Can’t run Windows Update or MBAM Full Scan

ReallyFreeSpirit · December 10, 2013

MBAM Quick Scan completes, with nothing found, but have not been able to complete a Full Scan. Encounter blue screen with mini-dump during Full Scan. Also have a process loop, as follows: Get message that PC cannot obtain Windows Updates during startup (says a restart is necessary). During restart log off/shutdown, message shows updates being configured, but no updates have been downloaded). When restart finishes, message indicates that Windows Updates cannot be accessed. Loop continues.

Have and can forward blue screen files:

C:\Windows\Minidump\Mini120913-02.dmp

C:\Users\Bob\AppData\Local\Temp\WER-172349-0.sysdata.xml

C:\Users\Bob\AppData\Local\Temp\WER6E1D.tmp.version.txt

Psychotic · December 10, 2013

Hi there,
my name is Marius and I will assist you with your malware related problems.

Before we move on, please read the following points carefully.

First, read my instructions completely. If there is anything that you do not understand kindly ask before proceeding.
Perform everything in the correct order. Sometimes one step requires the previous one.
If you have any problems while following my instructions, Stop there and tell me the exact nature of your problem.
Do not run any other scans without instruction or add/remove software unless I tell you to do so. This would change the output of our tools and could be confusing for me.
Post all logfiles as a reply rather than as an attachment unless I specifically ask you. If you can not post all logfiles in one reply, feel free to use more posts.
If I don't hear from you within 3 days from this initial or any subsequent post, then this thread will be closed.
Stay with me. I will give you some advice about prevention after the cleanup process. Absence of symptoms does not always mean the computer is clean.
My first language is not english. So please do not use slang or idioms. It could be hard for me to read. Thanks for your understanding.

Scan with FRST in normal mode

Please download Farbar's Recovery Scan Tool to your desktop: FRST 32bit or FRST 64bit (If not sure: Start --> Computer (right click) --> properties)

Run FRST.
Don´t change one of the checkboxes and hit Scan.
Logfiles are created on your desktop.
Poste the FRST.txt and (after the first scan only!) the Addition.txt.

Scan with TDSS-Killer

Please read and follow these instructions carefully. We do not want it to fix anything yet (if found), we need to see a report first.

Download TDSSKiller.zip and extract to your desktop

Execute TDSSKiller.exe by doubleclicking on it.
Press Start Scan
If Malicious objects are found, do NOT select Copy to quarantine. Change the action to Skip, and save the log.
Once complete, a log will be produced at the root drive which is typically C:\ ,for example, C:\TDSSKiller.<version_date_time>log.txt

Please post the contents of that log in your next reply.

ReallyFreeSpirit · December 10, 2013

Hello Marius:

I am Bob; some background on the hardware.

The computer is a Dell Studio 1737 Notebook, running Windows Vista Home Premium SP2, 64b.

I will print each of your replies and then proceed (in case of problems performing your requests). I do have access to another computer, which I can use to view either emails or to post replies to/from you.

I will start FRST this morning.

ReallyFreeSpirit · December 10, 2013

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-12-2013
Ran by Bob (administrator) on NOTEBOOK-PC on 10-12-2013 08:52:13
Running from C:\Users\Bob\Desktop
Windows Vista Home Premium Service Pack 2 (X64) OS Language: English(US)
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_15f4e438\stacsv64.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(Stardock Corporation) C:\Program Files\Dell\DellDock\DockLogin.exe
(Microsoft) C:\Program Files (x86)\Absolute Software\Absolute Notifier\AbsoluteNotifierService.exe
(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
(Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_15f4e438\AESTSr64.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
( ) C:\Windows\System32\dlcxcoms.exe
(Microsoft Corporation) C:\Windows\ehome\ehrecvr.exe
(Microsoft Corporation) C:\Windows\ehome\ehsched.exe
(Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
(Genie9) C:\Program Files\Genie9\Genie Timeline\GenieTimelineService.exe
(Dell Inc.) C:\Program Files (x86)\Common Files\Dell\Advanced Networking Service\hnm_svc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
() C:\Program Files\LaCie\Desktop Manager\lacie_dm_service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
(McAfee, Inc.) C:\Program Files\McAfee\MSC\McAPExe.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PDF Professional 5\PDFProFiltSrv.exe
(SoftThinks) C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
() C:\Program Files (x86)\Dell Photo AIO Printer 926\dlcxmon.exe
() C:\Program Files (x86)\Dell Photo AIO Printer 926\memcard.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe
() C:\Program Files\LaCie\Desktop Manager\LaCieDesktopManagerStatusItem.exe
(Genie9) C:\Program Files\Genie9\Genie Timeline\GenieTimeLineAgent.exe
() C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Dell Inc.) C:\Program Files (x86)\Dell Remote Access\ezi_ra.exe
(Creative Technology Ltd) C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McUICnt.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\hidfind.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApntEx.exe
(Intuit Inc.) C:\Program Files (x86)\Common Files\Intuit\Update Service\IntuitUpdateService.exe
(Intuit Inc.) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe
(McAfee, Inc.) C:\Program Files\McAfee\MSM\McSmtFwk.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PDF Professional 5\PdfPro5Hook.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\SeaPort.EXE
(Adobe Systems Incorporated) C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_9_900_117_ActiveX.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1584184 2008-01-20] (Microsoft Corporation)
HKLM\...\Run: [Apoint] - C:\Program Files\DellTPad\Apoint.exe [309760 2009-04-27] (Alps Electric Co., Ltd.)
HKLM\...\Run: [RunDLLEntry] - C:\Windows\system32\RunDLL32.exe C:\Windows\system32\AmbRunE.dll,RunDLLEntry
HKLM\...\Run: [sysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [462848 2009-03-30] (IDT, Inc.)
HKLM\...\Run: [dlcxmon.exe] - C:\Program Files (x86)\Dell Photo AIO Printer 926\dlcxmon.exe [292336 2007-01-12] ()
HKLM\...\Run: [MemoryCardManager] - C:\Program Files (x86)\Dell Photo AIO Printer 926\memcard.exe [304008 2006-11-03] ()
HKLM\...\Run: [DLCXCATS] - rundll32 C:\Windows\system32\spool\DRIVERS\x64\3\DLCXtime.dll,RunDLLEntry
HKLM\...\Run: [LaCie Desktop Manager Launcher] - "C:\Program Files\LaCie\Desktop Manager\lacie_launcherd.exe"
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
Winlogon\Notify\GoToAssist: C:\Program Files (x86)\Citrix\GoToAssist\514\G2AWinLogon_x64.dll [X]
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehtray.exe [138240 2008-01-20] (Microsoft Corporation)
HKCU\...\Run: [MobileDocuments] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe
HKCU\...\Run: [WMPNSCFG] - C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe
HKCU\...\Run: [iSUSPM Startup] - C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [221184 2005-02-16] (InstallShield Software Corporation)
HKCU\...\Run: [skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [18678376 2013-04-19] (Skype Technologies S.A.)
HKCU\...\Run: [GarminExpressTrayApp] - C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [1098072 2013-03-27] (Garmin Ltd or its subsidiaries)
HKCU\...\Run: [LaCie Desktop Manager Startup] - C:\Program Files\LaCie\Desktop Manager\LaCieDesktopManagerStatusItem.exe [3460608 2012-10-10] ()
HKLM-x32\...\Run: [Dell DataSafe Online] - C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe [1807600 2009-11-13] ()
HKLM-x32\...\Run: [VolPanel] - C:\Program Files (x86)\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe [237693 2008-12-09] (Creative Technology Ltd)
HKLM-x32\...\Run: [Dell Webcam Central] - C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe [405639 2009-01-09] (Creative Technology Ltd)
HKLM-x32\...\Run: [Microsoft Default Manager] - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe [250192 2009-04-24] (Microsoft Corporation)
HKLM-x32\...\Run: [DellSupportCenter] - "C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
HKLM-x32\...\Run: [AppleSyncNotifier] - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2011-09-27] (Apple Inc.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] - C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrobat_sl.exe [44128 2013-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [Acrobat Assistant 8.0] - C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.exe [642664 2013-05-08] (Adobe Systems Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [PDF5 Registry Controller] - C:\Program Files (x86)\Nuance\PDF Professional 5\RegistryController.exe [58656 2008-07-31] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [sSBkgdUpdate] - C:\Program Files (x86)\Common Files\ScanSoft Shared\SSBkgdUpdate\SSBkgdUpdate.exe [210472 2007-03-26] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [mcui_exe] - C:\Program Files\McAfee.com\Agent\mcagent.exe [537512 2013-09-24] (McAfee, Inc.)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [mcpltui_exe] - C:\Program Files\McAfee.com\Agent\mcagent.exe [537512 2013-09-24] (McAfee, Inc.)
HKLM-x32\...\Run: [sunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
AppInit_DLLs: C:\Windows\System32\acaptuser64.dll [119160 2008-06-11] (Adobe Systems, Inc.)
AppInit_DLLs-x32: acaptuser32.dll [114280 2013-05-08] (Adobe Systems Incorporated)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk
ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk
ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\system32\CbFsMntNtf3.dll (EldoS Corporation)
SSODL-x32: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll (EldoS Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://dell.msn.com/?pc=MDDC&OCID=DELLDHP
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/USCON/1
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/USCON/1
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/USCON/1
URLSearchHook: HKCU - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
URLSearchHook: HKCU - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - DefaultScope {01F5ADD7-E523-4876-B62C-540E833A5E94} URL = http://search.yahoo.com/search?fr=mcafee&p={SearchTerms}
SearchScopes: HKCU - {01F5ADD7-E523-4876-B62C-540E833A5E94} URL = http://search.yahoo.com/search?fr=mcafee&p={SearchTerms}
SearchScopes: HKCU - {89503E4F-58E8-40D4-B2C1-DADA0C7E8F1B} URL = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=kw&q={searchTerms}&locale=&apn_ptnrs=TV&apn_dtid=OSJ000YYUS&apn_uid=4E2F92E5-DB31-46F1-AAEF-4C9D90116F1F&apn_sauid=15FB3073-C5F3-4EDC-9FA7-78F3B7E226BC
BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\PROGRA~1\mcafee\msk\MSKAPB~1.DLL No File
BHO: Virtual Storage Mount Notification - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\System32\CbFsMntNtf3.dll (EldoS Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll No File
BHO-x32: Bing Bar Helper - {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\progra~1\mcafee\msk\mskapbho.dll No File
BHO-x32: Virtual Storage Mount Notification - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll (EldoS Corporation)
BHO-x32: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
BHO-x32: ZeonIEEventHelper Class - {DA986D7D-CCAF-47B2-84FE-BFA1549BEBF9} - C:\Program Files (x86)\Nuance\PDF Professional 5\bin\ZeonIEFavClient.dll (Zeon Corporation)
BHO-x32: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Nuance PDF - {E3286BF1-E654-42FF-B4A6-5E111731DF6B} - C:\Program Files (x86)\Nuance\PDF Professional 5\bin\ZeonIEFavClient.dll (Zeon Corporation)
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM-x32 - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab
Handler: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - No File
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler-x32: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files (x86)\Belarc\Advisor\System\BAVoilaX.dll (Belarc, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files\McAfee\MSC\McSnIePl64.dll (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files (x86)\McAfee\MSC\McSnIePl.dll (McAfee, Inc.)
Tcpip\Parameters: [DhcpNameServer] 208.180.42.68 208.180.42.100

Chrome:
=======

CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx
CHR HKLM-x32\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx

==================== Services (Whitelisted) =================

R2 AbsoluteNotifier; C:\Program Files (x86)\Absolute Software\Absolute Notifier\AbsoluteNotifierService.exe [10408 2010-10-08] (Microsoft)
R2 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 dlcx_device; C:\Windows\system32\dlcxcoms.exe [561152 2006-10-11] ( )
R2 dlcx_device; C:\Windows\SysWow64\dlcxcoms.exe [532480 2006-10-11] ( )
R2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [185688 2013-03-27] (Garmin Ltd or its subsidiaries)
R2 GenieTimelineService; C:\Program Files\Genie9\Genie Timeline\GenieTimelineService.exe [662104 2012-09-16] (Genie9)
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 LaCieDesktopManagerService; C:\Program Files\LaCie\Desktop Manager\lacie_dm_service.exe [1379840 2012-10-10] ()
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 McAfee SiteAdvisor Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [178048 2013-09-24] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
S3 McODS; C:\Program Files\McAfee\VirusScan\mcods.exe [602944 2013-08-02] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1017016 2013-09-20] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219272 2013-11-04] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [182752 2013-11-04] (McAfee, Inc.)
R2 PDFProFiltSrv; C:\Program Files (x86)\Nuance\PDF Professional 5\PDFProFiltSrv.exe [144672 2008-07-31] (Nuance Communications, Inc.)

==================== Drivers (Whitelisted) ====================

R1 cbfs3; C:\Windows\system32\drivers\cbfs3.sys [348560 2011-12-02] (EldoS Corporation)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70112 2013-11-04] (McAfee, Inc.)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [179792 2013-11-04] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [311120 2013-11-04] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [519576 2013-11-04] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [782360 2013-11-04] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\System32\DRIVERS\mfencbdc.sys [390552 2013-09-20] (McAfee, Inc.)
S3 mfencrk; C:\Windows\System32\DRIVERS\mfencrk.sys [95984 2013-09-20] (McAfee, Inc.)
R1 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [343696 2013-11-04] (McAfee, Inc.)
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2013-12-10 08:52 - 2013-12-10 08:52 - 00021221 _____ C:\Users\Bob\Desktop\FRST.txt
2013-12-10 08:51 - 2013-12-10 08:51 - 00000000 ____D C:\FRST
2013-12-10 08:49 - 2013-12-10 08:49 - 01927982 _____ (Farbar) C:\Users\Bob\Desktop\FRST64.exe
2013-12-09 19:07 - 2013-12-09 19:07 - 00000000 ____D C:\Users\Bob\AppData\Roaming\ParetoLogic
2013-12-09 19:07 - 2013-12-09 19:07 - 00000000 ____D C:\Users\Bob\AppData\Roaming\DriverCure
2013-12-09 19:05 - 2013-12-09 19:27 - 00000000 ____D C:\ProgramData\ParetoLogic
2013-12-09 18:30 - 2013-12-09 18:31 - 00277696 _____ C:\Windows\Minidump\Mini120913-02.dmp
2013-12-09 18:11 - 2013-12-09 18:12 - 00277712 _____ C:\Windows\Minidump\Mini120913-01.dmp
2013-12-09 16:32 - 2013-12-09 17:01 - 00000000 ____D C:\Users\Bob\Desktop\Dec_2013 Small
2013-12-08 18:28 - 2013-12-08 18:28 - 00277696 _____ C:\Windows\Minidump\Mini120813-04.dmp
2013-12-08 18:20 - 2013-12-08 18:20 - 00277696 _____ C:\Windows\Minidump\Mini120813-03.dmp
2013-12-08 18:15 - 2013-12-08 18:15 - 00277696 _____ C:\Windows\Minidump\Mini120813-02.dmp
2013-12-08 18:04 - 2013-12-08 18:04 - 00277696 _____ C:\Windows\Minidump\Mini120813-01.dmp
2013-12-08 16:49 - 2013-12-09 20:54 - 00000898 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cef45f5cb91205.job
2013-12-08 16:49 - 2013-12-08 16:49 - 00003894 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA1cef45f5cb91205
2013-12-07 18:20 - 2013-12-08 17:00 - 00000000 ____D C:\Users\Bob\Desktop\Dec_2013
2013-12-04 21:04 - 2013-12-04 21:04 - 00000000 ____D C:\Users\Bob\Desktop\Shutterfly Free 50
2013-12-03 22:06 - 2013-12-03 22:06 - 00000000 ____D C:\Users\Bob\AppData\Local\{B85675BF-B972-4B49-9AEF-AD5F34521A17}
2013-12-02 19:17 - 2013-12-02 19:17 - 00000000 ____D C:\Users\Bob\Desktop\New Folder
2013-12-02 19:15 - 2013-12-02 19:15 - 00000000 ____D C:\Users\Bob\Desktop\MV2F-4K42-XZ5G-5SFGU4
2013-12-02 19:13 - 2013-12-04 15:30 - 00000000 ____D C:\Users\Bob\Desktop\Helen WD2F-8E6M-3GUU-N4T6U9
2013-11-17 22:05 - 2013-11-17 22:05 - 00001656 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-11-17 22:04 - 2013-11-17 22:05 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-11-17 22:04 - 2013-11-17 22:05 - 00000000 ____D C:\Program Files\iTunes
2013-11-17 22:04 - 2013-11-17 22:04 - 00000000 ____D C:\Program Files\iPod
2013-11-11 18:56 - 2013-11-11 18:56 - 00000000 ____D C:\Users\Bob\AppData\Local\{030B97AA-1B13-40D0-B2C9-276CF7C7AABA}

==================== One Month Modified Files and Folders =======

2013-12-10 08:52 - 2013-12-10 08:52 - 00021221 _____ C:\Users\Bob\Desktop\FRST.txt
2013-12-10 08:51 - 2013-12-10 08:51 - 00000000 ____D C:\FRST
2013-12-10 08:49 - 2013-12-10 08:49 - 01927982 _____ (Farbar) C:\Users\Bob\Desktop\FRST64.exe
2013-12-10 08:43 - 2012-06-24 13:49 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-10 08:42 - 2009-09-30 23:25 - 01233945 _____ C:\Windows\WindowsUpdate.log
2013-12-10 08:30 - 2012-11-12 09:56 - 00001753 _____ C:\Users\Public\Desktop\McAfee AntiVirus Plus.lnk
2013-12-10 08:30 - 2006-11-02 10:22 - 00003616 _____ C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-10 08:30 - 2006-11-02 10:22 - 00003616 _____ C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-10 08:27 - 2012-08-09 15:20 - 00000888 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-10 08:24 - 2013-07-25 15:55 - 00000015 _____ C:\Windows\system32\deviceAppeared.txt
2013-12-10 08:24 - 2006-11-02 10:42 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-10 08:24 - 2006-11-02 10:07 - 00000000 ___RD C:\Users\Public\Recorded TV
2013-12-09 21:42 - 2006-11-02 10:42 - 00032590 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-12-09 21:41 - 2009-11-13 10:33 - 00000000 ____D C:\Users\Bob\Documents\MS Word
2013-12-09 20:54 - 2013-12-08 16:49 - 00000898 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cef45f5cb91205.job
2013-12-09 20:50 - 2010-04-27 14:15 - 00002611 _____ C:\Users\Bob\Desktop\Word 2007.lnk
2013-12-09 19:27 - 2013-12-09 19:05 - 00000000 ____D C:\ProgramData\ParetoLogic
2013-12-09 19:11 - 2012-04-09 20:37 - 00001910 _____ C:\Users\Public\Desktop\ViewNX 2.lnk
2013-12-09 19:07 - 2013-12-09 19:07 - 00000000 ____D C:\Users\Bob\AppData\Roaming\ParetoLogic
2013-12-09 19:07 - 2013-12-09 19:07 - 00000000 ____D C:\Users\Bob\AppData\Roaming\DriverCure
2013-12-09 18:31 - 2013-12-09 18:30 - 00277696 _____ C:\Windows\Minidump\Mini120913-02.dmp
2013-12-09 18:30 - 2013-08-01 08:44 - 622902302 _____ C:\Windows\MEMORY.DMP
2013-12-09 18:30 - 2013-08-01 08:44 - 00000000 ____D C:\Windows\Minidump
2013-12-09 18:12 - 2013-12-09 18:11 - 00277712 _____ C:\Windows\Minidump\Mini120913-01.dmp
2013-12-09 17:01 - 2013-12-09 16:32 - 00000000 ____D C:\Users\Bob\Desktop\Dec_2013 Small
2013-12-09 16:41 - 2013-08-25 19:33 - 00000000 ____D C:\Users\Bob\AppData\Local\Deployment
2013-12-08 18:28 - 2013-12-08 18:28 - 00277696 _____ C:\Windows\Minidump\Mini120813-04.dmp
2013-12-08 18:20 - 2013-12-08 18:20 - 00277696 _____ C:\Windows\Minidump\Mini120813-03.dmp
2013-12-08 18:15 - 2013-12-08 18:15 - 00277696 _____ C:\Windows\Minidump\Mini120813-02.dmp
2013-12-08 18:13 - 2011-02-19 14:28 - 00000000 ____D C:\Users\Bob\AppData\Roaming\Skype
2013-12-08 18:04 - 2013-12-08 18:04 - 00277696 _____ C:\Windows\Minidump\Mini120813-01.dmp
2013-12-08 17:00 - 2013-12-07 18:20 - 00000000 ____D C:\Users\Bob\Desktop\Dec_2013
2013-12-08 16:49 - 2013-12-08 16:49 - 00003894 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA1cef45f5cb91205
2013-12-08 16:49 - 2012-08-09 15:20 - 00003636 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-08 16:43 - 2008-01-20 22:26 - 00531276 _____ C:\Windows\PFRO.log
2013-12-07 18:18 - 2013-05-22 09:05 - 00003440 _____ C:\Windows\System32\Tasks\PCDEventLauncherTask
2013-12-04 21:50 - 2010-04-22 20:25 - 00000000 ____D C:\Users\Bob\Desktop\Apr_2010 MA
2013-12-04 21:40 - 2011-08-14 18:07 - 00000000 ____D C:\Users\Bob\Desktop\Birds at Home 2010-12-13
2013-12-04 21:38 - 2009-12-20 11:51 - 00000000 ____D C:\Users\Bob\Desktop\Dec_2009 RI-MA
2013-12-04 21:37 - 2009-12-28 17:44 - 00035840 _____ C:\Users\Bob\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-12-04 21:04 - 2013-12-04 21:04 - 00000000 ____D C:\Users\Bob\Desktop\Shutterfly Free 50
2013-12-04 15:30 - 2013-12-02 19:13 - 00000000 ____D C:\Users\Bob\Desktop\Helen WD2F-8E6M-3GUU-N4T6U9
2013-12-03 22:06 - 2013-12-03 22:06 - 00000000 ____D C:\Users\Bob\AppData\Local\{B85675BF-B972-4B49-9AEF-AD5F34521A17}
2013-12-03 22:06 - 2010-10-22 08:38 - 00000000 ____D C:\Users\Bob\AppData\Local\Windows Live
2013-12-03 22:00 - 2013-04-25 08:24 - 00000000 ____D C:\Users\Bob\Desktop\Apr_2013
2013-12-03 21:53 - 2013-01-30 10:29 - 00000000 ____D C:\Users\Bob\Desktop\Jan_2013
2013-12-02 19:17 - 2013-12-02 19:17 - 00000000 ____D C:\Users\Bob\Desktop\New Folder
2013-12-02 19:15 - 2013-12-02 19:15 - 00000000 ____D C:\Users\Bob\Desktop\MV2F-4K42-XZ5G-5SFGU4
2013-11-29 12:58 - 2013-11-04 17:08 - 00000000 ____D C:\Users\Bob\Desktop\Nov_2013
2013-11-28 14:00 - 2012-05-23 19:19 - 00000000 ____D C:\Program Files\Dl_cats
2013-11-19 08:30 - 2006-11-02 07:46 - 00770026 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-17 22:05 - 2013-11-17 22:05 - 00001656 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-11-17 22:05 - 2013-11-17 22:04 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-11-17 22:05 - 2013-11-17 22:04 - 00000000 ____D C:\Program Files\iTunes
2013-11-17 22:05 - 2011-03-24 19:33 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-11-17 22:04 - 2013-11-17 22:04 - 00000000 ____D C:\Program Files\iPod
2013-11-17 12:04 - 2013-05-22 09:04 - 00000000 ____D C:\Program Files\My Dell
2013-11-17 12:04 - 2009-10-01 05:12 - 00000000 ____D C:\ProgramData\PCDr
2013-11-11 18:56 - 2013-11-11 18:56 - 00000000 ____D C:\Users\Bob\AppData\Local\{030B97AA-1B13-40D0-B2C9-276CF7C7AABA}

Files to move or delete:
====================
C:\Users\Bob\AppData\Roaming\desktop.ini
C:\ProgramData\PKP_DLes.DAT
C:\ProgramData\PKP_DLet.DAT
C:\ProgramData\PKP_DLev.DAT

Some content of TEMP:
====================
C:\Users\Bob\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

LastRegBack: 2013-12-10 08:31

==================== End Of Log ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 09-12-2013
Ran by Bob at 2013-12-10 08:52:57
Running from C:\Users\Bob\Desktop
Boot Mode: Normal
==========================================================

==================== Security Center ========================

AV: McAfee Anti-Virus and Anti-Spyware (Enabled - Up to date) {ADA629C7-7F48-5689-624A-3B76997E0892}
AS: McAfee Anti-Virus and Anti-Spyware (Enabled - Up to date) {16C7C823-5972-5907-58FA-0004E2F9422F}
FW: McAfee Firewall (Enabled) {959DA8E2-3527-57D1-4915-924367AD4FE9}

==================== Installed Programs ======================

Update for Microsoft Office 2007 (KB2508958) (x32)
2007 Microsoft Office system (x32 Version: 12.0.6612.1000)
64 Bit HP CIO Components Installer (Version: 3.2.1)
8500A909_eDocs (x32 Version: 1.00.0000)
8500A909_Help (x32 Version: 1.00.0000)
8500A909a (x32 Version: 50.0.165.000)
Absolute Notifier (x32 Version: 1.2.12.10)
Acrobat.com (x32 Version: 0.0.0)
Acrobat.com (x32 Version: 1.1.377)
Adobe Acrobat 9 Pro Extended - English, Français, Deutsch (x32 Version: 9.5.5)
Adobe Acrobat 9 Pro Extended 64-bit Add-On (Version: 9.0.0)
Adobe Acrobat 9.5.5 - CPSID_83708 (x32)
Adobe AIR (x32 Version: 1.0.4990)
Adobe AIR (x32 Version: 1.0.8.4990)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.117)
Adobe Reader X (10.1.8) (x32 Version: 10.1.8)
Advanced Audio FX Engine (x32 Version: 1.12.05)
Apple Application Support (x32 Version: 2.3.6)
Apple Mobile Device Support (Version: 7.0.0.117)
Apple Software Update (x32 Version: 2.1.3.127)
ArcSoft MediaImpression (x32)
ArcSoft Panorama Maker 5 (x32 Version: 5.0.1.25)
Banctec Service Agreement (x32 Version: 2.0.0)
Belarc Advisor 8.2 (x32 Version: 8.2.7.15)
Bing Bar (x32 Version: 7.2.241.0)
Bonjour (Version: 3.0.0.10)
BPD_DSWizards (x32 Version: 1.00.0000)
bpd_scan (x32 Version: 3.00.0000)
BPDSoftware (x32 Version: 50.0.165.000)
BPDSoftware_Ini (x32 Version: 1.00.0000)
Brickyard (x32 Version: 4.00.000)
Bridge Baron 21 (x32 Version: 21.00.00)
BufferChm (x32 Version: 120.0.194.000)
Complete Care Consumer Service Agreement (x32 Version: 2.0.0)
D3DX10 (x32 Version: 15.4.2368.0902)
Dell DataSafe Local Backup - Support Software (x32 Version: 2.25)
Dell DataSafe Local Backup (x32 Version: 9.3.24)
Dell DataSafe Online (x32 Version: 1.2.0009)
Dell Dock (Version: 2.0.0)
Dell Edoc Viewer (Version: 1.0.0)
Dell Getting Started Guide (x32 Version: 1.00.0000)
Dell PC Fax
Dell Photo AIO Printer 926
Dell Remote Access (x32 Version: 1.3.0.0)
Dell Touchpad (Version: 7.102.101.219)
Dell Webcam Central (x32 Version: 1.20.10)
Dell-eBay (x32 Version: 1.00.0000)
Destination Component (x32 Version: 110.0.0.0)
DeviceDiscovery (x32 Version: 120.0.194.000)
DING! (x32 Version: 1.05.005)
DocMgr (x32 Version: 120.0.000.000)
DocProc (x32 Version: 12.0.0.0)
Double Dummy Solver 9 (x32)
Elevated Installer (x32 Version: 2.1.13)
Epson Copy Utility 3.5 (x32 Version: 3.5.0.0)
Epson Event Manager (x32 Version: 2.30.01)
EPSON Perfection V30/V300 Photo Scanner Driver Update (x32)
EPSON Scan (x32)
Fax (x32 Version: 120.0.194.000)
Garmin Communicator Plugin x64 (Version: 4.0.3)
Garmin Express (x32 Version: 2.1.13)
Garmin Express Tray (x32 Version: 2.1.13)
Garmin Update Service (x32 Version: 2.1.13)
Genie Timeline (x32 Version: 3.0)
Google Earth (x32 Version: 7.1.1.1888)
Google Update Helper (x32 Version: 1.3.22.3)
GoToAssist 8.0.0.514 (x32)
GPBaseService2 (x32 Version: 130.0.371.000)
HP Customer Participation Program 12.0 (Version: 12.0)
HP Document Manager 2.0 (Version: 2.0)
HP Imaging Device Functions 12.0 (Version: 12.0)
HP Smart Web Printing (Version: 4.05)
HP Solution Center 13.0 (Version: 13.0)
HP Update (x32 Version: 5.002.008.001)
HPProductAssistant (x32 Version: 130.0.371.000)
HPSSupply (x32 Version: 120.0.194.000)
iCloud (Version: 2.1.2.8)
Integrated Webcam Driver (1.06.03.0309) (Version: 1.06.03.0309)
Intel® Graphics Media Accelerator Driver
iSEEK AnswerWorks English Runtime (x32 Version: 009.000.0002)
ITECIR (x32 Version: 1.9)
iTunes (Version: 11.1.3.8)
Java 7 Update 45 (x32 Version: 7.0.450)
Java Auto Updater (x32 Version: 2.1.9.8)
JavaFX 2.1.1 (x32 Version: 2.1.1)
JPEGmini (HKCU Version: 1.2.21.11)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
LaCie Desktop Manager 1.5.5 (Version: 1.5.5)
Live! Cam Avatar Creator (x32 Version: 4.6.2303.1)
Malwarebytes Anti-Malware version 1.75.0.1300 (x32 Version: 1.75.0.1300)
MarketResearch (x32 Version: 120.0.226.000)
McAfee AntiVirus Plus (x32 Version: 12.8.856)
Microsoft .NET Framework 1.1 (x32 Version: 1.1.4322)
Microsoft .NET Framework 1.1 (x32)
Microsoft .NET Framework 1.1 Security Update (KB2698023) (x32)
Microsoft .NET Framework 1.1 Security Update (KB2833941) (x32)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Default Manager (x32 Version: 2.0.69.0)
Microsoft Office 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Access MUI (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Access Setup Metadata MUI (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Excel MUI (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003)
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000)
Microsoft Office Outlook Connector (x32 Version: 14.0.5118.5000)
Microsoft Office Outlook MUI (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Professional Hybrid 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (Spanish) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proofing (English) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Publisher MUI (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Shared 64-bit MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Shared Setup Metadata MUI (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Word MUI (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Silverlight (x32 Version: 5.1.20913.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (Version: 8.0.51011)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Web Publishing Wizard 1.52 (x32)
MobileMe Control Panel (Version: 3.1.8.0)
MPM (x32 Version: 1.00.0000)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSVCSetup (x32 Version: 1.00.0000)
MSXML 4.0 SP2 (KB927978) (x32 Version: 4.20.9841.0)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
My Dell (Version: 3.4.6361.48)
Network64 (Version: 120.0.194.000)
Nikon Message Center 2 (x32 Version: 2.1.0)
Nikon Movie Editor (x32 Version: 2.3.1)
Nuance PDF Professional 5 (Version: 5.01.6400)
OCR Software by I.R.I.S. 12.0 (Version: 12.0)
Officejet Pro 8500 A909 Series (Version: 12.0)
Picasa 3 (x32 Version: 3.9)
Picture Control Utility (x32 Version: 1.2.1)
Picture Control Utility x64 (Version: 1.4.3)
PowerDVD DX (x32 Version: 8.2.5024)
ProductContext (x32 Version: 50.0.165.000)
Quickset (Version: 9.2.8)
QuickTime (x32 Version: 7.74.80.86)
RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0)
RealPlayer (x32 Version: 15.0.4)
RealUpgrade 1.1 (x32 Version: 1.1.0)
Roxio Creator Audio (x32 Version: 3.7.0)
Roxio Creator Copy (x32 Version: 3.7.0)
Roxio Creator Data (x32 Version: 3.7.0)
Roxio Creator DE (x32 Version: 10.1)
Roxio Creator DE (x32 Version: 3.7.0)
Roxio Creator Tools (x32 Version: 3.7.0)
Roxio Express Labeler 3 (x32 Version: 3.2.1)
Roxio Update Manager (x32 Version: 6.0.0)
Safari (x32 Version: 5.34.57.2)
Scan (x32 Version: 12.0.0.0)
Scansoft PDF Professional (x32)
Segoe UI (x32 Version: 15.4.2271.0615)
Shared C Run-time for x64 (Version: 10.0.0)
Shop for HP Supplies (Version: 12)
Skype™ 6.3 (x32 Version: 6.3.107)
SmartWebPrinting (x32 Version: 120.0.194.000)
SolutionCenter (x32 Version: 130.0.373.000)
Sound Blaster X-Fi MB (x32 Version: 1.0)
Spelling Dictionaries Support For Adobe Reader 9 (x32 Version: 9.0.0)
Status (x32 Version: 120.0.194.000)
The Print Shop 23 (x32 Version: 23.00)
The Right Track ® Software (x32 Version: 8.0 Freeware)
Toolbox (x32 Version: 120.0.194.000)
TrayApp (x32 Version: 120.0.194.000)
TurboTax 2009 (x32)
TurboTax 2009 WinPerFedFormset (x32 Version: 009.000.2163)
TurboTax 2009 WinPerReleaseEngine (x32 Version: 009.000.0328)
TurboTax 2009 WinPerTaxSupport (x32 Version: 009.000.0238)
TurboTax 2009 wmaiper (x32 Version: 009.000.0750)
TurboTax 2009 wnciper (x32 Version: 009.000.0717)
TurboTax 2009 wrapper (x32 Version: 009.000.0145)
TurboTax 2010 (x32)
TurboTax 2010 WinPerFedFormset (x32 Version: 010.000.4227)
TurboTax 2010 WinPerReleaseEngine (x32 Version: 010.000.0483)
TurboTax 2010 WinPerTaxSupport (x32 Version: 010.000.0214)
TurboTax 2010 wmaiper (x32 Version: 010.000.1264)
TurboTax 2010 wnciper (x32 Version: 010.000.1304)
TurboTax 2010 wrapper (x32 Version: 010.000.0157)
TurboTax 2011 (x32)
TurboTax 2011 WinPerFedFormset (x32 Version: 011.000.2999)
TurboTax 2011 WinPerReleaseEngine (x32 Version: 011.000.0474)
TurboTax 2011 WinPerTaxSupport (x32 Version: 011.000.0214)
TurboTax 2011 wnciper (x32 Version: 011.000.1545)
TurboTax 2011 wrapper (x32 Version: 011.000.0121)
TurboTax 2012 (x32 Version: 2012.0)
TurboTax 2012 WinPerFedFormset (x32 Version: 012.000.2013)
TurboTax 2012 WinPerReleaseEngine (x32 Version: 012.000.0451)
TurboTax 2012 WinPerTaxSupport (x32 Version: 012.000.0179)
TurboTax 2012 wnciper (x32 Version: 012.000.1314)
TurboTax 2012 wrapper (x32 Version: 012.000.0127)
UnloadSupport (x32 Version: 11.0.0)
Update for 2007 Microsoft Office System (KB967642) (x32)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (x32 Version: 3)
Update for Microsoft Office 2007 Help for Common Features (KB963673) (x32)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32)
Update for Microsoft Office Access 2007 Help (KB963663) (x32)
Update for Microsoft Office Excel 2007 Help (KB963678) (x32)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (x32)
Update for Microsoft Office Outlook 2007 Help (KB963677) (x32)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2827325) 32-Bit Edition (x32)
Update for Microsoft Office Powerpoint 2007 Help (KB963669) (x32)
Update for Microsoft Office Publisher 2007 Help (KB963667) (x32)
Update for Microsoft Office Script Editor Help (KB963671) (x32)
Update for Microsoft Office Word 2007 Help (KB963665) (x32)
Update Installer for WildTangent Games App (x32)
ViewNX 2 (Version: 2.3.1)
WebReg (x32 Version: 120.0.194.000)
WildTangent Games (x32 Version: 1.0.0.71)
WildTangent Games App (Dell Games) (x32 Version: 4.0.10.5)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3502.0922)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Messenger (x32 Version: 15.4.3502.0922)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3502.0922)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live Sync (x32 Version: 14.0.8089.726)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3502.0922)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
Wuala (HKCU Version: 1.0.391.0)
Wuala CBFS (x32 Version: 3.2.102.0)
Wuala OverlayIcons (x32 Version: 1.0.0.1)
Yahoo! Toolbar (x32)

==================== Restore Points =========================

21-10-2013 22:33:09 Scheduled Checkpoint
24-10-2013 21:20:57 Scheduled Checkpoint
25-10-2013 18:24:09 Scheduled Checkpoint
29-10-2013 15:50:50 Scheduled Checkpoint
31-10-2013 15:21:06 Scheduled Checkpoint
02-11-2013 15:44:55 Scheduled Checkpoint
03-11-2013 16:39:44 Scheduled Checkpoint
13-11-2013 20:23:51 Scheduled Checkpoint
17-11-2013 16:59:25 Scheduled Checkpoint
19-11-2013 17:32:02 Scheduled Checkpoint
20-11-2013 20:40:55 Scheduled Checkpoint
03-12-2013 15:36:42 Scheduled Checkpoint
04-12-2013 19:04:20 Scheduled Checkpoint
08-12-2013 00:44:45 Scheduled Checkpoint
09-12-2013 00:31:13 Scheduled Checkpoint
10-12-2013 00:53:25 Scheduled Checkpoint

==================== Hosts content: ==========================

2006-11-02 07:34 - 2013-09-18 15:50 - 00000855 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {0AD5C68C-0532-47BC-B665-0CB5D9D60624} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-08-09] (Google Inc.)
Task: {0AEAFAF6-F116-4A60-AFB4-C8B755A6E975} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {192DDA2D-5815-47B8-983F-65744FEEC03A} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {1E123692-28C0-48F6-B945-9AD5D10EFB3F} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\My Dell\uaclauncher.exe [2013-09-05] (PC-Doctor, Inc.)
Task: {1E845D16-00A3-4FA1-81EA-4EE326195F1E} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {254095AE-FB97-48EA-94A5-D8BF2AB79714} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\System32\RacAgent.exe [2008-01-20] (Microsoft Corporation)
Task: {5B4D229E-CEAA-45B2-89B4-8809E27568DD} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-505982271-2258123012-2390996991-1000 => C:\Program Files (x86)\Real\RealUpgrade\realupgrade.exe [2012-04-30] (RealNetworks, Inc.)
Task: {668BD7C8-C6F3-4EE0-960E-BE30E9C1D88A} - System32\Tasks\GoogleUpdateTaskMachineUA1cef45f5cb91205 => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-08-09] (Google Inc.)
Task: {7C638E5B-ECE5-4424-A7E5-2C913CA682E9} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {8165F5AB-FBD8-4B5E-9813-0523EB3297D0} - System32\Tasks\{BBB19DEC-C2A0-4187-AD51-9121F8535BFD} => C:\Program Files (x86)\Skype\\Phone\Skype.exe [2013-04-19] (Skype Technologies S.A.)
Task: {90DE7C69-C565-4D06-8377-A42A8D4A057F} - System32\Tasks\SystemToolsDailyTest => uaclauncher.exe
Task: {9C6B462E-FBDD-4F9F-BE6E-68537F7C8046} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-505982271-2258123012-2390996991-1000 => C:\Program Files (x86)\Real\RealUpgrade\realupgrade.exe [2012-04-30] (RealNetworks, Inc.)
Task: {9EAD258D-1962-4CB8-9560-1797FC83B89D} - System32\Tasks\RealCreateProcessScheduledTask484960S-1-5-21-505982271-2258123012-2390996991-1000 => C:\Program Files (x86)\Real\RealPlayer\realplay.exe [2012-06-01] (RealNetworks, Inc.)
Task: {AF52EDAB-D9CD-45E6-AF9D-95E832F11706} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-08] (Adobe Systems Incorporated)
Task: {CBFF0669-9088-445D-8B64-8F5EB2158870} - System32\Tasks\PCDEventLauncherTask => C:\Program Files\My Dell\sessionchecker.exe [2013-11-06] (PC-Doctor, Inc.)
Task: {D693E527-5D71-4BA5-889F-4F82C3A28949} - \Scheduled Update for Ask Toolbar No Task File
Task: {E91D6474-70CC-42BE-80FF-8BED8AF557ED} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\System32\gatherWirelessInfo.vbs [2008-01-20] ()
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cef45f5cb91205.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2012-09-10 09:29 - 2012-09-10 09:29 - 00063488 _____ () C:\Program Files\Genie9\Genie Timeline\XBalloonMsgDll.dll
2012-09-10 09:29 - 2012-09-10 09:29 - 00087040 _____ () C:\Program Files\Genie9\Genie Timeline\QueueManager.dll
2012-02-02 04:16 - 2012-02-02 04:16 - 00740864 _____ () C:\Program Files\Genie9\Genie Timeline\sqlite3.dll
2012-04-24 04:29 - 2012-04-24 04:29 - 00045568 _____ () C:\Program Files\Genie9\Genie Timeline\GSLogging.dll
2012-09-10 09:29 - 2012-09-10 09:29 - 00205824 _____ () C:\Program Files\Genie9\Genie Timeline\Settings.dll
2012-04-24 04:29 - 2012-04-24 04:29 - 00089600 _____ () C:\Program Files\Genie9\Genie Timeline\GSEncryption.dll
2012-09-10 09:29 - 2012-09-10 09:29 - 00488960 _____ () C:\Program Files\Genie9\Genie Timeline\GSIndexDB.dll
2012-04-24 04:29 - 2012-04-24 04:29 - 00011264 _____ () C:\Program Files\Genie9\Genie Timeline\RWLock.dll
2012-04-24 04:29 - 2012-04-24 04:29 - 00058368 _____ () C:\Program Files\Genie9\Genie Timeline\GSLibrariesManager.dll
2012-04-24 04:29 - 2012-04-24 04:29 - 00093696 _____ () C:\Program Files\Genie9\Genie Timeline\GSCurl.dll
2012-09-10 09:29 - 2012-09-10 09:29 - 00332800 _____ () C:\Program Files\Genie9\Genie Timeline\OnlineHandler.dll
2011-06-24 21:56 - 2011-06-24 21:56 - 00087328 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2011-06-24 21:56 - 2011-06-24 21:56 - 01241888 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2009-10-01 05:04 - 2009-07-16 10:58 - 00115952 _____ () C:\Program Files (x86)\Dell DataSafe Local Backup\PSTVdsDisk.dll
2009-10-01 05:04 - 2009-07-16 10:59 - 00128240 _____ () C:\Program Files (x86)\Dell DataSafe Local Backup\STLog.dll
2012-05-23 19:15 - 2006-08-08 14:54 - 00278528 _____ () C:\Program Files (x86)\Dell Photo AIO Printer 926\dlcxscw.dll
2012-05-23 19:15 - 2006-09-06 05:13 - 00073728 _____ () C:\Program Files (x86)\Dell Photo AIO Printer 926\dlcxcfg.dll
2012-05-23 19:15 - 2006-03-14 16:38 - 00143360 _____ () C:\Program Files (x86)\Dell Photo AIO Printer 926\dlcxdrec.dll
2009-11-13 15:15 - 2009-11-13 15:15 - 00275696 _____ () C:\Program Files (x86)\Dell DataSafe Online\SdbShared.dll
2009-04-09 16:29 - 2009-04-09 16:29 - 00058608 _____ () C:\Program Files (x86)\Dell DataSafe Online\BalloonWindow.dll
2009-11-13 15:15 - 2009-11-13 15:15 - 00095472 _____ () C:\Program Files (x86)\Dell DataSafe Online\SdbUI.dll
2009-11-13 15:15 - 2009-11-13 15:15 - 00152816 _____ () C:\Program Files (x86)\Dell DataSafe Online\SdbShared.XmlSerializers.dll
2009-11-13 15:15 - 2009-11-13 15:15 - 00017648 _____ () C:\Program Files (x86)\Dell DataSafe Online\cpputils.dll
2012-04-25 19:36 - 2009-02-27 16:39 - 00019968 _____ () C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\AcroTray.DEU
2012-04-25 19:36 - 2009-02-27 16:32 - 00020480 _____ () C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\AcroTray.FRA
2010-03-25 16:26 - 2010-03-25 16:26 - 00854016 _____ () C:\Windows\assembly\GAC_32\System.Data.SQLite\1.0.61.0__db937bc2d44ff139\System.Data.SQLite.dll
2010-03-25 16:26 - 2010-03-25 16:26 - 00471040 _____ () C:\Windows\assembly\GAC_MSIL\Intuit.Spc.Map.Reporter\5.0.104.0__7ce6deabcb36a8ea\Intuit.Spc.Map.Reporter.dll
2011-03-30 11:28 - 2011-03-30 11:28 - 00476520 _____ () C:\Windows\assembly\GAC_MSIL\Intuit.Spc.Map.Reporter\5.0.136.0__7ce6deabcb36a8ea\Intuit.Spc.Map.Reporter.dll

==================== Alternate Data Streams (whitelisted) =========

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\GoToAssist => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"

==================== Faulty Device Manager Devices =============

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft Tun Miniport Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunmp
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Photosmart D110 series
Description: Photosmart D110 series
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service:
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Deskjet F4500 series
Description: Deskjet F4500 series
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service:
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Photosmart 6510 series
Description: Photosmart 6510 series
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service:
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Officejet Pro 8500 A909a
Description: Officejet Pro 8500 A909a
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service:
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Officejet Pro 8500 A909a
Description: Officejet Pro 8500 A909a
Class Guid: {4d36e979-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service:
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

==================== Event log errors: =========================

Application errors:
==================
Error: (12/10/2013 08:31:52 AM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3.manifest.

Error: (12/10/2013 08:31:52 AM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3.manifest.

Error: (12/10/2013 08:27:00 AM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3.manifest.

Error: (12/10/2013 08:25:44 AM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3.manifest.

Error: (12/10/2013 08:25:39 AM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3.manifest.

Error: (12/09/2013 09:41:37 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3.manifest.

Error: (12/09/2013 07:56:54 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3.manifest.

Error: (12/09/2013 06:49:26 PM) (Source: AVLogEvent) (User: NT AUTHORITY)
Description: McShield crashed.
Error Code:c0000005

System errors:
=============
Error: (12/10/2013 08:53:56 AM) (Source: ACPI) (User: )
Description: : The embedded controller (EC) did not respond within the specified timeout period. This may indicate that there is an error in the EC hardware or firmware or that the BIOS is accessing the EC incorrectly. You should check with your computer manufacturer for an upgraded BIOS. In some situations, this error may cause the computer to function incorrectly.

Error: (12/10/2013 08:51:26 AM) (Source: ACPI) (User: )
Description: : The embedded controller (EC) did not respond within the specified timeout period. This may indicate that there is an error in the EC hardware or firmware or that the BIOS is accessing the EC incorrectly. You should check with your computer manufacturer for an upgraded BIOS. In some situations, this error may cause the computer to function incorrectly.

Error: (12/10/2013 08:46:26 AM) (Source: netbt) (User: )
Description: The name "PATANDBOB-PC :0" could not be registered on the interface with IP address 192.168.1.105.
The computer with the IP address 192.168.1.104 did not allow the name to be claimed by
this computer.

Error: (12/10/2013 08:36:19 AM) (Source: netbt) (User: )
Description: The name "PATANDBOB-PC :0" could not be registered on the interface with IP address 192.168.1.105.
The computer with the IP address 192.168.1.104 did not allow the name to be claimed by
this computer.

Error: (12/10/2013 08:30:32 AM) (Source: ACPI) (User: )
Description: : The embedded controller (EC) did not respond within the specified timeout period. This may indicate that there is an error in the EC hardware or firmware or that the BIOS is accessing the EC incorrectly. You should check with your computer manufacturer for an upgraded BIOS. In some situations, this error may cause the computer to function incorrectly.

Error: (12/10/2013 08:26:30 AM) (Source: netbt) (User: )
Description: The name "PATANDBOB-PC :0" could not be registered on the interface with IP address 192.168.1.105.
The computer with the IP address 192.168.1.104 did not allow the name to be claimed by
this computer.

Error: (12/09/2013 09:36:33 PM) (Source: netbt) (User: )
Description: The name "PATANDBOB-PC :0" could not be registered on the interface with IP address 192.168.1.105.
The computer with the IP address 192.168.1.104 did not allow the name to be claimed by
this computer.

Error: (12/09/2013 09:32:04 PM) (Source: ACPI) (User: )
Description: : The embedded controller (EC) did not respond within the specified timeout period. This may indicate that there is an error in the EC hardware or firmware or that the BIOS is accessing the EC incorrectly. You should check with your computer manufacturer for an upgraded BIOS. In some situations, this error may cause the computer to function incorrectly.

Error: (12/09/2013 09:26:40 PM) (Source: netbt) (User: )
Description: The name "PATANDBOB-PC :0" could not be registered on the interface with IP address 192.168.1.105.
The computer with the IP address 192.168.1.104 did not allow the name to be claimed by
this computer.

Error: (12/09/2013 09:23:56 PM) (Source: ACPI) (User: )
Description: : The embedded controller (EC) did not respond within the specified timeout period. This may indicate that there is an error in the EC hardware or firmware or that the BIOS is accessing the EC incorrectly. You should check with your computer manufacturer for an upgraded BIOS. In some situations, this error may cause the computer to function incorrectly.

Microsoft Office Sessions:
=========================
Error: (07/17/2013 03:40:58 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 39 seconds with 0 seconds of active time. This session ended with a crash.

Error: (02/01/2013 11:39:25 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 4 seconds with 0 seconds of active time. This session ended with a crash.

Error: (05/02/2012 08:11:53 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6607.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 8 seconds with 0 seconds of active time. This session ended with a crash.

Error: (09/01/2011 08:11:11 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6557.5001, Microsoft Office Version: 12.0.6425.1000. This session lasted 3 seconds with 0 seconds of active time. This session ended with a crash.

Error: (04/17/2011 10:18:26 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6550.5004, Microsoft Office Version: 12.0.6425.1000. This session lasted 51 seconds with 0 seconds of active time. This session ended with a crash.

Error: (02/04/2011 09:22:41 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 3, Application Name: Microsoft Office PowerPoint, Application Version: 12.0.6500.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 1 seconds with 0 seconds of active time. This session ended with a crash.

Error: (09/24/2010 04:29:08 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6539.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 660 seconds with 600 seconds of active time. This session ended with a crash.

Error: (04/11/2010 06:58:05 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6514.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 279 seconds with 120 seconds of active time. This session ended with a crash.

CodeIntegrity Errors:
===================================
Date: 2013-11-17 10:41:22.076
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_0fbe86f737e6a8d6\tcpip.sys because the set of per-page image hashes could not be found on the system.

Date: 2013-11-17 10:41:21.857
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_0fbe86f737e6a8d6\tcpip.sys because the set of per-page image hashes could not be found on the system.

Date: 2013-11-17 10:41:21.655
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_0fbe86f737e6a8d6\tcpip.sys because the set of per-page image hashes could not be found on the system.

Date: 2013-11-17 10:41:21.436
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_0fbe86f737e6a8d6\tcpip.sys because the set of per-page image hashes could not be found on the system.

Date: 2013-11-17 10:41:21.233
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_0fbe86f737e6a8d6\tcpip.sys because the set of per-page image hashes could not be found on the system.

Date: 2013-11-17 10:41:21.015
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_0fbe86f737e6a8d6\tcpip.sys because the set of per-page image hashes could not be found on the system.

Date: 2013-11-17 10:41:20.750
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22636_none_0fabe61737f42f96\tcpip.sys because the set of per-page image hashes could not be found on the system.

Date: 2013-11-17 10:41:20.502
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22636_none_0fabe61737f42f96\tcpip.sys because the set of per-page image hashes could not be found on the system.

Date: 2013-11-17 10:41:20.299
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22636_none_0fabe61737f42f96\tcpip.sys because the set of per-page image hashes could not be found on the system.

Date: 2013-11-17 10:41:20.080
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22636_none_0fabe61737f42f96\tcpip.sys because the set of per-page image hashes could not be found on the system.

==================== Memory info ===========================

Percentage of memory in use: 39%
Total physical RAM: 6075.98 MB
Available physical RAM: 3646.78 MB
Total Pagefile: 12266.98 MB
Available Pagefile: 9560.15 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:450.68 GB) (Free:239.9 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (RECOVERY) (Fixed) (Total:15 GB) (Free:4.7 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 466 GB) (Disk ID: 20000000)
Partition 1: (Not Active) - (Size=78 MB) - (Type=DE)
Partition 2: (Not Active) - (Size=15 GB) - (Type=07 NTFS)
Partition 3: (Active) - (Size=451 GB) - (Type=07 NTFS)

==================== End Of Log ============================

ReallyFreeSpirit · December 10, 2013

Downloaded TDSSkiller and ran scan. Box says zero threats Found, Neutralized, Quarantined, 442 objects, Details report link is blank.

Psychotic · December 10, 2013

System File Check

For Windows XP:

Press the Windows- and the R-key simultanously.
Within the text box that jus opened, write cmd and hit Enter.

For Windows Vista/7:

Press the Windows key to open the start menu.
Don´t highlight anything, just write cmd.
The start menu will offer you an entry named cmd.
Right click it and select "run as administrator"

Within the opening window, write the following:

sfc /scannow

(See the blank within).

Hit enter. Your system will be checked for damaged system files.
Tell me the result of that scan in here (as the tool produces no log).

ReallyFreeSpirit · December 10, 2013

Cmd box shows:

C:\Windows\System32>sfc scannow

"Beginning system scan. This process will take some time."

(Following message appeared almost immediately)

"There is a system repair pending which requires reboot to complete. Restart Windows and run sfc again."

I have not performed the suggested reboot.

A reboot was part of the "loop" I described in my original topic description. When I rebooted the messages indicated that updates were being configured, but when the restart occurs, no updates seem to be installed. I then get a message that "Windows Updates cannot be obtained. Restart", or some similar wording.

Will wait for your next guidance.

Psychotic · December 10, 2013

run this FixIt! from Microsoft: http://go.microsoft.com/?linkid=9830262

Tell me if the error persists.

ReallyFreeSpirit · December 10, 2013

I forgot to mention that I am running McAfee Antivirus Plus. When we started this process, I did not disable automatic updating and in the middle of the FRST run a message popped out that an update to McAfee had been installed. Don't know if this is important.

ReallyFreeSpirit · December 10, 2013

When I click on the fixit link, it asks whether I want to Open or Save.

What should I select and how do I continue?

Psychotic · December 10, 2013

just open it and follow the recommendations

ReallyFreeSpirit · December 10, 2013

Didn't like filetype of windowsupdatediagnostic.diagcab.

Went to web to locate something to open it. Lots of choices; didn't make one.

How to proceed?

Psychotic · December 10, 2013

Open it and select the option to run it with microsoft update

ReallyFreeSpirit · December 10, 2013

Sorry, but there doesn't seem to be a clear choice to run it with microsoft update.

When I go to the web service, I don't see a link to microsoft update, just ads to download software from various sources. That leads to scans by other software, and I don't know/trust these options, as I've been led down that path to buy their software.

If you have a clear choice of links, please let me know.

Psychotic · December 11, 2013

It seems that this fixIt is a bit complicated - I apologize!

Try this one: http://go.microsoft.com/?linkid=9767096&entrypointid=RNP&logsessionid=3131018042381234&eventseqno=1&buttonclickno=1

ReallyFreeSpirit · December 11, 2013

Ran this one.

Gave a box titled Windows Updates

A number of titles appeared, such as: Resolving Problems

Corrupt Patch Registry keys

Check the registry for Patch related problems

and Detecting additional problems.

It then recommended a Restart when this finished.

A box appeared that listed problems Not Fixed or Fixed

Not Fixed

Windows update error 0x8024402(2013-12-11-T-10_05_23A)

Problems installing recent updates

Fixed

Some security settings are missing or have been changed

Check for missing or corrupt files

Service registration is missing or corrupt

Problems installing recent updates

Corrupt Patch Registry keys

I have not done a restart, as recommended.

Next?

Psychotic · December 12, 2013

Restart and try to update.

ReallyFreeSpirit · December 12, 2013

Restarted, got same message (Do not turn off your computer, configuring updates), then when booted up, nothing was installed.

Tried to initiate Windows Update.

Message box:Restart your computer to install important updates.

Windows can't update important files and services while the system is using them. Save any open files and restart the computer, and then try to check for new updates. Option is to Restart.

Under the box are the following:

Most recent check for updates: Never

Updates were installed: Never

Will try restart one more time and report back on result.

ReallyFreeSpirit · December 12, 2013

Restarted, now there is no Windows Update icon on the right bottom taskbar. Will go to Control Panel to try an update.

Same result as previous message.

ReallyFreeSpirit · December 12, 2013

Just got another message (pinned to an icon that just appeared in the right lower taskbar) that I should restart to finish installing important updates. Selected postpone and then a reminder in 4 hours. When I leave the computer powered up overnight, I believe that this message automatically does a restart as a result of this message box. When I woke this morning, the login box was displayed, indicating that a restart had been initiated.

Psychotic · December 13, 2013

run windows updates and install the latest patches - tell me if that worked for you.

ReallyFreeSpirit · December 13, 2013

Ran Windows Updates twice from Control Panel.

First time I attempted to send a message here to you, and was interrupted with blue screen and dump.

Second time (after restart) got message box that has appeared multiple times:

Restart your computer to install important updates

Windows can't update important files and services while the system is using

them. Save any open files and restart the computer, and then try to check for

new updates.

Also, outside of box says:

Most recent check for updates: Never

Updates were installed: Never

This is the same result reported to you previously. Still not able to download Windows Updates, but

every time I do a restart, the message appears that it is configuring updates and I should not turn off the computer.

ReallyFreeSpirit · December 13, 2013

After sending the previous message, a box opened titled My Dell (Notebook is a Dell).

Box shows a list of items that are part of a Checkup.

The list at the left includes

Run PC Checkup (Perform Hardware Diagnostics)

System Tools (Access common Windows utilities)

Drive Space Manager (Visually manage your hard drive)

System History (View a calendar of system events)

Blue Screen Troubleshooter (Find recent blue screen errors on your system(

I don't know what triggered this, but am inclined to let it run and view what it reports.

Thoughts?

ReallyFreeSpirit · December 14, 2013

Tomorrow, I will search for the results of the My Dell Checkup that ran today.

When I returned this afternoon, there was nothing showing on the screen.

If a log was created, I will forward it to you.

Psychotic · December 14, 2013

Windows Repair (all-in-one)

Please download Windows Repair (all in one) from here.

Install the program then run it.

Go to step 2 and allow it to run Disk check.

Once that is done then go to step 3 and allow it to run SFC by clicking Do it

On the Start Repairs tab, click Start.
Within the opening window, hit unselect all.
Check only the following:

Reset Registry Permissions
Reset File Permissions
Register System Files
Repair Windows Firewall
Repair Windows Updates

then click on Start

DON'T use the computer while each scan is in progress.

Restart may be needed to finish the repair procedure.

Let me know how that worked out for you.

Can’t run Windows Update or MBAM Full Scan

Recommended Posts

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Recently Browsing 0 members

Important Information