDB3F8D79}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{A2E5B3E1-F02C-4074-8985-BC241B88B55A}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{A808EA0A-6B39-4F85-84E2-DB51260E0EAB}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{ABC1F9AA-801A-4B27-B48F-48C5D2E9E777}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{AD0B39C1-9080-420A-ADD4-492B1574B4D5}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{AF2F168A-ED66-4CD4-BDEA-6C1E9DF38FA1}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{AFF343B2-B7E1-42E1-B3CD-86DFD799647C}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{B1B003BB-812E-41CE-8FFA-B562EEEAC7F9}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{B5A2DFE3-BAA8-4746-8D1A-6818FE1E11AF}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{B5B00881-E8BB-4266-A10E-7BDBAD056E57}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{B64902C5-6C3B-4B47-A365-2A575052C670}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{B7BDF459-BAF8-42E0-BA99-1D0BC0D51093}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{BA76B3D6-8091-4D5D-9D74-7B37CADEA64E}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{BF190719-F340-4381-AB50-A694F1BC20A4}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{BF53A9FB-EA93-49E6-B375-2D1FE9560276}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{BFD335B5-8D34-43BA-B00D-BDA4F6374FA6}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{C331F577-1537-4379-96B9-6AE521CBD5E0}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{C382233A-910A-4C2F-A782-7E038D04133D}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{C44DBAC2-9177-44D1-B99D-330F318F54B8}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{C8B9DDF6-1016-4128-8CBE-E461B6FAFA2E}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{CF758539-C8A2-4A6E-843D-8C618163AE80}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{D4FDF4F7-70B3-4341-9FFF-7BCC30AC0A1A}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{D5CAEB52-48A4-4E1C-B6E5-4B14BE682399}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{D9043CBA-835E-4431-A23E-57D76A2B23B7}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{E3D6C439-9B3A-42DA-80A5-5761B859A8FD}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{EDB94EA1-CF34-4F8E-8C7B-60AAEF67A179}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{F220DF32-4943-46A6-9E8C-950A0C52BB85}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{F39DF768-B310-40D9-9CE2-8C76FFB1DBC7}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{F6AE4DBD-0C42-4397-A113-F7F6B1AF6A11}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{F8998B6E-2501-4A3A-99C2-A3DC87BBAD89}

Successfully deleted: [Empty Folder] C:\Users\Blain\appdata\local\{FC6FD886-CB78-4999-833E-7342D2B0D005}

 

 

 

~~~ Event Viewer Logs were cleared

 

 

 

 

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 26/08/2013 at 23:24:36.68

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Link to post
Share on other sites
Batman91

Batman91

Posted
  • Author
Posted

Hi,

 

I was able to perform steps 1 and 2.

 

When I try to run AdwCleaner it performs the scan and begins the clean but then stops responding.

 

I let it run for a couple of hours last night and then tried again today. Both times it stopped responding.

 

Any advice on where to go from here?

Link to post
Share on other sites
Batman91

Batman91

Posted
  • Author
Posted
AdwCleaner[R2]

 

# AdwCleaner v3.001 - Report created 27/08/2013 at 21:59:50

# Updated 24/08/2013 by Xplode

# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)

# Username : Blain - BLAIN-PC

# Running from : C:\Users\Blain\Downloads\AdwCleaner (1).exe

# Option : Scan

 

***** [ Services ] *****

 

 

***** [ Files / Folders ] *****

 

Folder Found C:\Program Files (x86)\HDvidCodec.com

Folder Found C:\Users\Blain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HDvidCodec.com

 

***** [ Shortcuts ] *****

 

 

***** [ Registry ] *****

 

Key Found : HKCU\Software\828ad1e639bf42

Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}

Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{82E1477C-B154-48D3-9891-33D83C26BCD3}

Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}

Key Found : HKLM\SOFTWARE\828ad1e639bf42

Key Found : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}

Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}

Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}

Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}

Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\1ClickDownload

Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}

Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}

Key Found : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}

Key Found : [x64] HKLM\SOFTWARE\Tarma Installer

 

***** [ Browsers ] *****

 

-\\ Internet Explorer v10.0.9200.16660

 

 

-\\ Google Chrome v29.0.1547.57

 

[ File : C:\Users\Blain\AppData\Local\Google\Chrome\User Data\Default\preferences ]

 

 

*************************

 

AdwCleaner[R0].txt - [2400 octets] - [26/08/2013 23:28:51]

AdwCleaner[R1].txt - [2475 octets] - [27/08/2013 17:45:32]

AdwCleaner[R2].txt - [2324 octets] - [27/08/2013 21:59:50]

AdwCleaner[s0].txt - [337 octets] - [26/08/2013 23:29:38]

AdwCleaner[s1].txt - [337 octets] - [27/08/2013 17:46:22]

 

########## EOF - C:\AdwCleaner\AdwCleaner[R2].txt - [2502 octets] ##########
Link to post
Share on other sites
Batman91

Batman91

Posted
  • Author
Posted
Malwarebytes Anti-Malware (Trial) 1.75.0.1300

www.malwarebytes.org

 

Database version: v2013.08.27.09

 

Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 10.0.9200.16660

Blain :: BLAIN-PC [administrator]

 

Protection: Enabled

 

27/08/2013 23:55:32

mbam-log-2013-08-27 (23-55-32).txt

 

Scan type: Quick scan

Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM

Scan options disabled: P2P

Objects scanned: 218538

Time elapsed: 4 minute(s), 47 second(s)

 

Memory Processes Detected: 0

(No malicious items detected)

 

Memory Modules Detected: 0

(No malicious items detected)

 

Registry Keys Detected: 1

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{82E1477C-B154-48D3-9891-33D83C26BCD3} (PUP.Optional.Delta.A) -> Quarantined and deleted successfully.

 

Registry Values Detected: 0

(No malicious items detected)

 

Registry Data Items Detected: 0

(No malicious items detected)

 

Folders Detected: 1

C:\Users\Blain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\hdvidcodec.com (PUP.Optional.HDVidCodec.A) -> Quarantined and deleted successfully.

 

Files Detected: 9

C:\Users\Blain\AppData\Local\Temp\A033.tmp (PUP.Browser.Defender.A) -> Quarantined and deleted successfully.

C:\Users\Blain\AppData\Local\Temp\D1C2.tmp (PUP.Babylon.A) -> Quarantined and deleted successfully.

C:\Users\Blain\AppData\Local\Temp\988DA541-BAB0-7891-9EF1-D6A06BFC6114\MyBabylonTB.exe (PUP.Optional.Delta) -> Quarantined and deleted successfully.

C:\Users\Blain\AppData\Local\Temp\busB2EA\BUSolution.dll (PUP.Optional.BabSolution.A) -> Quarantined and deleted successfully.

C:\Users\Blain\AppData\Local\Temp\upd63B9\BabMaint.x (PUP.Optional.Babylon.A) -> Quarantined and deleted successfully.

C:\Users\Blain\Downloads\hdplugin_chrome.exe (PUP.BundleInstaller.DW) -> Quarantined and deleted successfully.

C:\Users\Blain\Local Settings\Temporary Internet Files\Content.IE5\UKC4CZDO\pack[1].7z (PUP.Optional.BrowserDefender.A) -> Quarantined and deleted successfully.

C:\Users\Blain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\hdvidcodec.com\HDVidCodec.lnk (PUP.Optional.HDVidCodec.A) -> Quarantined and deleted successfully.

C:\Users\Blain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\hdvidcodec.com\Uninstall.lnk (PUP.Optional.HDVidCodec.A) -> Quarantined and deleted successfully.

 

(end)
Link to post
Share on other sites
Batman91

Batman91

Posted
  • Author
Posted
RogueKiller V8.6.6 _x64_ [Aug 19 2013] by Tigzy

mail : tigzyRK<at>gmail<dot>com




 

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version

Started in : Normal mode

User : Blain [Admin rights]

Mode : Scan -- Date : 08/28/2013 00:05:27

| ARK || FAK || MBR |

 

¤¤¤ Bad processes : 0 ¤¤¤

 

¤¤¤ Registry Entries : 6 ¤¤¤

[HJ POL] HKCU\[...]\System : DisableTaskMgr (0) -> FOUND

[HJ POL] HKCU\[...]\System : DisableRegistryTools (0) -> FOUND

[HJ POL] HKLM\[...]\System : EnableLUA (0) -> FOUND

[HJ POL] HKLM\[...]\Wow6432Node\[...]\System : EnableLUA (0) -> FOUND

[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND

[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND

 

¤¤¤ Scheduled tasks : 0 ¤¤¤

 

¤¤¤ Startup Entries : 0 ¤¤¤

 

¤¤¤ Web browsers : 0 ¤¤¤

 

¤¤¤ Particular Files / Folders: ¤¤¤

 

¤¤¤ Driver : [NOT LOADED 0x0] ¤¤¤

 

¤¤¤ External Hives: ¤¤¤

 

¤¤¤ Infection :  ¤¤¤

 

¤¤¤ HOSTS File: ¤¤¤

--> %SystemRoot%\System32\drivers\etc\hosts

 

 

127.0.0.1                   65.52.240.48

127.0.0.1                   activation.cloud.techsmith.com

 

 

¤¤¤ MBR Check: ¤¤¤

 

+++++ PhysicalDrive0: WDC WD3200BPVT-80JJ5T0 +++++

--- User ---

[MBR] d4151e6a972fe8492e1ac77442d7f36b

[bSP] 81fb3768a2fa391ec2e1552c062a68fa : Empty MBR Code

Partition table:

0 - [XXXXXX] UNKNOWN (0x00) [VISIBLE] Offset (sectors): 1 | Size: 305245 Mo

User = LL1 ... OK!

User = LL2 ... OK!

 

Finished : << RKreport[0]_S_08282013_000527.txt >>
Link to post
Share on other sites
  • 2 weeks later...
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.