computer trying to contact 162.210.192.21 every few minutes

haghild · January 2, 2014

DDS (Ver_2012-11-20.01) - NTFS_AMD64

Internet Explorer: 11.0.9600.16428

Run by Hagen at 13:40:24 on 2014-01-02

Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.4004.1579 [GMT -8:00]

.

AV: avast! Internet Security *Enabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

SP: avast! Internet Security *Enabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

FW: avast! Internet Security *Enabled* {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}

.

============== Running Processes ===============

.

C:\windows\system32\lsm.exe

C:\windows\system32\svchost.exe -k DcomLaunch

C:\windows\system32\svchost.exe -k RPCSS

C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\windows\system32\svchost.exe -k LocalService

C:\windows\system32\svchost.exe -k netsvcs

C:\Program Files\IDT\WDM\STacSV64.exe

C:\windows\system32\svchost.exe -k NetworkService

C:\windows\system32\WLANExt.exe

C:\Program Files\AVAST Software\Avast\AvastSvc.exe

C:\Program Files\AVAST Software\Avast\afwServ.exe

C:\windows\System32\spoolsv.exe

C:\windows\system32\svchost.exe -k LocalServiceNoNetwork

C:\Program Files\IDT\WDM\AESTSr64.exe

C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe

C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\adminservice.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\windows\system32\rundll32.exe

C:\windows\SysWOW64\rundll32.exe

C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\Ath_CoexAgent.exe

C:\Program Files (x86)\Dell Wireless\Ath_WlanAgent.exe

C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE

C:\windows\system32\SearchIndexer.exe

C:\windows\system32\svchost.exe -k bthsvcs

C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe

C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

C:\windows\System32\svchost.exe -k secsvcs

C:\Program Files\Windows Media Player\wmpnetwk.exe

C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

C:\windows\system32\taskhost.exe

C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

C:\windows\system32\Dwm.exe

C:\windows\Explorer.EXE

C:\Windows\System32\igfxpers.exe

C:\Windows\System32\igfxtray.exe

C:\Windows\System32\hkcmd.exe

C:\Program Files\IDT\WDM\sttray64.exe

C:\Program Files\Dell\QuickSet\quickset.exe

C:\Program Files\DellTPad\Apoint.exe

C:\windows\system32\wbem\wmiprvse.exe

C:\Users\Hagen\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe

C:\Users\Hagen\AppData\Local\Facebook\Update\FacebookUpdate.exe

C:\Program Files\DellTPad\ApMsgFwd.exe

C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe

C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe

C:\Program Files\DellTPad\Apntex.exe

C:\Program Files\DellTPad\HidFind.exe

C:\Program Files\AVAST Software\Avast\AvastUI.exe

C:\Users\Hagen\AppData\Local\VNT\vntldr.exe

C:\windows\System32\svchost.exe -k LocalServicePeerNet

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE

C:\windows\system32\Macromed\Flash\FlashUtil64_11_9_900_170_ActiveX.exe

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\windows\system32\taskeng.exe

C:\windows\system32\wbem\wmiprvse.exe

C:\windows\System32\cscript.exe

.

============== Pseudo HJT Report ===============

.

uURLSearchHooks: NCH EN Toolbar: {37483b40-c254-4a72-bda4-22ee90182c1e} - C:\Program Files (x86)\NCH_EN\prxtbNCH_.dll

mURLSearchHooks: NCH EN Toolbar: {37483b40-c254-4a72-bda4-22ee90182c1e} - C:\Program Files (x86)\NCH_EN\prxtbNCH_.dll

mWinlogon: Userinit = userinit.exe,

BHO: avast! Online Security: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll

TB: NCH EN Toolbar: {37483B40-C254-4A72-BDA4-22EE90182C1E} - C:\Program Files (x86)\NCH_EN\prxtbNCH_.dll

TB: avast! Online Security: {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll

EB: HP Smart Web Printing: {555D4D79-4BD2-4094-A395-CFC534424A05} -

uRun: [spotify Web Helper] "C:\Users\Hagen\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"

uRun: [Google Update] "C:\Users\Hagen\AppData\Local\Google\Update\GoogleUpdate.exe" /c

uRun: [Facebook Update] "C:\Users\Hagen\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver

mRun: [AccuWeatherWidget] "C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe" "C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\start.umj" --startup

mRun: [iAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe

mRun: [Dell Registration] C:\Program Files (x86)\System Registration\prodreg.exe /boot

mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"

mRun: [ApnTBMon] "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe"

mRun: [VNT] C:\Program Files (x86)\VNT\vntldr.exe

mRun: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui

mPolicies-Explorer: NoActiveDesktop = dword:1

mPolicies-Explorer: NoActiveDesktopChanges = dword:1

mPolicies-System: ConsentPromptBehaviorAdmin = dword:5

mPolicies-System: ConsentPromptBehaviorUser = dword:3

mPolicies-System: EnableUIADesktopToggle = dword:0

IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000

IE: Se&nd to OneNote - C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105

IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll

IE: {7815BE26-237D-41A8-A98F-F7BD75F71086} - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\IEPlugIn.dll

IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

IE: {DDE87865-83C5-48c4-8357-2F5B1AA84522} - {DDE87865-83C5-48c4-8357-2F5B1AA84522} -

Trusted Zone: clonewarsadventures.com

Trusted Zone: freerealms.com

Trusted Zone: soe.com

Trusted Zone: sony.com

TCP: NameServer = 192.168.20.1

TCP: Interfaces\{9DEB627B-0431-403E-BF24-FA1233703AE7} : DHCPNameServer = 192.168.20.1

TCP: Interfaces\{9DEB627B-0431-403E-BF24-FA1233703AE7}\377796D6D65627 : DHCPNameServer = 192.168.2.1

TCP: Interfaces\{9DEB627B-0431-403E-BF24-FA1233703AE7}\5454D275C414E4 : DHCPNameServer = 192.168.241.222 192.168.244.222

TCP: Interfaces\{9DEB627B-0431-403E-BF24-FA1233703AE7}\84F4D454D283130323 : DHCPNameServer = 75.75.75.75 75.75.76.76

TCP: Interfaces\{9DEB627B-0431-403E-BF24-FA1233703AE7}\C696E6B6379737 : DHCPNameServer = 192.168.10.1

TCP: Interfaces\{9DEB627B-0431-403E-BF24-FA1233703AE7}\D4363416272716E60275966496 : DHCPNameServer = 207.14.235.234 205.171.3.65 205.171.2.65

TCP: Interfaces\{9DEB627B-0431-403E-BF24-FA1233703AE7}\D49636861656C6026416D696C6970284F6D65602E4564777F627B6 : DHCPNameServer = 192.168.0.1

TCP: Interfaces\{9DEB627B-0431-403E-BF24-FA1233703AE7}\E4544574541425 : DHCPNameServer = 192.168.10.1

Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll

Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

AppInit_DLLs= c:\progra~2\gssupp~1\browsafe.dll

SSODL: WebCheck - <orphaned>

mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome

x64-BHO: avast! Online Security: {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll

x64-BHO: avast! Online Security: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll

x64-BHO: ChheapMe: {8EA156F4-D3C6-8045-FB48-4AAA52CC03D3} -

x64-BHO: Fun22Saave: {C0B3B33C-25F2-9ED2-07FF-B7614464B10A} -

x64-TB: avast! Online Security: {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll

x64-TB: avast! Online Security: {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll

x64-Run: [Persistence] C:\windows\System32\igfxpers.exe

x64-Run: [igfxTray] C:\windows\System32\igfxtray.exe

x64-Run: [HotKeysCmds] C:\windows\System32\hkcmd.exe

x64-Run: [sysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe

x64-Run: [QuickSet] C:\Program Files\Dell\QuickSet\QuickSet.exe

x64-Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe

x64-IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll

x64-IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

x64-IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll

x64-Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

x64-Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll

x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>

x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>

x64-Notify: igfxcui - igfxdev.dll

x64-SSODL: WebCheck - <orphaned>

.

============= SERVICES / DRIVERS ===============

.

R0 aswRvrt;avast! Revert;C:\windows\System32\drivers\aswRvrt.sys [2013-3-6 65776]

R0 aswVmm;avast! VM Monitor;C:\windows\System32\drivers\aswVmm.sys [2013-3-6 207904]

R1 aswKbd;aswKbd;C:\windows\System32\drivers\aswKbd.sys [2012-12-4 28184]

R1 aswNdisFlt;Avast! Firewall Driver;C:\windows\System32\drivers\aswNdisFlt.sys [2013-3-6 439648]

R1 aswSnx;aswSnx;C:\windows\System32\drivers\aswSnx.sys [2012-12-4 1034464]

R1 aswSP;aswSP;C:\windows\System32\drivers\aswSP.sys [2012-12-4 422216]

R2 AESTFilters;Andrea ST Filters Service;C:\Program Files\IDT\WDM\AESTSr64.exe [2012-5-20 89600]

R2 APNMCP;Ask Update Service;C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [2013-12-16 166352]

R2 aswMonFlt;aswMonFlt;C:\windows\System32\drivers\aswMonFlt.sys [2012-12-4 78648]

R2 AtherosSvc;AtherosSvc;C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AdminService.exe [2012-3-8 107648]

R2 avast! Antivirus;avast! Antivirus;C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-1-1 50344]

R2 avast! Firewall;avast! Firewall;C:\Program Files\AVAST Software\Avast\afwServ.exe [2014-1-1 113704]

R2 cvhsvc;Client Virtualization Handler;C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE [2013-4-22 822504]

R2 e9f32388;GS Supporter;C:\windows\System32\rundll32.exe [2009-7-13 45568]

R2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [2012-5-20 13336]

R2 MBAMScheduler;MBAMScheduler;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2014-1-1 418376]

R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2014-1-1 701512]

R2 sftlist;Application Virtualization Client;C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2013-6-26 523944]

R2 UNS;Intel® Management and Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2012-5-20 2656280]

R2 ZAtheros Bt&Wlan Coex Agent;ZAtheros Bt&Wlan Coex Agent;C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\Ath_CoexAgent.exe [2012-3-8 159360]

R2 ZAtheros Wlan Agent;ZAtheros Wlan Agent;C:\Program Files (x86)\Dell Wireless\Ath_WlanAgent.exe [2012-5-20 77824]

R3 aswStm;aswStm;C:\windows\System32\drivers\aswstm.sys [2014-1-1 79672]

R3 AthBTPort;Atheros Virtual Bluetooth Class;C:\windows\System32\drivers\btath_flt.sys [2012-3-8 36480]

R3 BTATH_A2DP;Bluetooth A2DP Audio Driver;C:\windows\System32\drivers\btath_a2dp.sys [2012-3-8 340096]

R3 btath_avdt;Atheros Bluetooth AVDT Service;C:\windows\System32\drivers\btath_avdt.sys [2012-3-8 111232]

R3 BTATH_BUS;Atheros Bluetooth Bus;C:\windows\System32\drivers\btath_bus.sys [2012-3-8 30848]

R3 BTATH_HCRP;Bluetooth HCRP Server driver;C:\windows\System32\drivers\btath_hcrp.sys [2012-3-8 168064]

R3 BTATH_LWFLT;Bluetooth LWFLT Device;C:\windows\System32\drivers\btath_lwflt.sys [2012-3-8 68736]

R3 BTATH_RCP;Bluetooth AVRCP Device;C:\windows\System32\drivers\btath_rcp.sys [2012-3-8 281472]

R3 BtFilter;BtFilter;C:\windows\System32\drivers\btfilter.sys [2012-3-8 551552]

R3 CtClsFlt;Creative Camera Class Upper Filter Driver;C:\windows\System32\drivers\CtClsFlt.sys [2012-5-20 176096]

R3 IntcDAud;Intel® Display Audio;C:\windows\System32\drivers\IntcDAud.sys [2012-5-20 317440]

R3 MBAMProtector;MBAMProtector;C:\windows\System32\drivers\mbam.sys [2014-1-1 25928]

R3 RTL8167;Realtek 8167 NT Driver;C:\windows\System32\drivers\Rt64win7.sys [2012-5-20 533096]

R3 Sftfs;Sftfs;C:\windows\System32\drivers\Sftfslh.sys [2013-6-26 767144]

R3 Sftplay;Sftplay;C:\windows\System32\drivers\Sftplaylh.sys [2013-6-26 273576]

R3 Sftredir;Sftredir;C:\windows\System32\drivers\Sftredirlh.sys [2013-6-26 28840]

R3 Sftvol;Sftvol;C:\windows\System32\drivers\Sftvollh.sys [2013-6-26 23208]

R3 sftvsa;Application Virtualization Service Agent;C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2013-6-26 207528]

R3 voxaldriver;Voxal Filter Driver 2.00.00;C:\windows\System32\drivers\voxaldriverx64.sys [2013-1-12 32024]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]

S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-9-5 171680]

S3 IEEtwCollectorService;Internet Explorer ETW Collector Service;C:\windows\System32\ieetwcollector.exe [2013-12-11 111616]

S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;C:\windows\System32\drivers\RtsUStor.sys [2012-5-20 250984]

S3 TsUsbFlt;TsUsbFlt;C:\windows\System32\drivers\TsUsbFlt.sys [2010-11-20 59392]

S3 TsUsbGD;Remote Desktop Generic USB Device;C:\windows\System32\drivers\TsUsbGD.sys [2010-11-20 31232]

S3 USBAAPL64;Apple Mobile USB Driver;C:\windows\System32\drivers\usbaapl64.sys [2012-12-13 54784]

S3 WatAdminSvc;Windows Activation Technologies Service;C:\windows\System32\Wat\WatAdminSvc.exe [2012-12-25 1255736]

S4 DellDigitalDelivery;Dell Digital Delivery Service;C:\Program Files (x86)\Dell Digital Delivery\DeliveryService.exe [2012-3-8 166912]

S4 NAUpdate;Nero Update;C:\Program Files (x86)\Nero\Update\NASvc.exe [2011-11-25 687400]

S4 NOBU;Dell DataSafe Online;C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe [2010-8-25 2823000]

S4 SftService;SoftThinks Agent Service;C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe [2012-5-20 1695040]

S4 Skype C2C Service;Skype C2C Service;C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2013-3-19 3289208]

S4 wlcrasvc;Windows Live Mesh remote connections service;C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-9-22 57184]

.

=============== Created Last 30 ================

.

2014-01-02 15:30:01 75888 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{C39C323E-62DE-48F1-9717-E3C0E9625EC3}\offreg.dll

2014-01-02 05:40:18 -------- d-----w- C:\Users\Hagen\AppData\Roaming\Malwarebytes

2014-01-02 05:40:11 -------- d-----w- C:\ProgramData\Malwarebytes

2014-01-02 05:40:10 25928 ----a-w- C:\windows\System32\drivers\mbam.sys

2014-01-02 05:40:10 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware

2014-01-02 05:18:58 -------- d-----w- C:\Users\Hagen\AppData\Roaming\AVAST Software

2014-01-02 02:08:09 82744 ----a-w- C:\windows\System32\drivers\aswstm.sys.1388676860

2014-01-02 02:08:09 79672 ----a-w- C:\windows\System32\drivers\aswstm.sys

2013-12-31 20:49:31 10315576 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{C39C323E-62DE-48F1-9717-E3C0E9625EC3}\mpengine.dll

2013-12-30 08:26:28 -------- d-----w- C:\ProgramData\ChheapMe

2013-12-30 08:26:27 -------- d-----w- C:\ProgramData\fdklbhmhchijodciienjabcgagmcmfkk

2013-12-30 08:26:20 -------- d-----w- C:\Users\Hagen\AppData\Local\Packages

2013-12-30 08:26:13 -------- d-----w- C:\ProgramData\4d09ce8d5400296d

2013-12-30 08:26:06 -------- d-----w- C:\ProgramData\Fun22Saave

2013-12-29 03:10:51 -------- d-----w- C:\ProgramData\QuickSet

2013-12-29 03:10:15 -------- d-----w- C:\Program Files (x86)\GS Supporter

2013-12-29 03:08:04 -------- d-----w- C:\ProgramData\InstallMate

2013-12-12 06:02:57 167424 ----a-w- C:\Program Files\Windows Media Player\wmplayer.exe

2013-12-12 06:02:57 164864 ----a-w- C:\Program Files (x86)\Windows Media Player\wmplayer.exe

2013-12-12 06:02:56 12625920 ----a-w- C:\windows\System32\wmploc.DLL

2013-12-12 06:02:55 12625408 ----a-w- C:\windows\SysWow64\wmploc.DLL

2013-12-12 04:52:54 335360 ----a-w- C:\windows\System32\msieftp.dll

.

==================== Find3M ====================

.

2014-01-02 07:20:43 71048 ----a-w- C:\windows\SysWow64\FlashPlayerCPLApp.cpl

2014-01-02 07:20:43 692616 ----a-w- C:\windows\SysWow64\FlashPlayerApp.exe

2014-01-02 02:07:51 78648 ----a-w- C:\windows\System32\drivers\aswMonFlt.sys

2014-01-02 02:07:51 65776 ----a-w- C:\windows\System32\drivers\aswRvrt.sys

2014-01-02 02:07:51 207904 ----a-w- C:\windows\System32\drivers\aswVmm.sys

2014-01-02 02:07:51 1034464 ----a-w- C:\windows\System32\drivers\aswSnx.sys

2014-01-02 02:07:50 92544 ----a-w- C:\windows\System32\drivers\aswRdr2.sys

2014-01-02 02:07:49 43152 ----a-w- C:\windows\avastSS.scr

2014-01-02 02:07:39 28184 ----a-w- C:\windows\System32\drivers\aswKbd.sys

2014-01-02 02:07:33 439648 ----a-w- C:\windows\System32\drivers\aswNdisFlt.sys

2013-12-19 13:11:26 270824 ----a-w- C:\windows\System32\drivers\aswNdis2.sys

2013-12-19 13:11:24 131232 ----a-w- C:\windows\System32\drivers\aswFW.sys

2013-12-01 08:53:53 0 ----a-w- C:\windows\SysWow64\shoD39.tmp

2013-11-26 10:19:07 2724864 ----a-w- C:\windows\System32\mshtml.tlb

2013-11-26 10:18:23 4096 ----a-w- C:\windows\System32\ieetwcollectorres.dll

2013-11-26 09:48:07 66048 ----a-w- C:\windows\System32\iesetup.dll

2013-11-26 09:46:25 48640 ----a-w- C:\windows\System32\ieetwproxystub.dll

2013-11-26 09:23:02 2724864 ----a-w- C:\windows\SysWow64\mshtml.tlb

2013-11-26 09:18:39 139264 ----a-w- C:\windows\System32\ieUnatt.exe

2013-11-26 09:18:09 111616 ----a-w- C:\windows\System32\ieetwcollector.exe

2013-11-26 09:16:57 708608 ----a-w- C:\windows\System32\jscript9diag.dll

2013-11-26 08:35:02 5769216 ----a-w- C:\windows\System32\jscript9.dll

2013-11-26 08:28:16 553472 ----a-w- C:\windows\SysWow64\jscript9diag.dll

2013-11-26 08:16:12 4243968 ----a-w- C:\windows\SysWow64\jscript9.dll

2013-11-26 08:02:16 1995264 ----a-w- C:\windows\System32\inetcpl.cpl

2013-11-26 07:32:06 1928192 ----a-w- C:\windows\SysWow64\inetcpl.cpl

2013-11-26 07:07:57 2334208 ----a-w- C:\windows\System32\wininet.dll

2013-11-26 06:33:33 1820160 ----a-w- C:\windows\SysWow64\wininet.dll

2013-11-23 18:26:20 417792 ----a-w- C:\windows\SysWow64\WMPhoto.dll

2013-11-23 17:47:34 465920 ----a-w- C:\windows\System32\WMPhoto.dll

2013-11-19 11:33:38 267936 ------w- C:\windows\System32\MpSigStub.exe

2013-11-18 05:53:46 0 ----a-w- C:\windows\SysWow64\shoB834.tmp

2013-11-17 08:55:05 0 ----a-w- C:\windows\SysWow64\sho6776.tmp

2013-11-12 02:23:09 2048 ----a-w- C:\windows\System32\tzres.dll

2013-11-12 02:07:29 2048 ----a-w- C:\windows\SysWow64\tzres.dll

2013-10-30 02:19:52 301568 ----a-w- C:\windows\SysWow64\msieftp.dll

2013-10-30 01:24:31 3155968 ----a-w- C:\windows\System32\win32k.sys

2013-10-19 02:18:57 81408 ----a-w- C:\windows\System32\imagehlp.dll

2013-10-19 01:36:59 159232 ----a-w- C:\windows\SysWow64\imagehlp.dll

2013-10-12 02:32:04 150016 ----a-w- C:\windows\System32\wshom.ocx

2013-10-12 02:31:04 202752 ----a-w- C:\windows\System32\scrrun.dll

2013-10-12 02:30:42 830464 ----a-w- C:\windows\System32\nshwfp.dll

2013-10-12 02:29:21 859648 ----a-w- C:\windows\System32\IKEEXT.DLL

2013-10-12 02:29:08 324096 ----a-w- C:\windows\System32\FWPUCLNT.DLL

2013-10-12 02:04:36 121856 ----a-w- C:\windows\SysWow64\wshom.ocx

2013-10-12 02:03:31 163840 ----a-w- C:\windows\SysWow64\scrrun.dll

2013-10-12 02:03:08 656896 ----a-w- C:\windows\SysWow64\nshwfp.dll

2013-10-12 02:01:25 216576 ----a-w- C:\windows\SysWow64\FWPUCLNT.DLL

2013-10-12 01:33:39 156160 ----a-w- C:\windows\System32\cscript.exe

2013-10-12 01:33:26 168960 ----a-w- C:\windows\System32\wscript.exe

2013-10-12 01:15:48 141824 ----a-w- C:\windows\SysWow64\wscript.exe

2013-10-12 01:15:48 126976 ----a-w- C:\windows\SysWow64\cscript.exe

2013-10-09 05:08:06 0 ----a-w- C:\windows\SysWow64\sho2034.tmp

2013-10-05 20:25:35 1474048 ----a-w- C:\windows\System32\crypt32.dll

2013-10-05 19:57:25 1168384 ----a-w- C:\windows\SysWow64\crypt32.dll

.

============= FINISH: 13:41:15.77 ===============

.

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

.

DDS (Ver_2012-11-20.01)

.

Microsoft Windows 7 Home Premium

Boot Device: \Device\HarddiskVolume2

Install Date: 12/4/2012 5:45:36 PM

System Uptime: 1/2/2014 8:28:35 AM (5 hours ago)

.

Motherboard: Dell Inc. | | 01HXXJ

Processor: Intel® Core i3-2370M CPU @ 2.40GHz | CPU 1 | 2400/100mhz

.

==== Disk Partitions =========================

.

C: is FIXED (NTFS) - 446 GiB total, 291.854 GiB free.

D: is CDROM ()

.

==== Disabled Device Manager Items =============

.

Class GUID:

Description: HP LaserJet 1022n

Device ID: ROOT\MULTIFUNCTION\0019

Manufacturer:

Name: HP LaserJet 1022n

PNP Device ID: ROOT\MULTIFUNCTION\0019

Service:

.

Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}

Description: avast! Firewall NDIS Filter Miniport

Device ID: ROOT\SW_ASWNDISMP\0000

Manufacturer: ALWIL Software

Name: avast! Firewall NDIS Filter Miniport

PNP Device ID: ROOT\SW_ASWNDISMP\0000

Service: aswNdis

.

Class GUID:

Description: HP LaserJet 1022n

Device ID: ROOT\MULTIFUNCTION\0020

Manufacturer:

Name: HP LaserJet 1022n

PNP Device ID: ROOT\MULTIFUNCTION\0020

Service:

.

Class GUID:

Description: HP LaserJet 1022n

Device ID: ROOT\MULTIFUNCTION\0021

Manufacturer:

Name: HP LaserJet 1022n

PNP Device ID: ROOT\MULTIFUNCTION\0021

Service:

.

Class GUID:

Description: HP LaserJet 1022n

Device ID: ROOT\MULTIFUNCTION\0001

Manufacturer:

Name: HP LaserJet 1022n

PNP Device ID: ROOT\MULTIFUNCTION\0001

Service:

.

Class GUID:

Description: HP LaserJet P2015 Series

Device ID: ROOT\MULTIFUNCTION\0022

Manufacturer:

Name: HP LaserJet P2015 Series

PNP Device ID: ROOT\MULTIFUNCTION\0022

Service:

.

Class GUID:

Description: HP LaserJet 1022n

Device ID: ROOT\MULTIFUNCTION\0002

Manufacturer:

Name: HP LaserJet 1022n

PNP Device ID: ROOT\MULTIFUNCTION\0002

Service:

.

Class GUID:

Description: HP LaserJet 1022n

Device ID: ROOT\MULTIFUNCTION\0023

Manufacturer:

Name: HP LaserJet 1022n

PNP Device ID: ROOT\MULTIFUNCTION\0023

Service:

.

Class GUID:

Description: HP LaserJet 1022n

Device ID: ROOT\MULTIFUNCTION\0003

Manufacturer:

Name: HP LaserJet 1022n

PNP Device ID: ROOT\MULTIFUNCTION\0003

Service:

.

Class GUID:

Description: HP LaserJet 1022n

Device ID: ROOT\MULTIFUNCTION\0027

Manufacturer:

Name: HP LaserJet 1022n

PNP Device ID: ROOT\MULTIFUNCTION\0027

Service:

.

Class GUID:

Description: HP LaserJet 1022n

Device ID: ROOT\MULTIFUNCTION\0004

Manufacturer:

Name: HP LaserJet 1022n

PNP Device ID: ROOT\MULTIFUNCTION\0004

Service:

.

Class GUID:

Description: HP LaserJet 1022n

Device ID: ROOT\MULTIFUNCTION\0028

Manufacturer:

Name: HP LaserJet 1022n

PNP Device ID: ROOT\MULTIFUNCTION\0028

Service:

.

Class GUID:

Description: HP LaserJet 1022n

Device ID: ROOT\MULTIFUNCTION\0005

Manufacturer:

Name: HP LaserJet 1022n

PNP Device ID: ROOT\MULTIFUNCTION\0005

Service:

.

Class GUID:

Description: HP LaserJet 1022n

Device ID: ROOT\MULTIFUNCTION\0030

Manufacturer:

Name: HP LaserJet 1022n

PNP Device ID: ROOT\MULTIFUNCTION\0030

Service:

.

Class GUID:

Description: HP LaserJet 1022n

Device ID: ROOT\MULTIFUNCTION\0006

Manufacturer:

Name: HP LaserJet 1022n

PNP Device ID: ROOT\MULTIFUNCTION\0006

Service:

.

Class GUID:

Description: HP LaserJet 9000 Series

Device ID: ROOT\MULTIFUNCTION\0031

Manufacturer:

Name: HP LaserJet 9000 Series

PNP Device ID: ROOT\MULTIFUNCTION\0031

Service:

.

Class GUID:

Description: HP LaserJet 1022n

Device ID: ROOT\MULTIFUNCTION\0007

Manufacturer:

Name: HP LaserJet 1022n

PNP Device ID: ROOT\MULTIFUNCTION\0007

Service:

.

Class GUID:

Description: HP LaserJet 1022n

Device ID: ROOT\MULTIFUNCTION\0032

Manufacturer:

Name: HP LaserJet 1022n

PNP Device ID: ROOT\MULTIFUNCTION\0032

Service:

.

Class GUID:

Description: HP LaserJet 1022n

Device ID: ROOT\MULTIFUNCTION\0008

Manufacturer:

Name: HP LaserJet 1022n

PNP Device ID: ROOT\MULTIFUNCTION\0008

Service:

.

Class GUID:

Description: HP LaserJet 1022n

Device ID: ROOT\MULTIFUNCTION\0036

Manufacturer:

Name: HP LaserJet 1022n

PNP Device ID: ROOT\MULTIFUNCTION\0036

Service:

.

Class GUID:

Description: HP LaserJet 1022n

Device ID: ROOT\MULTIFUNCTION\0009

Manufacturer:

Name: HP LaserJet 1022n

PNP Device ID: ROOT\MULTIFUNCTION\0009

Service:

.

Class GUID:

Description: HP LaserJet 9000 Series

Device ID: ROOT\MULTIFUNCTION\0037

Manufacturer:

Name: HP LaserJet 9000 Series

PNP Device ID: ROOT\MULTIFUNCTION\0037

Service:

.

Class GUID:

Description: HP LaserJet 1022n

Device ID: ROOT\MULTIFUNCTION\0010

Manufacturer:

Name: HP LaserJet 1022n

PNP Device ID: ROOT\MULTIFUNCTION\0010

Service:

.

Class GUID:

Description: HP LaserJet 1022n

Device ID: ROOT\MULTIFUNCTION\0039

Manufacturer:

Name: HP LaserJet 1022n

PNP Device ID: ROOT\MULTIFUNCTION\0039

Service:

.

Class GUID:

Description: HP LaserJet 1022n

Device ID: ROOT\MULTIFUNCTION\0011

Manufacturer:

Name: HP LaserJet 1022n

PNP Device ID: ROOT\MULTIFUNCTION\0011

Service:

.

Class GUID:

Description: HP LaserJet 1022n

Device ID: ROOT\MULTIFUNCTION\0040

Manufacturer:

Name: HP LaserJet 1022n

PNP Device ID: ROOT\MULTIFUNCTION\0040

Service:

.

Class GUID:

Description: HP LaserJet 1022n

Device ID: ROOT\MULTIFUNCTION\0012

Manufacturer:

Name: HP LaserJet 1022n

PNP Device ID: ROOT\MULTIFUNCTION\0012

Service:

.

Class GUID:

Description: HP LaserJet 1022n

Device ID: ROOT\MULTIFUNCTION\0041

Manufacturer:

Name: HP LaserJet 1022n

PNP Device ID: ROOT\MULTIFUNCTION\0041

Service:

.

Class GUID:

Description: HP LaserJet 1022n

Device ID: ROOT\MULTIFUNCTION\0013

Manufacturer:

Name: HP LaserJet 1022n

PNP Device ID: ROOT\MULTIFUNCTION\0013

Service:

.

Class GUID:

Description: HP LaserJet 1022n

Device ID: ROOT\MULTIFUNCTION\0042

Manufacturer:

Name: HP LaserJet 1022n

PNP Device ID: ROOT\MULTIFUNCTION\0042

Service:

.

Class GUID:

Description: HP LaserJet 1022n

Device ID: ROOT\MULTIFUNCTION\0014

Manufacturer:

Name: HP LaserJet 1022n

PNP Device ID: ROOT\MULTIFUNCTION\0014

Service:

.

Class GUID:

Description: HP LaserJet 1022n

Device ID: ROOT\MULTIFUNCTION\0043

Manufacturer:

Name: HP LaserJet 1022n

PNP Device ID: ROOT\MULTIFUNCTION\0043

Service:

.

Class GUID:

Description: HP LaserJet 1022n

Device ID: ROOT\MULTIFUNCTION\0015

Manufacturer:

Name: HP LaserJet 1022n

PNP Device ID: ROOT\MULTIFUNCTION\0015

Service:

.

Class GUID:

Description: HP LaserJet 1022n

Device ID: ROOT\MULTIFUNCTION\0044

Manufacturer:

Name: HP LaserJet 1022n

PNP Device ID: ROOT\MULTIFUNCTION\0044

Service:

.

Class GUID:

Description: HP LaserJet 1022n

Device ID: ROOT\MULTIFUNCTION\0016

Manufacturer:

Name: HP LaserJet 1022n

PNP Device ID: ROOT\MULTIFUNCTION\0016

Service:

.

Class GUID:

Description: HP LaserJet 1022n

Device ID: ROOT\MULTIFUNCTION\0045

Manufacturer:

Name: HP LaserJet 1022n

PNP Device ID: ROOT\MULTIFUNCTION\0045

Service:

.

Class GUID:

Description: HP LaserJet 1022n

Device ID: ROOT\MULTIFUNCTION\0017

Manufacturer:

Name: HP LaserJet 1022n

PNP Device ID: ROOT\MULTIFUNCTION\0017

Service:

.

==== System Restore Points ===================

.

RP129: 12/24/2013 9:52:37 AM - Windows Update

RP130: 12/27/2013 12:30:08 PM - Windows Update

RP131: 12/31/2013 12:48:29 PM - Windows Update

RP132: 1/1/2014 6:05:11 PM - avast! antivirus system restore point

RP133: 1/1/2014 6:08:28 PM - Device Driver Package Install: Avast Network Service

.

==== Installed Programs ======================

.

64 Bit HP CIO Components Installer

Accidental Damage Services Agreement

Adobe AIR

Adobe Flash Player 11 ActiveX

Adobe Reader X MUI

Adobe Shockwave Player 11.6

Advanced Audio FX Engine

Apple Application Support

Apple Mobile Device Support

Apple Software Update

Atheros Bluetooth Suite (64)

Audacity 2.0.3

avast! Internet Security

Banctec Service Agreement

Battle.net

Blio

Bonjour

ChheapMe

Cisco EAP-FAST Module

Cisco LEAP Module

Cisco PEAP Module

Cockatrice

Complete Care Business Service Agreement

Consumer In-Home Service Agreement

Counter-Strike: Source

D3DX10

Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition

Dell DataSafe Local Backup

Dell DataSafe Local Backup - Support Software

Dell DataSafe Online

Dell Digital Delivery

Dell Edoc Viewer

Dell Getting Started Guide

Dell Home Systems Service Agreement

Dell MusicStage

Dell PhotoStage

Dell Product Registration

Dell Stage

Dell Stage Remote

Dell Support Center

Dell Touchpad

Dell VideoStage

Dell Webcam Central

Dell WLAN and Bluetooth Client Installation

DocProc

Facebook Video Calling 1.2.0.287

Free Window Registry Repair

Fun22Saave

GameFly

Google Chrome

Google Talk Plugin

Google Update Helper

GPBaseService2

GS Supporter 1.80

Hearthstone

Home

HPPhotoSmartDiscLabelContent1

HPPhotosmartEssential

HPProductAssistant

IDT Audio

Intel® Control Center

Intel® Management Engine Components

Intel® Processor Graphics

Intel® Rapid Storage Technology

Java 7 Update 10

Java Auto Updater

Junk Mail filter update

Magic The Gathering Online

Malwarebytes Anti-Malware version 1.75.0.1300

Mesh Runtime

Microsoft .NET Framework 4 Client Profile

Microsoft .NET Framework 4 Extended

Microsoft Application Error Reporting

Microsoft Office Access MUI (English) 2010

Microsoft Office Access Setup Metadata MUI (English) 2010

Microsoft Office Click-to-Run 2010

Microsoft Office Excel MUI (English) 2010

Microsoft Office Home and Student 2010

Microsoft Office Office 64-bit Components 2010

Microsoft Office OneNote MUI (English) 2010

Microsoft Office Outlook MUI (English) 2010

Microsoft Office PowerPoint MUI (English) 2010

Microsoft Office Proof (English) 2010

Microsoft Office Proof (French) 2010

Microsoft Office Proof (Spanish) 2010

Microsoft Office Proofing (English) 2010

Microsoft Office Publisher MUI (English) 2010

Microsoft Office Shared 64-bit MUI (English) 2010

Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010

Microsoft Office Shared MUI (English) 2010

Microsoft Office Shared Setup Metadata MUI (English) 2010

Microsoft Office Single Image 2010

Microsoft Office Word MUI (English) 2010

Microsoft Silverlight

Microsoft SQL Server 2005 Compact Edition [ENU]

Microsoft Visual C++ 2005 Redistributable

Microsoft Visual C++ 2005 Redistributable (x64)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319

MSVCRT

MSVCRT_amd64

MSXML 4.0 SP2 (KB954430)

MSXML 4.0 SP2 (KB973688)

NCH EN Toolbar

Nero 10 Movie ThemePack Basic

Nero Blu-ray Player

Nero Control Center 10

Nero ControlCenter 10 Help (CHM)

Nero Core Components 10

Nero Update

OCR Software by I.R.I.S. 13.0

PlanetSide 2

PlayReady PC Runtime x86

Premium Service Agreement

QualxServ Service Agreement

Quickset64

Realtek Ethernet Controller Driver

Realtek USB 2.0 Card Reader

RuneScape Launcher 1.2.3

Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2736428)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2804576)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2835393)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2840628)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2840628v2)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2858302v2)

Security Update for Microsoft .NET Framework 4 Extended (KB2487367)

Security Update for Microsoft .NET Framework 4 Extended (KB2656351)

Security Update for Microsoft .NET Framework 4 Extended (KB2736428)

Security Update for Microsoft .NET Framework 4 Extended (KB2742595)

Security Update for Microsoft .NET Framework 4 Extended (KB2858302v2)

Security Update for Microsoft Excel 2010 (KB2826033) 32-Bit Edition

Security Update for Microsoft Office 2010 (KB2553284) 32-Bit Edition

Security Update for Microsoft Office 2010 (KB2687423) 32-Bit Edition

Security Update for Microsoft Office 2010 (KB2826023) 32-Bit Edition

Security Update for Microsoft Office 2010 (KB2826035) 32-Bit Edition

Security Update for Microsoft Office 2010 (KB2850016) 32-Bit Edition

Security Update for Microsoft Outlook 2010 (KB2837597) 32-Bit Edition

Serious Sam 3: BFE

Serious Sam HD: The First Encounter

Serious Sam HD: The Second Encounter

Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition

Skype Click to Call

Skype Voice Changer

Skype™ 6.11

SmartWebPrinting

SolutionCenter

Spotify

StarCraft II

Steam

STORM O.I.C. Missile Launcher

swMSM

SyncUP

Team Fortress 2

The Walking Dead

Update for Microsoft .NET Framework 4 Client Profile (KB2468871)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3)

Update for Microsoft .NET Framework 4 Extended (KB2468871)

Update for Microsoft .NET Framework 4 Extended (KB2533523)

Update for Microsoft .NET Framework 4 Extended (KB2600217)

Update for Microsoft .NET Framework 4 Extended (KB2836939)

Update for Microsoft .NET Framework 4 Extended (KB2836939v3)

Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition

Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition

Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition

Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition

Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition

Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition

Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition

Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition

Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition

Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition

Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition

Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition

Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition

Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition

Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition

Virtual DJ Toolbar

VirtualDJ Home FREE

Voxal Voice Changer

Windows Live Communications Platform

Windows Live Essentials

Windows Live ID Sign-in Assistant

Windows Live Installer

Windows Live Language Selector

Windows Live Mail

Windows Live Mesh

Windows Live Mesh ActiveX Control for Remote Connections

Windows Live Messenger

Windows Live MIME IFilter

Windows Live Movie Maker

Windows Live Photo Common

Windows Live Photo Gallery

Windows Live PIMT Platform

Windows Live Remote Client

Windows Live Remote Client Resources

Windows Live Remote Service

Windows Live Remote Service Resources

Windows Live SOXE

Windows Live SOXE Definitions

Windows Live UX Platform

Windows Live UX Platform Language Pack

Windows Live Writer

Windows Live Writer Resources

WinRAR 4.20 (32-bit)

Zinio Reader 4

.

==== Event Viewer Messages From Past Week ========

.

12/31/2013 7:54:21 PM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the ZAtheros Wlan Agent service.

12/31/2013 12:42:45 PM, Error: NetBT [4311] - Initialization failed because the driver device could not be created. Use the string "2AEDB971EDFB" to identify the interface for which initialization failed. It represents the MAC address of the failed interface or the Globally Unique Interface Identifier (GUID) if NetBT was unable to map from GUID to MAC address. If neither the MAC address nor the GUID were available, the string represents a cluster device name.

12/30/2013 10:26:12 PM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the ShellHWDetection service.

12/29/2013 6:41:35 PM, Error: Schannel [36888] - The following fatal alert was generated: 40. The internal error state is 252.

12/29/2013 1:34:25 PM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WSearch service.

12/28/2013 12:41:10 PM, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Application Virtualization Client service to connect.

12/28/2013 12:41:10 PM, Error: Service Control Manager [7001] - The Client Virtualization Handler service depends on the Application Virtualization Client service which failed to start because of the following error: The service did not respond to the start or control request in a timely fashion.

12/28/2013 12:41:10 PM, Error: Service Control Manager [7000] - The Application Virtualization Client service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.

12/27/2013 8:09:36 PM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Netman service.

1/1/2014 9:39:19 PM, Error: Microsoft-Windows-DistributedCOM [10016] - The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID {9BA05972-F6A8-11CF-A442-00A0C90A8F39} and APPID {9BA05972-F6A8-11CF-A442-00A0C90A8F39} to the user Hagen-PC\Hagen SID (S-1-5-21-2708970971-2996176623-2557602974-1001) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.

1/1/2014 8:12:01 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the ZAtheros Bt&Wlan Coex Agent service.

1/1/2014 8:12:01 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WinDefend service.

1/1/2014 8:12:01 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the lmhosts service.

1/1/2014 12:05:59 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the IPBusEnum service.

1/1/2014 11:20:34 PM, Error: Microsoft-Windows-DistributedCOM [10016] - The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID {C97FCC79-E628-407D-AE68-A06AD6D8B4D1} and APPID {344ED43D-D086-4961-86A6-1106F4ACAD9B} to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.

.

==== End Of File ===========================

Maniac · January 2, 2014

Hello haghild and :welcome: ! My name is Borislav and I will be glad to help you solve your malware problem.

Please note:

If you are a paying customer, you have the privilege to contact the help desk at Consumer Support. If you choose this option to get help, please let me know.
I recommend you to keep the instructions I will be giving you so that they are available to you at any time. You can save them in a text file or print them.
Make sure you read all of the instructions and fixes thoroughly before continuing with them.
Follow my instructions strictly and don’t hesitate to stop and ask me if you have any questions.
Post your log files, don't attach them. Every log file should be copy/pasted in your next reply.
Do not perform any kind of scanning and fixing without my instructions. If you want to proceed on your own, please let me know.

Step 1

Please uninstall the following applications:

Free Window Registry Repair

Fun22Saave

NCH EN Toolbar

Virtual DJ Toolbar

Step 2

Please download Junkware Removal Tool to your desktop.

Shut down your protection software now to avoid potential conflicts.
Run the tool by double-clicking it. If you are using Windows Vista or Seven, right-mouse click it and select Run as Administrator.
The tool will open and start scanning your system.
Please be patient as this can take a while to complete depending on your system's specifications.
On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
Post the contents of JRT.txt into your next message.
Step 3
Please download AdwCleaner by Xplode onto your desktop.
- Close all open programs and internet browsers.
- Double click on AdwCleaner.exe to run the tool.
- Click on Scan button. Wait until is finished.
- Click on Clean.
- Confirm each time with Ok.
- Your computer will be rebooted automatically. A text file will open after the restart.
- Please post the content of that logfile with your next answer.
- You can find the logfile at C:\AdwCleaner\AdwCleaner[s0].txt as well.
Step 4
- Launch Malwarebytes' Anti-Malware
- Go to Update tab and select Check for Updates. If an update is found, it will download and install the latest version.
- Go to Scanner tab and select Perform Quick Scan, then click Scan.
- The scan may take some time to finish,so please be patient.
- When the scan is complete, click OK, then Show Results to view the results.
- Make sure that everything is checked, and click Remove Selected.
- When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Extra Note)
- The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
- Copy&Paste the entire report in your next reply.
Extra Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer,please do so immediately.
In your next reply, post the following log files:
- Junkware Removal Tool log
- AdwCleaner log
- Malwarebytes' Anti-Malware log

haghild · January 3, 2014