Jump to content

Issues still after using your software

chanceinit
 Share

Recommended Posts

chanceinit

chanceinit

Posted
Posted

My computer will shut on and off.  It will open up unwanted sites.  It plays audio files in the background.

please help.  thank you very much.

 

here is attach.

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-11-20.01)
.
Microsoft Windows 7 Professional
Boot Device: \Device\HarddiskVolume2
Install Date: 7/27/2010 4:10:38 PM
System Uptime: 1/6/2014 12:46:35 PM (0 hours ago)
.
Motherboard: Dell Inc. |  | 0T656F
Processor: Intel® Core2 Duo CPU     E7500  @ 2.93GHz | CPU | 2926/1066mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 233 GiB total, 176.086 GiB free.
D: is CDROM ()
V: is NetworkDisk (NTFS) - 189 GiB total, 129.456 GiB free.
.
==== Disabled Device Manager Items =============
.
Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Description: MpKsl066077db
Device ID: ROOT\LEGACY_MPKSL066077DB\0000
Manufacturer:
Name: MpKsl066077db
PNP Device ID: ROOT\LEGACY_MPKSL066077DB\0000
Service: MpKsl066077db
.
==== System Restore Points ===================
.
RP1564: 12/24/2013 3:00:15 AM - Windows Update
RP1565: 12/25/2013 3:00:16 AM - Windows Update
RP1566: 12/26/2013 3:00:15 AM - Windows Update
RP1567: 12/27/2013 3:00:15 AM - Windows Update
RP1568: 12/28/2013 3:00:15 AM - Windows Update
RP1569: 12/29/2013 3:00:14 AM - Windows Update
RP1570: 12/30/2013 2:06:18 AM - Windows Update
RP1571: 12/30/2013 3:00:13 AM - Windows Update
RP1572: 12/31/2013 3:00:17 AM - Windows Update
RP1573: 12/31/2013 6:02:03 AM - Windows Update
RP1574: 1/1/2014 3:00:17 AM - Windows Update
RP1575: 1/2/2014 3:00:15 AM - Windows Update
RP1576: 1/3/2014 3:00:13 AM - Windows Update
RP1577: 1/4/2014 3:00:19 AM - Windows Update
RP1578: 1/5/2014 3:00:16 AM - Windows Update
RP1579: 1/6/2014 3:00:16 AM - Windows Update
RP1581: 1/6/2014 7:20:49 AM - Uniblue SpeedUpMyPC installation
RP1582: 1/6/2014 7:25:49 AM - Installed AVG 2013
RP1583: 1/6/2014 7:27:28 AM - Installed AVG 2013
RP1584: 1/6/2014 8:21:43 AM - Windows Update
RP1585: 1/6/2014 8:28:51 AM - Windows Update
RP1586: 1/6/2014 8:55:38 AM - Installed AVG 2014
RP1587: 1/6/2014 8:56:45 AM - Installed AVG 2014
RP1588: 1/6/2014 9:12:35 AM - Removed Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
.
==== Installed Programs ======================
.
 Update for Microsoft Office 2007 (KB2508958)
Adobe Acrobat  9 Standard - English, Français, Deutsch
Adobe Acrobat 9.5.5 - CPSID_83708
Adobe AIR
Adobe Flash Player 11 ActiveX
Adobe Flash Player 11 Plugin
Adobe SVG Viewer 3.0
Apple Application Support
Apple Mobile Device Support
Apple Software Update
AVG 2014
Bonjour
Buckscore
Cisco WebEx Meetings
CleanUp!
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition
Dropbox
DYMO Label v.8
ECLIPSE Version 11 Standard Demo
Freemake Video Converter version 4.0.4
Google Earth Plug-in
Google Talk (remove only)
Google Toolbar for Internet Explorer
Google Update Helper
GoToMeeting 5.7.0.1172
iTunes
Java 7 Update 15
Java Auto Updater
Junk Mail filter update
LogMeIn
Malwarebytes Anti-Malware version 1.75.0.1300
Market Samurai
Mesh Runtime
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Extended
Microsoft Application Error Reporting
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Basic 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office Outlook MUI (English) 2007
Microsoft Office PowerPoint 2010
Microsoft Office PowerPoint MUI (English) 2010
Microsoft Office Proof (English) 2007
Microsoft Office Proof (English) 2010
Microsoft Office Proof (French) 2007
Microsoft Office Proof (French) 2010
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proof (Spanish) 2010
Microsoft Office Proofing (English) 2007
Microsoft Office Proofing (English) 2010
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Publisher 2010
Microsoft Office Publisher MUI (English) 2010
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared MUI (English) 2010
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2010
Microsoft Office Word MUI (English) 2007
Microsoft PowerPoint 2010
Microsoft Publisher 2010
Microsoft Security Client
Microsoft Security Essentials
Microsoft Silverlight
Mozilla Firefox 26.0 (x86 en-US)
Mozilla Maintenance Service
MSVCRT
NVIDIA 3D Vision Driver 311.06
NVIDIA Control Panel 311.06
NVIDIA Display Control Panel
NVIDIA Graphics Driver 311.06
NVIDIA Install Application
NVIDIA Stereoscopic 3D Driver
NVIDIA Update 1.11.3
NVIDIA Update Components
PVSonyDll
QuickTime
Roxio Creator Audio
Roxio Creator Copy
Roxio Creator Data
Roxio Creator DE 10.3
Roxio Creator Tools
Roxio Express Labeler 3
Roxio Update Manager
Sectra CD Viewer System Components
Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2736428)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642)
Security Update for Microsoft .NET Framework 4 Extended (KB2416472)
Security Update for Microsoft .NET Framework 4 Extended (KB2487367)
Security Update for Microsoft .NET Framework 4 Extended (KB2656351)
Security Update for Microsoft .NET Framework 4 Extended (KB2736428)
Security Update for Microsoft .NET Framework 4 Extended (KB2742595)
Security Update for Microsoft Excel 2010 (KB2826033) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596744) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596754) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596825) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2597973) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2760411) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2760415) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2760585) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2760591) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2817641) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2827326) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2850022) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2553284) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2687423) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2826023) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2826035) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2850016) 32-Bit Edition
Security Update for Microsoft Office Excel 2007 (KB2827324) 32-Bit Edition
Security Update for Microsoft Office InfoPath 2007 (KB2687440) 32-Bit Edition
Security Update for Microsoft Office Outlook 2007 (KB2825644) 32-Bit Edition
Security Update for Microsoft Office Word 2007 (KB2827330) 32-Bit Edition
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition
SmartCloud
Spelling Dictionaries Support For Adobe Reader 9
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
Update for Microsoft .NET Framework 4 Client Profile (KB2473228)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217)
Update for Microsoft .NET Framework 4 Extended (KB2468871)
Update for Microsoft .NET Framework 4 Extended (KB2533523)
Update for Microsoft .NET Framework 4 Extended (KB2600217)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition
Update for Microsoft Office 2007 Help for Common Features (KB963673)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition
Update for Microsoft Office 2010 (KB2494150)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition
Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition
Update for Microsoft Office Excel 2007 Help (KB963678)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition
Update for Microsoft Office Outlook 2007 Help (KB963677)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2850085) 32-Bit Edition
Update for Microsoft Office Script Editor Help (KB963671)
Update for Microsoft Office Word 2007 Help (KB963665)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition
Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition
Virtual Office Suite 2.0
Visual Studio 2012 x86 Redistributables
Windows Live Communications Platform
Windows Live Essentials
Windows Live ID Sign-in Assistant
Windows Live Mail
Windows Live Mesh
Windows Live Mesh ActiveX Control for Remote Connections
Windows Live Movie Maker
Windows Live Photo Common
Windows Live Photo Gallery
Windows Live Remote Client
Windows Live Remote Client Resources
Windows Live Remote Service
Windows Live Remote Service Resources
Windows Live UX Platform Language Pack
.
==== Event Viewer Messages From Past Week ========
.
12/31/2013 6:06:21 AM, Error: Microsoft-Windows-WindowsUpdateClient [20]  - Installation Failure: Windows failed to install the following update with error 0x80070643: Definition Update for Windows Defender - KB915597 (Definition 1.165.887.0).
1/6/2014 9:25:37 AM, Error: Service Control Manager [7011]  - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the avgwd service.
1/6/2014 8:28:50 AM, Error: Microsoft-Windows-WindowsUpdateClient [20]  - Installation Failure: Windows failed to install the following update with error 0x80070643: Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.165.1266.0).
1/6/2014 8:22:58 AM, Error: Microsoft Antimalware [2001]  - Microsoft Antimalware has encountered an error trying to update signatures.      New Signature Version:       Previous Signature Version: 0.0.0.0      Update Source: Microsoft Malware Protection Center      Update Stage: Install      Source Path: http://go.microsoft.com/fwlink/?LinkID=260974&clcid=0x409&NRI=true&arch=x86&eng=0.0.0.0&sig=0.0.0.0∏=EDB4FA23-53B8-4AFA-8C5D-99752CCA7094      Signature Type: Network Inspection System      Update Type: Full      User: Doc-PC\Doc      Current Engine Version:       Previous Engine Version: 0.0.0.0      Error code: 0x8007042c      Error description: The dependency service or group failed to start.
1/6/2014 8:22:55 AM, Error: Microsoft Antimalware [2003]  - Microsoft Antimalware has encountered an error trying to update the engine.      New Engine Version:       Previous Engine Version:       Engine Type: Network Inspection System      User: Doc-PC\Doc      Error Code: 0x8007042c      Error description: The dependency service or group failed to start.
1/6/2014 8:22:55 AM, Error: Microsoft Antimalware [2001]  - Microsoft Antimalware has encountered an error trying to update signatures.      New Signature Version:       Previous Signature Version:       Update Source: User      Update Stage: Install      Source Path:       Signature Type: Network Inspection System      Update Type: Full      User: Doc-PC\Doc      Current Engine Version:       Previous Engine Version:       Error code: 0x8007042c      Error description: The dependency service or group failed to start.
1/6/2014 8:22:41 AM, Error: Microsoft Antimalware [2001]  - Microsoft Antimalware has encountered an error trying to update signatures.      New Signature Version:       Previous Signature Version: 1.165.1266.0      Update Source: Microsoft Update Server      Update Stage: Install      Source Path: http://www.microsoft.com      Signature Type: AntiVirus      Update Type: Full      User: NT AUTHORITY\SYSTEM      Current Engine Version:       Previous Engine Version: 1.1.10201.0      Error code: 0x80070643      Error description: Fatal error during installation.
1/6/2014 8:22:35 AM, Error: Microsoft Antimalware [2003]  - Microsoft Antimalware has encountered an error trying to update the engine.      New Engine Version:       Previous Engine Version:       Engine Type: Network Inspection System      User: NT AUTHORITY\SYSTEM      Error Code: 0x8007042c      Error description: The dependency service or group failed to start.
1/6/2014 8:22:35 AM, Error: Microsoft Antimalware [2001]  - Microsoft Antimalware has encountered an error trying to update signatures.      New Signature Version:       Previous Signature Version:       Update Source: User      Update Stage: Install      Source Path:       Signature Type: Network Inspection System      Update Type: Full      User: NT AUTHORITY\SYSTEM      Current Engine Version:       Previous Engine Version:       Error code: 0x8007042c      Error description: The dependency service or group failed to start.
1/6/2014 7:33:11 AM, Error: Service Control Manager [7009]  - A timeout was reached (30000 milliseconds) while waiting for the Computer Backup (MyPC Backup) service to connect.
1/6/2014 7:33:11 AM, Error: Service Control Manager [7000]  - The Computer Backup (MyPC Backup) service failed to start due to the following error:  The service did not respond to the start or control request in a timely fashion.
1/6/2014 3:00:40 AM, Error: Microsoft-Windows-WindowsUpdateClient [20]  - Installation Failure: Windows failed to install the following update with error 0x80070643: Update for Microsoft XML Core Services 4.0 Service Pack 2 (KB973688).
1/6/2014 3:00:40 AM, Error: Microsoft-Windows-WindowsUpdateClient [20]  - Installation Failure: Windows failed to install the following update with error 0x80070643: Security Update for Microsoft XML Core Services 4.0 Service Pack 2 (KB954430).
1/6/2014 12:59:39 AM, Error: Service Control Manager [7032]  - The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Windows Modules Installer service, but this action failed with the following error:  An instance of the service is already running.
1/6/2014 12:57:39 AM, Error: Service Control Manager [7031]  - The Windows Modules Installer service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.
1/6/2014 12:49:18 PM, Error: Service Control Manager [7038]  - The nvUpdatusService service was unable to log on as .\UpdatusUser with the currently configured password due to the following error:  Logon failure: the specified account password has expired. To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).
1/6/2014 12:49:18 PM, Error: Service Control Manager [7000]  - The NVIDIA Update Service Daemon service failed to start due to the following error:  The service did not start due to a logon failure.
1/6/2014 12:47:13 PM, Error: Service Control Manager [7023]  - The Power service terminated with the following error:  The WMI request could not be completed and should be retried.
1/6/2014 12:47:12 PM, Error: Service Control Manager [7000]  - The Apple Mobile Device service failed to start due to the following error:  The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.
1/6/2014 12:44:40 PM, Error: Service Control Manager [7032]  - The Service Control Manager tried to take a corrective action (Reboot the machine) after the unexpected termination of the Plug and Play service, but this action failed with the following error:  A system shutdown has already been scheduled.
1/6/2014 12:44:40 PM, Error: Service Control Manager [7031]  - The Plug and Play service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Reboot the machine.
1/6/2014 12:44:40 PM, Error: Service Control Manager [7031]  - The DCOM Server Process Launcher service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Reboot the machine.
1/6/2014 11:34:59 AM, Error: Service Control Manager [7032]  - The Service Control Manager tried to take a corrective action (Reboot the machine) after the unexpected termination of the DCOM Server Process Launcher service, but this action failed with the following error:  A system shutdown has already been scheduled.
1/2/2014 7:06:59 AM, Error: Microsoft-Windows-DistributedCOM [10000]  - Unable to start a DCOM Server: {1F87137D-0E7C-44D5-8C73-4EFFB68962F2}. The error: "6" Happened while starting this command: C:\Windows\system32\wbem\wmiprvse.exe -secured -Embedding
.
==== End Of File ===========================

 

here is the other

DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 8.0.7600.16671  BrowserJavaVersion: 10.15.2
Run by Doc at 12:52:55 on 2014-01-06
Microsoft Windows 7 Professional   6.1.7600.0.1252.1.1033.18.3070.1196 [GMT -6:00]
.
AV: AVG AntiVirus Free Edition 2014 *Enabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AV: Microsoft Security Essentials *Enabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: AVG AntiVirus Free Edition 2014 *Enabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664}
SP: Microsoft Security Essentials *Enabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
.
============== Running Processes ================
.
C:\PROGRA~1\AVG\AVG2014\avgrsx.exe
C:\Program Files\AVG\AVG2014\avgcsrvx.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\nvvsvc.exe
C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
c:\Program Files\Microsoft Security Client\MsMpEng.exe
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\atashost.exe
C:\Program Files\AVG\AVG2014\avgidsagent.exe
C:\Program Files\AVG\AVG2014\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\DYMO\DYMO Label Software\DymoPnpService.exe
C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe
C:\Program Files\LogMeIn\x86\RaMaint.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\LogMeIn\x86\LogMeIn.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files\AVG\AVG2014\avgnsx.exe
C:\Program Files\AVG\AVG2014\avgemcx.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrobat_sl.exe
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Google\Google Talk\googletalk.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\AVG\AVG2014\avgui.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\DYMO\DYMO Label Software\DymoQuickPrint.exe
C:\Windows\System32\regsvr32.exe
C:\Users\Doc\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\sppsvc.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\Future Health Inc\Virtual Office Suite\vos.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
\\?\C:\Windows\system32\wbem\WMIADAP.EXE
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wermgr.exe
C:\Windows\system32\wermgr.exe
C:\Windows\system32\wermgr.exe
C:\Windows\system32\wermgr.exe
C:\Windows\system32\wermgr.exe
C:\Windows\system32\wermgr.exe
C:\Windows\system32\wermgr.exe
C:\Windows\system32\wermgr.exe
C:\Windows\system32\wermgr.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
.
============== Pseudo HJT Report ===============
.

BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Java Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre7\bin\ssv.dll
BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
BHO: Adobe PDF Conversion Toolbar Helper: {AE7CD045-E861-484f-8273-0445EE161910} - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll
BHO: Google Toolbar Notifier BHO: {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - c:\program files\google\googletoolbarnotifier\5.7.9012.1008\swg.dll
BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - c:\program files\microsoft office\office14\URLREDIR.DLL
BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre7\bin\jp2ssv.dll
BHO: SmartSelect Class: {F4971EE7-DAA0-4053-9964-665D8EE6A077} - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll
TB: Google Toolbar: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
TB: Adobe PDF: {47833539-D0C5-4125-9FA8-0819E2EAAC93} - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll
TB: Adobe PDF: {47833539-D0C5-4125-9FA8-0819E2EAAC93} - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll
TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
uRun: [DymoQuickPrint] "c:\program files\dymo\dymo label software\DymoQuickPrint.exe" /startup
uRun: [Otfics] regsvr32.exe c:\users\doc\appdata\local\otfics\MetaNetM80.dll
uRun: [swg] "c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe"
mRun: [bCSSync] "c:\program files\microsoft office\office14\BCSSync.exe" /DelayServices
mRun: [LogMeIn GUI] "c:\program files\logmein\x86\LogMeInSystray.exe"
mRun: [Adobe Acrobat Speed Launcher] "c:\program files\adobe\acrobat 9.0\acrobat\Acrobat_sl.exe"
mRun: [Acrobat Assistant 8.0] "c:\program files\adobe\acrobat 9.0\acrobat\Acrotray.exe"
mRun: [DLSService] "c:\program files\dymo\dymo label software\DLSService.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [sunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [googletalk] c:\program files\google\google talk\googletalk.exe /autostart
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [MSC] "c:\program files\microsoft security client\msseces.exe" -hide -runkey
mRun: [AVG_UI] "c:\program files\avg\avg2014\avgui.exe" /TRAYONLY
mRun: [mobilegeni daemon] c:\program files\mobogenie\DaemonProcess.exe
StartupFolder: c:\users\doc\appdata\roaming\micros~1\windows\startm~1\programs\startup\dropbox.lnk - c:\users\doc\appdata\roaming\dropbox\bin\Dropbox.exe
uPolicies-Explorer: NoDevMgrUpdate = dword:1
mPolicies-System: ConsentPromptBehaviorAdmin = dword:0
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableLUA = dword:0
mPolicies-System: EnableUIADesktopToggle = dword:0
mPolicies-System: PromptOnSecureDesktop = dword:0
IE: Append Link Target to Existing PDF - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Append to Existing PDF - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert Link Target to Adobe PDF - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert to Adobe PDF - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIECapture.html
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}
Trusted Zone: care360.com
Trusted Zone: questdiagnostics.com
Trusted Zone: care360.com
Trusted Zone: questdiagnostics.com






TCP: NameServer = 24.220.0.10 24.220.0.11
TCP: Interfaces\{AF86EF33-8B25-499D-8315-C56CF94D21F0} : DHCPNameServer = 24.220.0.10 24.220.0.11
SSODL: WebCheck - <orphaned>
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\users\doc\appdata\roaming\mozilla\firefox\profiles\vno77ekb.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - www.google.com
FF - plugin: c:\progra~1\micros~2\office14\NPAUTHZ.DLL
FF - plugin: c:\progra~1\micros~2\office14\NPSPWRAP.DLL
FF - plugin: c:\program files\adobe\acrobat 9.0\acrobat\air\nppdf32.dll
FF - plugin: c:\program files\dymo\dymo label software\framework\npDYMOLabelFramework.dll
FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\google\update\1.3.22.3\npGoogleUpdate3.dll
FF - plugin: c:\program files\java\jre7\bin\plugin2\npjp2.dll
FF - plugin: c:\program files\microsoft silverlight\5.1.20913.0\npctrlui.dll
FF - plugin: c:\program files\nvidia corporation\3d vision\npnv3dv.dll
FF - plugin: c:\program files\nvidia corporation\3d vision\npnv3dvstreaming.dll
FF - plugin: c:\users\doc\appdata\local\citrix\plugins\92\npappdetector.dll
FF - plugin: c:\users\doc\appdata\roaming\mozilla\firefox\profiles\vno77ekb.default\extensions\{9eb34849-81d3-4841-939d-666d522b889a}\plugins\npSlingPlayer.dll
FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_9_900_170.dll
FF - plugin: c:\windows\system32\npDeployJava1.dll
FF - plugin: c:\windows\system32\npmproxy.dll
FF - ExtSQL: !HIDDEN! 1970-05-29 09:28; {13CF5C10-9020-1030-0448-9F14B1D26FB9}; -
.
---- FIREFOX POLICIES ----
FF - user.js: extensions.autoDisableScopes - 0
FF - user.js: extensions.shownSelectionUI - true
.
============= SERVICES / DRIVERS ===============
.
R0 AVGIDSHX;AVGIDSHX;c:\windows\system32\drivers\avgidshx.sys [2013-10-24 147768]
R0 Avglogx;AVG Logging Driver;c:\windows\system32\drivers\avglogx.sys [2013-10-31 222520]
R0 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\drivers\avgmfx86.sys [2013-10-1 102712]
R0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\drivers\avgrkx86.sys [2013-9-10 27448]
R0 MpFilter;Microsoft Malware Protection Driver;c:\windows\system32\drivers\MpFilter.sys [2013-9-27 214696]
R1 Avgdiskx;AVG Disk Driver;c:\windows\system32\drivers\avgdiskx.sys [2013-11-5 120600]
R1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\drivers\avgidsdriverx.sys [2013-11-4 209176]
R1 AVGIDSShim;AVGIDSShim;c:\windows\system32\drivers\avgidsshimx.sys [2013-9-17 22840]
R1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\drivers\avgldx86.sys [2013-10-31 176952]
R1 Avgtdix;AVG TDI Driver;c:\windows\system32\drivers\avgtdix.sys [2013-8-1 193848]
R2 atashost;WebEx Service Host for Support Center;c:\windows\system32\atashost.exe [2012-8-20 136784]
R2 AVGIDSAgent;AVGIDSAgent;c:\program files\avg\avg2014\avgidsagent.exe [2013-11-11 3478544]
R2 avgwd;AVG WatchDog;c:\program files\avg\avg2014\avgwdsvc.exe [2013-9-24 348008]
R2 DymoPnpService;DYMO PnP Service;c:\program files\dymo\dymo label software\DymoPnpService.exe [2011-1-28 32336]
R2 LMIGuardianSvc;LMIGuardianSvc;c:\program files\logmein\x86\LMIGuardianSvc.exe [2010-12-8 375120]
R2 LMIInfo;LogMeIn Kernel Information Provider;c:\program files\logmein\x86\rainfo.sys [2010-9-17 13624]
R2 LMIRfsDriver;LogMeIn Remote File System Driver;c:\windows\system32\drivers\LMIRfsDriver.sys [2010-12-15 47640]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\nvidia corporation\3d vision\nvSCPAPISvr.exe [2013-1-18 383264]
R3 k57nd60x;Broadcom NetLink Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\k57nd60x.sys [2009-7-13 229888]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888]
S3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\drivers\NisDrvWFP.sys [2013-9-27 104768]
S3 NisSrv;Microsoft Network Inspection;c:\program files\microsoft security client\NisSrv.exe [2013-10-23 280288]
S3 StorSvc;Storage Service;c:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-13 20992]
S3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\wat\WatAdminSvc.exe [2010-7-27 1343400]
S4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\windows live\mesh\wlcrasvc.exe [2010-9-22 51040]
.
=============== Created Last 30 ================
.
2014-01-06 18:47:21    --------    d-----w-    C:\bbb8385cd2bbc235dd4f1d87
2014-01-06 17:38:18    --------    d-----w-    C:\ed863584709621fa7b527d639981
2014-01-06 16:39:55    --------    d-----w-    c:\programdata\Malwarebytes' Anti-Malware (portable)
2014-01-06 16:39:17    74456    ----a-w-    c:\windows\system32\drivers\mbamchameleon.sys
2014-01-06 15:56:46    --------    d-----w-    C:\790287513e901fec8e8f
2014-01-06 15:49:41    --------    d-----w-    c:\users\doc\.android
2014-01-06 15:49:38    --------    d-----w-    c:\users\doc\appdata\local\cache
2014-01-06 15:49:33    --------    d-----w-    c:\users\doc\appdata\local\genienext
2014-01-06 15:49:30    --------    d-----w-    c:\users\doc\appdata\local\Mobogenie
2014-01-06 15:46:05    --------    d-----w-    C:\AdwCleaner
2014-01-06 15:27:10    --------    d-----w-    C:\cd8bda09ad50ad5ef113122f548a
2014-01-06 15:13:19    --------    d-----w-    c:\windows\system32\appmgmt
2014-01-06 15:00:54    --------    d-----w-    c:\users\doc\appdata\roaming\AVG2014
2014-01-06 14:59:01    --------    d-----w-    c:\users\doc\appdata\roaming\TuneUp Software
2014-01-06 14:57:43    --------    d--h--w-    C:\$AVG
2014-01-06 14:57:42    --------    d-----w-    c:\programdata\AVG2014
2014-01-06 14:53:22    --------    d-----w-    c:\users\doc\appdata\local\Avg2014
2014-01-06 14:22:30    7760024    ------w-    c:\programdata\microsoft\microsoft antimalware\definition updates\{738940ce-d5ec-4b10-bf2c-09f2515ac2c7}\mpengine.dll
2014-01-06 14:16:17    --------    d-----w-    c:\program files\Microsoft Security Client
2014-01-06 14:01:23    --------    d-----w-    C:\e7cb93613898347d074b3d044149bc0c
2014-01-06 13:33:25    --------    d-----w-    C:\79cc4fdccd8617df318d
2014-01-06 13:20:25    --------    d--h--w-    c:\programdata\Common Files
2014-01-06 13:20:23    --------    d-----w-    c:\users\doc\appdata\local\MFAData
2014-01-06 13:20:23    --------    d-----w-    c:\users\doc\appdata\local\Avg2013
2014-01-06 13:12:26    --------    d-----w-    C:\947566b5a7aa0c8b4cf5fed7f7
2013-12-30 15:55:31    --------    d-----w-    C:\6a5de6caee34d21948280e
2013-12-30 14:40:11    --------    d-----w-    C:\821c85da40c18fcdd5f2ba
2013-12-30 14:08:40    --------    d-----w-    c:\users\doc\appdata\local\Otfics
2013-12-30 08:06:52    7760024    ------w-    c:\programdata\microsoft\windows defender\definition updates\{ccfd8a7b-c994-4f21-b622-bbfebde9f7de}\mpengine.dll
2013-12-20 04:32:27    28272    ----a-w-    c:\program files\mozilla firefox\plugin-hang-ui.exe
2013-12-20 04:32:27    16192    ----a-w-    c:\program files\mozilla firefox\plugins\NPOFF12.DLL
2013-12-20 04:32:27    159744    ----a-w-    c:\program files\mozilla firefox\plugins\npqtplugin6.dll
2013-12-20 04:32:27    159744    ----a-w-    c:\program files\mozilla firefox\plugins\npqtplugin5.dll
2013-12-20 04:32:27    159744    ----a-w-    c:\program files\mozilla firefox\plugins\npqtplugin4.dll
2013-12-20 04:32:27    159744    ----a-w-    c:\program files\mozilla firefox\plugins\npqtplugin3.dll
2013-12-20 04:32:27    159744    ----a-w-    c:\program files\mozilla firefox\plugins\npqtplugin2.dll
2013-12-20 04:32:27    159744    ----a-w-    c:\program files\mozilla firefox\plugins\npqtplugin.dll
2013-12-20 04:32:27    106088    ----a-w-    c:\program files\mozilla firefox\plugins\nppdf32.dll
2013-12-20 04:32:26    272496    ----a-w-    c:\program files\mozilla firefox\browser\components\browsercomps.dll
2013-12-17 02:06:54    --------    d-----w-    C:\912750b34970afa2d350
2013-12-12 09:20:51    --------    d-----w-    C:\46302c4045a65319a6d387c12947bf
.
==================== Find3M  ====================
.
2013-12-17 02:06:22    86888    ----a-w-    c:\windows\system32\LMIRfsClientNP.dll
2013-12-17 02:06:22    53064    ----a-w-    c:\windows\system32\spool\prtprocs\w32x86\LMIproc.dll
2013-12-17 02:06:21    85832    ----a-w-    c:\windows\system32\LMIinit.dll
2013-12-17 02:06:21    31560    ----a-w-    c:\windows\system32\LMIport.dll
2013-12-11 11:42:11    71048    ----a-w-    c:\windows\system32\FlashPlayerCPLApp.cpl
2013-12-11 11:42:11    692616    ----a-w-    c:\windows\system32\FlashPlayerApp.exe
2013-11-19 10:32:04    230048    ------w-    c:\windows\system32\MpSigStub.exe
2013-11-06 03:50:48    120600    ----a-w-    c:\windows\system32\drivers\avgdiskx.sys
2013-11-05 03:57:30    209176    ----a-w-    c:\windows\system32\drivers\avgidsdriverx.sys
2013-11-01 05:00:28    176952    ----a-w-    c:\windows\system32\drivers\avgldx86.sys
2013-11-01 04:30:08    222520    ----a-w-    c:\windows\system32\drivers\avglogx.sys
2013-10-25 04:28:32    147768    ----a-w-    c:\windows\system32\drivers\avgidshx.sys
2013-10-25 02:06:09    86888    ----a-w-    c:\windows\system32\LMIRfsClientNP.dll.000.bak
2013-10-18 02:06:11    86888    ----a-w-    c:\windows\system32\LMIRfsClientNP.dll.001.bak
.
============= FINISH: 12:55:28.31 ===============

dds.txtattach.txt
 

Link to post
Share on other sites
kevinf80

kevinf80

Posted
Posted

Hello and post-32477-1261866970.gif

 

P2P/Piracy Warning:

 

   

If you're using Peer 2 Peer software such as uTorrent, BitTorrent or similar you must either fully uninstall them or completely disable them from running while being assisted here.

Failure to remove or disable such software will result in your topic being closed and no further assistance being provided.

If you have illegal/cracked software, cracks, keygens etc. on the system, please remove or uninstall them now and read the policy on Piracy.

 

There are two security systems installed with AV components, that really is bad news and counterproductive. You must uninstall either AVG or Microsoft Security Essentials asap...

 

Next,

 

Download Farbar Recovery Scan Tool and save it to your desktop.

 

Note: You need to run the version compatible with your system (32 bit or 64 bit). If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

  • Double-click to run it. When the tool opens click Yes to disclaimer.
  • Press Scan button.
  • It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
  • The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

 

Kevin

Link to post
Share on other sites
chanceinit

chanceinit

Posted
  • Author
Posted

I don't believe I have any piracy software, please let me know if i do.  microsoft gone. here are the scans.

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 05-01-2014
Ran by Doc (administrator) on DOC-PC on 06-01-2014 15:24:18
Running from C:\Users\Doc\Downloads
Microsoft Windows 7 Professional  (X86) OS Language: English(US)
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgrsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgcsrvx.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Cisco WebEx LLC) C:\Windows\System32\atashost.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgwdsvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Sanford, L.P.) C:\Program Files\DYMO\DYMO Label Software\DymoPnpService.exe
(LogMeIn, Inc.) C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe
(LogMeIn, Inc.) C:\Program Files\LogMeIn\x86\ramaint.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(LogMeIn, Inc.) C:\Program Files\LogMeIn\x86\LogMeIn.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgnsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgemcx.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(LogMeIn, Inc.) C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
(Adobe Systems Inc.) C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
(Sun Microsystems, Inc.) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Google) C:\Program Files\Google\Google Talk\googletalk.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgui.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Sanford, L.P.) C:\Program Files\DYMO\DYMO Label Software\DymoQuickPrint.exe
(Future Health) C:\Program Files\Future Health Inc\Virtual Office Suite\vos.exe
(Microsoft Corporation) C:\Windows\System32\regsvr32.exe
(Dropbox, Inc.) C:\Users\Doc\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Sun Microsystems, Inc.) C:\Program Files\Common Files\Java\Java Update\jucheck.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [bCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [LogMeIn GUI] - C:\Program Files\LogMeIn\x86\LogMeInSystray.exe [63048 2010-09-17] (LogMeIn, Inc.)
HKLM\...\Run: [Adobe Acrobat Speed Launcher] - C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrobat_sl.exe [44128 2013-05-08] (Adobe Systems Incorporated)
HKLM\...\Run: [] - [x]
HKLM\...\Run: [Acrobat Assistant 8.0] - C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe [642664 2013-05-08] (Adobe Systems Inc.)
HKLM\...\Run: [DLSService] - "C:\Program Files\DYMO\DYMO Label Software\DLSService.exe"
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [sunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.)
HKLM\...\Run: [googletalk] - C:\Program Files\Google\Google Talk\googletalk.exe [3739648 2007-01-01] (Google)
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [152392 2013-10-01] (Apple Inc.)
HKLM\...\Run: [AVG_UI] - C:\Program Files\AVG\AVG2014\avgui.exe [4956176 2013-11-07] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [mobilegeni daemon] - C:\Program Files\Mobogenie\DaemonProcess.exe
HKCU\...\Run: [DymoQuickPrint] - C:\Program Files\DYMO\DYMO Label Software\DymoQuickPrint.exe [1825360 2011-01-28] (Sanford, L.P.)
HKCU\...\Run: [Otfics] - regsvr32.exe C:\Users\Doc\AppData\Local\Otfics\MetaNetM80.dll <===== ATTENTION
HKCU\...\Run: [swg] - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2010-08-16] (Google Inc.)
HKCU\...\Policies\Explorer: [NoDevMgrUpdate] 1
MountPoints2: D - D:\autorun.bat
MountPoints2: E - E:\LaunchU3.exe -a
Startup: C:\Users\Doc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Doc\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xFACDE7607905CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {BA2166B5-8539-41BF-9871-2279D31DCFC3} URL = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000031&src=crm&q={searchTerms}&locale=en_US&apn_ptnrs=^TV&apn_dtid=^OSJ000^YY^US&apn_uid=6D341E55-BA81-4D2F-A794-CA8297BBADA6&apn_sauid=82798C2C-1BB4-4765-9AEC-398339557021
SearchScopes: HKCU - {DD5B42CD-641C-4B7B-9439-DEC269C5BD22} URL = http://us.yhs.search.yahoo.com/avg/search?fr=yhs-avg-chrome&type=yahoo_avg_hs2-tb-web_chrome_us&p={searchTerms}
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll (Google Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
DPF: {15772FF0-B907-4D98-B770-0000B63DB314} https://cas2.questdiagnostics.com/EREQ_SSLcabs/VBPrinter.CAB
DPF: {16B2BACC-F445-49B2-ABB0-671C5CBE8CE0} https://cas2.questdiagnostics.com/EREQ_SSLcabs/ComboBridgeControl.CAB
DPF: {69D1E588-02F8-4C00-B311-5C581402C247} https://cas2.questdiagnostics.com/EREQ_SSLcabs/DGXDPCtr.cab
DPF: {756BEC7B-ADF4-4931-A519-B513B32CFC1B} https://cas2.questdiagnostics.com/EREQ_SSLcabs/LabelControl.CAB
DPF: {79C259BD-8024-4992-B445-2C52D3449214} https://cas2.questdiagnostics.com/EREQ_SSLcabs/C360Upgrader.CAB
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Winsock: Catalog5 09 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 24.220.0.10 24.220.0.11

FireFox:
========
FF ProfilePath: C:\Users\Doc\AppData\Roaming\Mozilla\Firefox\Profiles\vno77ekb.default
FF user.js: detected! => C:\Users\Doc\AppData\Roaming\Mozilla\Firefox\Profiles\vno77ekb.default\user.js
FF SelectedSearchEngine: Google
FF Homepage: www.google.com
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @dymo.com/DymoLabelFramework - C:\Program Files\DYMO\DYMO Label Software\Framework\npDYMOLabelFramework.dll ( Sanford L.P.)
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.15.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.15.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @nvidia.com/3DVision - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Acrobat - C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @citrixonline.com/appdetectorplugin - C:\Users\Doc\AppData\Local\Citrix\Plugins\92\npappdetector.dll (Citrix Online)
FF Extension: Plus-HD-1.2 - C:\Users\Doc\AppData\Roaming\Mozilla\Firefox\Profiles\vno77ekb.default\Extensions\39e612de-2951-40c2-ab4a-82e121c42778@4e0cecc2-7c67-4374-bc4c-f15656d80ab7.com
FF Extension: CLSID_ContactReadingPane - C:\Users\Doc\AppData\Roaming\Mozilla\Firefox\Profiles\vno77ekb.default\Extensions\{13CF5C10-9020-1030-0448-9F14B1D26FB9}
FF Extension: WebSlingPlayer - C:\Users\Doc\AppData\Roaming\Mozilla\Firefox\Profiles\vno77ekb.default\Extensions\{9EB34849-81D3-4841-939D-666D522B889A}

========================== Services (Whitelisted) =================

R2 atashost; C:\Windows\system32\atashost.exe [136784 2012-08-20] (Cisco WebEx LLC)
R2 AVGIDSAgent; C:\Program Files\AVG\AVG2014\avgidsagent.exe [3478544 2013-11-11] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files\AVG\AVG2014\avgwdsvc.exe [348008 2013-09-24] (AVG Technologies CZ, s.r.o.)
R2 DymoPnpService; C:\Program Files\DYMO\DYMO Label Software\DymoPnpService.exe [32336 2011-01-28] (Sanford, L.P.)

==================== Drivers (Whitelisted) ====================

R1 Avgdiskx; C:\Windows\System32\DRIVERS\avgdiskx.sys [120600 2013-11-05] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [209176 2013-11-04] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [147768 2013-10-24] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [22840 2013-09-17] (AVG Technologies CZ, s.r.o.)
R1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [176952 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [222520 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [102712 2013-10-01] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [27448 2013-09-10] (AVG Technologies CZ, s.r.o.)
R1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [193848 2013-08-01] (AVG Technologies CZ, s.r.o.)
S4 LMIRfsClientNP; No ImagePath

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-06 15:24 - 2014-01-06 15:24 - 00013228 _____ C:\Users\Doc\Downloads\FRST.txt
2014-01-06 15:23 - 2014-01-06 15:23 - 00000355 _____ C:\Users\Doc\Desktop\Computer - Shortcut.lnk
2014-01-06 15:23 - 2014-01-06 15:23 - 00000000 ____D C:\FRST
2014-01-06 15:22 - 2014-01-06 15:22 - 01064805 _____ (Farbar) C:\Users\Doc\Downloads\FRST.exe
2014-01-06 15:08 - 2014-01-06 15:08 - 00000000 ____D C:\af076d9023937b5ff39edea5add43030
2014-01-06 13:48 - 2014-01-06 13:49 - 00000000 ____D C:\8b3afc603cd0c46dd44d8412
2014-01-06 12:55 - 2014-01-06 12:56 - 00018416 _____ C:\Users\Doc\Desktop\attach.txt
2014-01-06 12:55 - 2014-01-06 12:56 - 00018328 _____ C:\Users\Doc\Desktop\dds.txt
2014-01-06 12:52 - 2014-01-06 12:52 - 00688992 ____R (Swearware) C:\Users\Doc\Downloads\dds.scr
2014-01-06 12:47 - 2014-01-06 12:47 - 00000000 ____D C:\bbb8385cd2bbc235dd4f1d87
2014-01-06 11:38 - 2014-01-06 11:38 - 00000000 ____D C:\ed863584709621fa7b527d639981
2014-01-06 10:39 - 2014-01-06 10:40 - 00000000 ____D C:\Users\Doc\Desktop\mbar
2014-01-06 10:39 - 2014-01-06 10:39 - 00074456 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-01-06 10:39 - 2014-01-06 10:39 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-01-06 10:35 - 2014-01-06 10:35 - 12582688 _____ (Malwarebytes Corp.) C:\Users\Doc\Downloads\mbar-1.07.0.1008.exe
2014-01-06 09:56 - 2014-01-06 09:57 - 00000000 ____D C:\790287513e901fec8e8f
2014-01-06 09:49 - 2014-01-06 09:58 - 00000000 ____D C:\Users\Doc\AppData\Local\Mobogenie
2014-01-06 09:49 - 2014-01-06 09:51 - 00000204 _____ C:\Users\Doc\daemonprocess.txt
2014-01-06 09:49 - 2014-01-06 09:49 - 00000000 ____D C:\Users\Doc\Documents\Mobogenie
2014-01-06 09:49 - 2014-01-06 09:49 - 00000000 ____D C:\Users\Doc\AppData\Local\genienext
2014-01-06 09:49 - 2014-01-06 09:49 - 00000000 ____D C:\Users\Doc\AppData\Local\cache
2014-01-06 09:49 - 2014-01-06 09:49 - 00000000 ____D C:\Users\Doc\.android
2014-01-06 09:46 - 2014-01-06 09:53 - 00000000 ____D C:\AdwCleaner
2014-01-06 09:44 - 2014-01-06 09:44 - 00929928 _____ (CNET Download.com) C:\Users\Doc\Downloads\cbsidlm-cbsi171-AdwCleaner-SEO-75851221.exe
2014-01-06 09:27 - 2014-01-06 09:28 - 00000000 ____D C:\cd8bda09ad50ad5ef113122f548a
2014-01-06 09:19 - 2014-01-06 09:19 - 00001105 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-01-06 09:13 - 2014-01-06 09:13 - 00000000 ____D C:\Windows\system32\appmgmt
2014-01-06 09:00 - 2014-01-06 09:00 - 00000000 ____D C:\Users\Doc\AppData\Roaming\AVG2014
2014-01-06 08:59 - 2014-01-06 08:59 - 00000935 _____ C:\Users\Public\Desktop\AVG 2014.lnk
2014-01-06 08:59 - 2014-01-06 08:59 - 00000000 ____D C:\Users\Doc\AppData\Roaming\TuneUp Software
2014-01-06 08:57 - 2014-01-06 08:59 - 00000000 ____D C:\ProgramData\AVG2014
2014-01-06 08:57 - 2014-01-06 08:57 - 00000000 ___HD C:\$AVG
2014-01-06 08:53 - 2014-01-06 09:03 - 00000000 ____D C:\Users\Doc\AppData\Local\Avg2014
2014-01-06 08:53 - 2014-01-06 08:53 - 04436944 _____ (AVG Technologies) C:\Users\Doc\Downloads\avg_free_stb_all_2014_4259_cnet.exe
2014-01-06 08:16 - 2014-01-06 15:21 - 00001945 _____ C:\Windows\epplauncher.mif
2014-01-06 08:15 - 2014-01-06 08:15 - 11125072 _____ (Microsoft Corporation) C:\Users\Doc\Downloads\mseinstall.exe
2014-01-06 08:01 - 2014-01-06 08:01 - 00000000 ____D C:\e7cb93613898347d074b3d044149bc0c
2014-01-06 07:33 - 2014-01-06 07:34 - 00000000 ____D C:\79cc4fdccd8617df318d
2014-01-06 07:20 - 2014-01-06 07:20 - 00000000 ____D C:\Users\Doc\AppData\Local\MFAData
2014-01-06 07:20 - 2014-01-06 07:20 - 00000000 ____D C:\Users\Doc\AppData\Local\Avg2013
2014-01-06 07:12 - 2014-01-06 07:12 - 00000000 ____D C:\947566b5a7aa0c8b4cf5fed7f7
2013-12-30 10:05 - 2013-12-30 10:05 - 00028672 _____ C:\Windows\system32\exqyjj.jat
2013-12-30 09:55 - 2014-01-06 15:11 - 00000087 _____ C:\Windows\system32\dtdyesr.ulh
2013-12-30 09:55 - 2013-12-30 10:05 - 00000099 _____ C:\Windows\system32\wgwwrjq.ibh
2013-12-30 09:55 - 2013-12-30 09:55 - 00000064 _____ C:\Windows\system32\hlzmmo.dha
2013-12-30 09:55 - 2013-12-30 09:55 - 00000000 ____D C:\6a5de6caee34d21948280e
2013-12-30 09:39 - 2013-12-30 09:39 - 00101213 ____S C:\Windows\system32\lfvnjal.oco
2013-12-30 08:40 - 2013-12-30 08:40 - 00000000 ____D C:\821c85da40c18fcdd5f2ba
2013-12-30 08:08 - 2013-12-30 08:08 - 00000000 ____D C:\Users\Doc\AppData\Local\Otfics
2013-12-19 22:32 - 2014-01-06 09:19 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-12-16 20:06 - 2013-12-16 20:06 - 00000000 ____D C:\912750b34970afa2d350
2013-12-12 03:20 - 2013-12-12 03:20 - 00000000 ____D C:\46302c4045a65319a6d387c12947bf

==================== One Month Modified Files and Folders =======

2014-01-06 15:24 - 2014-01-06 15:24 - 00013228 _____ C:\Users\Doc\Downloads\FRST.txt
2014-01-06 15:23 - 2014-01-06 15:23 - 00000355 _____ C:\Users\Doc\Desktop\Computer - Shortcut.lnk
2014-01-06 15:23 - 2014-01-06 15:23 - 00000000 ____D C:\FRST
2014-01-06 15:22 - 2014-01-06 15:22 - 01064805 _____ (Farbar) C:\Users\Doc\Downloads\FRST.exe
2014-01-06 15:21 - 2014-01-06 08:16 - 00001945 _____ C:\Windows\epplauncher.mif
2014-01-06 15:15 - 2010-07-27 15:13 - 00006394 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-06 15:15 - 2009-07-13 22:34 - 00014256 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-06 15:15 - 2009-07-13 22:34 - 00014256 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-06 15:11 - 2013-12-30 09:55 - 00000087 _____ C:\Windows\system32\dtdyesr.ulh
2014-01-06 15:10 - 2013-01-23 13:25 - 00000000 ___RD C:\Users\Doc\Dropbox
2014-01-06 15:10 - 2013-01-23 13:24 - 00000000 ____D C:\Users\Doc\AppData\Roaming\Dropbox
2014-01-06 15:09 - 2010-08-16 12:26 - 00000882 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-06 15:08 - 2014-01-06 15:08 - 00000000 ____D C:\af076d9023937b5ff39edea5add43030
2014-01-06 15:08 - 2010-07-27 16:37 - 00000000 ____D C:\ProgramData\NVIDIA
2014-01-06 15:08 - 2010-07-27 15:06 - 01862003 _____ C:\Windows\WindowsUpdate.log
2014-01-06 15:08 - 2009-07-13 22:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-06 15:08 - 2009-07-13 22:39 - 00045380 _____ C:\Windows\setupact.log
2014-01-06 14:42 - 2012-06-14 07:28 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-06 14:42 - 2010-08-16 12:26 - 00000886 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-06 14:41 - 2010-07-27 15:27 - 00132566 _____ C:\Windows\PFRO.log
2014-01-06 13:49 - 2014-01-06 13:48 - 00000000 ____D C:\8b3afc603cd0c46dd44d8412
2014-01-06 12:56 - 2014-01-06 12:55 - 00018416 _____ C:\Users\Doc\Desktop\attach.txt
2014-01-06 12:56 - 2014-01-06 12:55 - 00018328 _____ C:\Users\Doc\Desktop\dds.txt
2014-01-06 12:52 - 2014-01-06 12:52 - 00688992 ____R (Swearware) C:\Users\Doc\Downloads\dds.scr
2014-01-06 12:47 - 2014-01-06 12:47 - 00000000 ____D C:\bbb8385cd2bbc235dd4f1d87
2014-01-06 11:38 - 2014-01-06 11:38 - 00000000 ____D C:\ed863584709621fa7b527d639981
2014-01-06 10:40 - 2014-01-06 10:39 - 00000000 ____D C:\Users\Doc\Desktop\mbar
2014-01-06 10:39 - 2014-01-06 10:39 - 00074456 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-01-06 10:39 - 2014-01-06 10:39 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-01-06 10:35 - 2014-01-06 10:35 - 12582688 _____ (Malwarebytes Corp.) C:\Users\Doc\Downloads\mbar-1.07.0.1008.exe
2014-01-06 09:58 - 2014-01-06 09:49 - 00000000 ____D C:\Users\Doc\AppData\Local\Mobogenie
2014-01-06 09:57 - 2014-01-06 09:56 - 00000000 ____D C:\790287513e901fec8e8f
2014-01-06 09:53 - 2014-01-06 09:46 - 00000000 ____D C:\AdwCleaner
2014-01-06 09:51 - 2014-01-06 09:49 - 00000204 _____ C:\Users\Doc\daemonprocess.txt
2014-01-06 09:49 - 2014-01-06 09:49 - 00000000 ____D C:\Users\Doc\Documents\Mobogenie
2014-01-06 09:49 - 2014-01-06 09:49 - 00000000 ____D C:\Users\Doc\AppData\Local\genienext
2014-01-06 09:49 - 2014-01-06 09:49 - 00000000 ____D C:\Users\Doc\AppData\Local\cache
2014-01-06 09:49 - 2014-01-06 09:49 - 00000000 ____D C:\Users\Doc\.android
2014-01-06 09:49 - 2010-07-27 15:10 - 00000000 ____D C:\Users\Doc
2014-01-06 09:44 - 2014-01-06 09:44 - 00929928 _____ (CNET Download.com) C:\Users\Doc\Downloads\cbsidlm-cbsi171-AdwCleaner-SEO-75851221.exe
2014-01-06 09:28 - 2014-01-06 09:27 - 00000000 ____D C:\cd8bda09ad50ad5ef113122f548a
2014-01-06 09:19 - 2014-01-06 09:19 - 00001105 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-01-06 09:19 - 2013-12-19 22:32 - 00000000 ____D C:\Program Files\Mozilla Firefox
2014-01-06 09:19 - 2012-04-26 08:01 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2014-01-06 09:13 - 2014-01-06 09:13 - 00000000 ____D C:\Windows\system32\appmgmt
2014-01-06 09:13 - 2009-07-13 20:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2014-01-06 09:03 - 2014-01-06 08:53 - 00000000 ____D C:\Users\Doc\AppData\Local\Avg2014
2014-01-06 09:03 - 2010-12-14 08:25 - 00000000 ____D C:\ProgramData\MFAData
2014-01-06 09:00 - 2014-01-06 09:00 - 00000000 ____D C:\Users\Doc\AppData\Roaming\AVG2014
2014-01-06 08:59 - 2014-01-06 08:59 - 00000935 _____ C:\Users\Public\Desktop\AVG 2014.lnk
2014-01-06 08:59 - 2014-01-06 08:59 - 00000000 ____D C:\Users\Doc\AppData\Roaming\TuneUp Software
2014-01-06 08:59 - 2014-01-06 08:57 - 00000000 ____D C:\ProgramData\AVG2014
2014-01-06 08:57 - 2014-01-06 08:57 - 00000000 ___HD C:\$AVG
2014-01-06 08:56 - 2010-08-16 14:26 - 00000000 ____D C:\Program Files\AVG
2014-01-06 08:53 - 2014-01-06 08:53 - 04436944 _____ (AVG Technologies) C:\Users\Doc\Downloads\avg_free_stb_all_2014_4259_cnet.exe
2014-01-06 08:15 - 2014-01-06 08:15 - 11125072 _____ (Microsoft Corporation) C:\Users\Doc\Downloads\mseinstall.exe
2014-01-06 08:01 - 2014-01-06 08:01 - 00000000 ____D C:\e7cb93613898347d074b3d044149bc0c
2014-01-06 08:01 - 2010-07-27 17:01 - 00000000 ____D C:\Windows\Minidump
2014-01-06 07:34 - 2014-01-06 07:33 - 00000000 ____D C:\79cc4fdccd8617df318d
2014-01-06 07:20 - 2014-01-06 07:20 - 00000000 ____D C:\Users\Doc\AppData\Local\MFAData
2014-01-06 07:20 - 2014-01-06 07:20 - 00000000 ____D C:\Users\Doc\AppData\Local\Avg2013
2014-01-06 07:12 - 2014-01-06 07:12 - 00000000 ____D C:\947566b5a7aa0c8b4cf5fed7f7
2014-01-06 07:11 - 2010-12-15 13:50 - 00000000 ____D C:\ProgramData\LogMeIn
2013-12-30 10:05 - 2013-12-30 10:05 - 00028672 _____ C:\Windows\system32\exqyjj.jat
2013-12-30 10:05 - 2013-12-30 09:55 - 00000099 _____ C:\Windows\system32\wgwwrjq.ibh
2013-12-30 09:55 - 2013-12-30 09:55 - 00000064 _____ C:\Windows\system32\hlzmmo.dha
2013-12-30 09:55 - 2013-12-30 09:55 - 00000000 ____D C:\6a5de6caee34d21948280e
2013-12-30 09:39 - 2013-12-30 09:39 - 00101213 ____S C:\Windows\system32\lfvnjal.oco
2013-12-30 08:40 - 2013-12-30 08:40 - 00000000 ____D C:\821c85da40c18fcdd5f2ba
2013-12-30 08:39 - 2009-07-13 20:37 - 00000000 ____D C:\Windows\LiveKernelReports
2013-12-30 08:08 - 2013-12-30 08:08 - 00000000 ____D C:\Users\Doc\AppData\Local\Otfics
2013-12-30 08:07 - 2010-08-16 10:15 - 00000000 ____D C:\Users\Doc\AppData\Local\Google
2013-12-30 03:00 - 2011-04-17 02:00 - 00443840 _____ C:\Windows\msxml4-KB954430-enu.LOG
2013-12-30 03:00 - 2011-04-17 02:00 - 00443524 _____ C:\Windows\msxml4-KB973688-enu.LOG
2013-12-16 20:06 - 2013-12-16 20:06 - 00000000 ____D C:\912750b34970afa2d350
2013-12-16 20:06 - 2010-12-15 13:50 - 00086888 _____ (LogMeIn, Inc.) C:\Windows\system32\LMIRfsClientNP.dll
2013-12-16 20:06 - 2010-12-15 13:50 - 00085832 _____ (LogMeIn, Inc.) C:\Windows\system32\LMIinit.dll
2013-12-16 20:06 - 2010-12-15 13:50 - 00031560 _____ (LogMeIn, Inc.) C:\Windows\system32\LMIport.dll
2013-12-16 20:06 - 2010-12-15 13:50 - 00000000 ____D C:\Program Files\LogMeIn
2013-12-12 03:20 - 2013-12-12 03:20 - 00000000 ____D C:\46302c4045a65319a6d387c12947bf
2013-12-12 03:03 - 2010-08-23 14:45 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-11 05:42 - 2012-06-14 07:28 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-12-11 05:42 - 2011-12-21 11:14 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-12-10 07:43 - 2010-08-16 10:13 - 00000000 ____D C:\Program Files\Google

Some content of TEMP:
====================
C:\Users\Doc\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll
[2009-07-13 17:45] - [2009-07-13 19:16] - 0376320 ____A (Microsoft Corporation) D198F6DDBE16DD5F7C99B93EF84AEFE3

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-30 00:33

==================== End Of Log ============================

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 05-01-2014
Ran by Doc at 2014-01-06 15:24:40
Running from C:\Users\Doc\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}

==================== Installed Programs ======================

 Update for Microsoft Office 2007 (KB2508958) (Version:  - Microsoft)
Adobe Acrobat  9 Standard - English, Français, Deutsch (Version: 9.5.5 - Adobe Systems) Hidden
Adobe Acrobat 9.5.5 - CPSID_83708 (Version:  - Adobe Systems Incorporated)
Adobe AIR (Version: 3.8.0.1280 - Adobe Systems Incorporated)
Adobe AIR (Version: 3.8.0.1280 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 11 ActiveX (Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Flash Player 11 Plugin (Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe SVG Viewer 3.0 (Version:  3.0 - )
Apple Application Support (Version: 1.3.1 - Apple Inc.)
Apple Mobile Device Support (Version: 7.0.0.117 - Apple Inc.)
Apple Software Update (Version: 2.1.3.127 - Apple Inc.)
AVG 2014 (Version: 14.0.3658 - AVG Technologies) Hidden
AVG 2014 (Version: 14.0.4259 - AVG Technologies) Hidden
AVG 2014 (Version: 2014.0.4259 - AVG Technologies)
Bonjour (Version: 3.0.0.10 - Apple Inc.)
Buckscore (Version: 1.0.0.28 - MSUDeerLab)
Cisco WebEx Meetings (Version:  - Cisco WebEx LLC)
CleanUp! (Version:  - )
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (Version:  - Microsoft)
Dropbox (Version: 2.0.22 - Dropbox, Inc.)
DYMO Label v.8 (Version: 8.3.0.1242 - Sanford, L.P.)
ECLIPSE Version 11 Standard Demo (Version:  - MPN Software Systems, Inc.)
Freemake Video Converter version 4.0.4 (Version: 4.0.4 - Ellora Assets Corporation)
Google Earth Plug-in (Version: 7.1.2.2041 - Google)
Google Talk (remove only) (Version:  - )
Google Toolbar for Internet Explorer (Version: 1.0.0 - Google Inc.) Hidden
Google Toolbar for Internet Explorer (Version: 7.5.4805.320 - Google Inc.)
Google Update Helper (Version: 1.3.22.3 - Google Inc.) Hidden
GoToMeeting 5.7.0.1172 (Version: 5.7.0.1172 - CitrixOnline)
iTunes (Version: 11.1.1.11 - Apple Inc.)
Java 7 Update 15 (Version: 7.0.150 - Oracle)
Java Auto Updater (Version: 2.1.9.0 - Sun Microsystems, Inc.) Hidden
Junk Mail filter update (Version: 14.0.8117.416 - Microsoft Corporation) Hidden
LogMeIn (Version: 4.1.1578 - LogMeIn, Inc.)
Malwarebytes Anti-Malware version 1.75.0.1300 (Version: 1.75.0.1300 - Malwarebytes Corporation)
Market Samurai (Version: 0.92.67 - Alliance Software Pty Ltd)
Market Samurai (Version: 0.92.67 - Alliance Software Pty Ltd) Hidden
Mesh Runtime (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (Version:  - Microsoft) Hidden
Microsoft Office Basic 2007 (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Basic 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Spanish) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Spanish) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (English) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (Version:  - Microsoft) Hidden
Microsoft Office Publisher 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared Setup Metadata MUI (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft PowerPoint 2010 (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Publisher 2010 (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Mozilla Firefox 26.0 (x86 en-US) (Version: 26.0 - Mozilla)
Mozilla Maintenance Service (Version: 26.0 - Mozilla)
MSVCRT (Version: 14.0.1468.721 - Microsoft) Hidden
NVIDIA 3D Vision Driver 311.06 (Version: 311.06 - NVIDIA Corporation)
NVIDIA Control Panel 311.06 (Version: 311.06 - NVIDIA Corporation) Hidden
NVIDIA Display Control Panel (Version: 6.14.11.9745 - NVIDIA Corporation)
NVIDIA Graphics Driver 311.06 (Version: 311.06 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.108.688 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (Version: 7.17.13.1106 - NVIDIA Corporation) Hidden
NVIDIA Update 1.11.3 (Version: 1.11.3 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.11.3 - NVIDIA Corporation) Hidden
PVSonyDll (Version: 1.00.0001 - NVIDIA Corporation) Hidden
QuickTime (Version: 7.74.80.86 - Apple Inc.)
Roxio Creator Audio (Version: 3.7.0 - Roxio) Hidden
Roxio Creator Copy (Version: 3.7.0 - Roxio) Hidden
Roxio Creator Data (Version: 3.7.0 - Roxio) Hidden
Roxio Creator DE 10.3 (Version: 10.3 - Roxio)
Roxio Creator DE 10.3 (Version: 3.7.0 - Roxio) Hidden
Roxio Creator Tools (Version: 3.7.0 - Roxio) Hidden
Roxio Express Labeler 3 (Version: 3.2.2 - Roxio) Hidden
Roxio Update Manager (Version: 6.0.0 - Roxio) Hidden
Sectra CD Viewer System Components (Version: 10.01.0000 - Sectra)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (Version:  - Microsoft) Hidden
SmartCloud (Version: 2.2.0.7175 - Future Health)
Spelling Dictionaries Support For Adobe Reader 9 (Version: 9.0.0 - Adobe Systems Incorporated)
Update for 2007 Microsoft Office System (KB967642) (Version:  - Microsoft)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1 - Microsoft Corporation)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2007 Help for Common Features (KB963673) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2494150) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office Excel 2007 Help (KB963678) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 Help (KB963677) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2850085) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office Script Editor Help (KB963671) (Version:  - Microsoft)
Update for Microsoft Office Word 2007 Help (KB963665) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (Version:  - Microsoft)
Virtual Office Suite 2.0 (Version: 1.6.627 - Future Health Inc)
Visual Studio 2012 x86 Redistributables (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
Windows Live Communications Platform (Version: 14.0.8117.416 - Microsoft Corporation) Hidden
Windows Live Essentials (Version: 14.0.8117.416 - Microsoft Corporation) Hidden
Windows Live Essentials (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (Version: 15.4.3508.1109 - Microsoft Corporation)
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0 - Microsoft Corporation) Hidden
Windows Live Mail (Version: 14.0.8117.0416 - Microsoft Corporation) Hidden
Windows Live Mesh (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX Control for Remote Connections (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Movie Maker (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden

==================== Restore Points  =========================

24-12-2013 09:00:15 Windows Update
25-12-2013 09:00:16 Windows Update
26-12-2013 09:00:15 Windows Update
27-12-2013 09:00:15 Windows Update
28-12-2013 09:00:15 Windows Update
29-12-2013 09:00:14 Windows Update
30-12-2013 08:06:18 Windows Update
30-12-2013 09:00:13 Windows Update
31-12-2013 09:00:17 Windows Update
31-12-2013 12:02:03 Windows Update
01-01-2014 09:00:17 Windows Update
02-01-2014 09:00:15 Windows Update
03-01-2014 09:00:13 Windows Update
04-01-2014 09:00:19 Windows Update
05-01-2014 09:00:16 Windows Update
06-01-2014 09:00:16 Windows Update
06-01-2014 13:20:49 Uniblue SpeedUpMyPC installation
06-01-2014 13:25:49 Installed AVG 2013
06-01-2014 13:27:28 Installed AVG 2013
06-01-2014 14:21:43 Windows Update
06-01-2014 14:28:51 Windows Update
06-01-2014 14:55:38 Installed AVG 2014
06-01-2014 14:56:45 Installed AVG 2014
06-01-2014 15:12:35 Removed Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219

==================== Hosts content: ==========================

2009-07-13 20:04 - 2009-06-10 15:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {6EAD9965-1FC2-45E8-9EC3-EAC1851438F6} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11] (Adobe Systems Incorporated)
Task: {840A3A56-F8E8-4C38-A01F-91B3B1C14E8D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-08-16] (Google Inc.)
Task: {8D2BE2B8-DFBD-4E0E-A286-E863BEE59101} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-08-16] (Google Inc.)
Task: {F9FD6901-73C5-4800-89B0-57D78FB86645} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-12-30 08:08 - 2013-12-30 08:08 - 00022016 _____ () C:\Users\Doc\AppData\Local\Otfics\MetaNetM80.dll
2013-05-22 10:19 - 2009-02-27 15:39 - 00019968 _____ () C:\Program Files\Adobe\Acrobat 9.0\Acrobat\AcroTray.DEU
2013-05-22 10:19 - 2009-02-27 15:32 - 00020480 _____ () C:\Program Files\Adobe\Acrobat 9.0\Acrobat\AcroTray.FRA
2011-01-28 13:14 - 2011-01-28 13:14 - 00094208 _____ () C:\Program Files\DYMO\DYMO Label Software\DYMO.Common.dll
2013-03-13 14:48 - 2013-03-13 14:48 - 24978944 _____ () C:\Users\Doc\AppData\Roaming\Dropbox\bin\libcef.dll
2014-01-06 09:19 - 2013-12-05 13:36 - 03559024 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\atashost => ""="Service"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (01/06/2014 03:15:46 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT AUTHORITY)
Description: Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The first DWORD in the Data section contains the error code.

Error: (01/06/2014 03:15:46 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT AUTHORITY)
Description: The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.

Error: (01/06/2014 03:09:59 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "Microsoft.VC80.CRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195"1".
Dependent Assembly Microsoft.VC80.CRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (01/06/2014 03:09:57 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "Microsoft.VC80.CRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195"1".
Dependent Assembly Microsoft.VC80.CRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (01/06/2014 03:09:55 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "Microsoft.VC80.CRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195"1".
Dependent Assembly Microsoft.VC80.CRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (01/06/2014 03:09:53 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "Microsoft.VC80.CRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195"1".
Dependent Assembly Microsoft.VC80.CRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (01/06/2014 03:09:51 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "Microsoft.VC80.CRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195"1".
Dependent Assembly Microsoft.VC80.CRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (01/06/2014 03:08:28 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "Microsoft.VC80.CRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195"1".
Dependent Assembly Microsoft.VC80.CRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (01/06/2014 02:49:53 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT AUTHORITY)
Description: Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The first DWORD in the Data section contains the error code.

Error: (01/06/2014 02:49:53 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT AUTHORITY)
Description: The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.


System errors:
=============
Error: (01/06/2014 03:10:33 PM) (Source: Service Control Manager) (User: )
Description: The NVIDIA Update Service Daemon service failed to start due to the following error:
%%1069

Error: (01/06/2014 03:10:33 PM) (Source: Service Control Manager) (User: )
Description: The nvUpdatusService service was unable to log on as .\UpdatusUser with the currently configured password due to the following error:
%%1330

To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).

Error: (01/06/2014 03:08:29 PM) (Source: Service Control Manager) (User: )
Description: The Power service terminated with the following error:
%%4203

Error: (01/06/2014 03:08:28 PM) (Source: Service Control Manager) (User: )
Description: The Apple Mobile Device service failed to start due to the following error:
%%14001

Error: (01/06/2014 03:05:59 PM) (Source: Service Control Manager) (User: )
Description: The Service Control Manager tried to take a corrective action (Reboot the machine) after the unexpected termination of the DCOM Server Process Launcher service, but this action failed with the following error:
%%1190

Error: (01/06/2014 03:05:58 PM) (Source: Service Control Manager) (User: )
Description: The Plug and Play service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Reboot the machine.

Error: (01/06/2014 03:05:58 PM) (Source: Service Control Manager) (User: )
Description: The DCOM Server Process Launcher service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Reboot the machine.

Error: (01/06/2014 02:43:28 PM) (Source: Service Control Manager) (User: )
Description: The NVIDIA Update Service Daemon service failed to start due to the following error:
%%1069

Error: (01/06/2014 02:43:28 PM) (Source: Service Control Manager) (User: )
Description: The nvUpdatusService service was unable to log on as .\UpdatusUser with the currently configured password due to the following error:
%%1330

To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).

Error: (01/06/2014 02:41:24 PM) (Source: Service Control Manager) (User: )
Description: The Power service terminated with the following error:
%%4203


Microsoft Office Sessions:
=========================
Error: (08/08/2011 08:50:14 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 3 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (08/03/2011 00:17:36 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 2 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (07/13/2011 09:16:30 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 108 seconds with 60 seconds of active time.  This session ended with a crash.

Error: (05/18/2011 08:25:45 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 0 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (05/18/2011 08:23:24 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 0 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (05/17/2011 08:47:29 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 1 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (05/16/2011 10:05:12 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 1 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (05/10/2011 07:21:13 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 0 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (05/10/2011 07:21:02 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 2 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (09/30/2010 11:39:56 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6541.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 137 seconds with 60 seconds of active time.  This session ended with a crash.


==================== Memory info ===========================

Percentage of memory in use: 49%
Total physical RAM: 3069.97 MB
Available physical RAM: 1548.33 MB
Total Pagefile: 6138.21 MB
Available Pagefile: 4390.5 MB
Total Virtual: 2047.88 MB
Available Virtual: 1894.16 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:232.79 GB) (Free:175.94 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive v: (DATAPART1) (Network) (Total:189.18 GB) (Free:129.43 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 233 GB) (Disk ID: A42D04A3)
Partition 1: (Not Active) - (Size=39 MB) - (Type=DE)
Partition 2: (Active) - (Size=233 GB) - (Type=07 NTFS)

==================== End Of Log ============================

Link to post
Share on other sites
chanceinit

chanceinit

Posted
  • Author
Posted

Farbar Recovery Scan Tool (x86) Version: 05-01-2014
Ran by Doc at 2014-01-06 15:40:08
Running from C:\Users\Doc\Downloads
Boot Mode: Normal

================== Search: "rpcss.dll" ===================

C:\Windows.old\Windows\winsxs\x86_microsoft-windows-com-base-qfe-rpcss_31bf3856ad364e35_6.1.7600.16385_none_69a1321f9f3393ad\rpcss.dll
[2009-07-13 17:45] - [2009-07-13 19:16] - 0376320 ____A (Microsoft Corporation) B82CD39E336973359D7C9BF911E8E84F

C:\Windows.old\Windows\System32\rpcss.dll
[2009-07-13 17:45] - [2009-07-13 19:16] - 0376320 ____A (Microsoft Corporation) B82CD39E336973359D7C9BF911E8E84F

C:\Windows\winsxs\x86_microsoft-windows-com-base-qfe-rpcss_31bf3856ad364e35_6.1.7600.16385_none_69a1321f9f3393ad\rpcss.dll
[2009-07-13 17:45] - [2009-07-13 19:16] - 0376320 ____A (Microsoft Corporation) B82CD39E336973359D7C9BF911E8E84F

C:\Windows\System32\rpcss.dll
[2009-07-13 17:45] - [2009-07-13 19:16] - 0376320 ____A (Microsoft Corporation) D198F6DDBE16DD5F7C99B93EF84AEFE3

=== End Of Search ===

Link to post
Share on other sites
kevinf80

kevinf80

Posted
Posted

Download attached fixlist.txt file and save it to the Desktop, or the folder you saved FRST into.

NOTE. It's important that both FRST and fixlist.txt are in the same location or the fix will not work.

 

Run FRST and press the Fix button just once and wait.


The tool will make a log on the Desktop (Fixlog.txt). Please post it to your reply.

 

Next,

 

Run Malwarebytes,  Open > Settings Tab > Scanner Settings > Under action for PUP > Select: Show in Results List and Check for removal.

Please Update and run a Quick scan

Make sure that everything is checked, and click Remove Selected on any found items.

 

Post the produced logs, let me know if the audio ads have ceased..

 

Kevin

 

fixlist.txt

Link to post
Share on other sites
chanceinit

chanceinit

Posted
  • Author
Posted 


Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 05-01-2014

Ran by Doc at 2014-01-06 15:58:50 Run:1

Running from C:\Users\Doc\Downloads

Boot Mode: Normal

==============================================

Content of fixlist:

*****************

Start

HKCU\...\Run: [Otfics] - regsvr32.exe C:\Users\Doc\AppData\Local\Otfics\MetaNetM80.dll <===== ATTENTION

C:\Users\Doc\AppData\Local\Otfics

MountPoints2: D - D:\autorun.bat

MountPoints2: E - E:\LaunchU3.exe -a

2013-12-30 10:05 - 2013-12-30 10:05 - 00028672 _____ C:\Windows\system32\exqyjj.jat

2013-12-30 09:55 - 2014-01-06 15:11 - 00000087 _____ C:\Windows\system32\dtdyesr.ulh

2013-12-30 09:55 - 2013-12-30 10:05 - 00000099 _____ C:\Windows\system32\wgwwrjq.ibh

2013-12-30 09:55 - 2013-12-30 09:55 - 00000064 _____ C:\Windows\system32\hlzmmo.dha

2013-12-30 09:55 - 2013-12-30 09:55 - 00000000 ____D C:\6a5de6caee34d21948280e

2013-12-30 09:39 - 2013-12-30 09:39 - 00101213 ____S C:\Windows\system32\lfvnjal.oco

2013-12-30 08:40 - 2013-12-30 08:40 - 00000000 ____D C:\821c85da40c18fcdd5f2ba

C:\Users\Doc\AppData\Local\Temp\Quarantine.exe

Replace:C:\Windows\winsxs\x86_microsoft-windows-com-base-qfe-rpcss_31bf3856ad364e35_6.1.7600.16385_none_69a1321f9f3393ad\rpcss.dll C:\Windows\System32\rpcss.dll

End

*****************

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\Otfics => Value deleted successfully.

C:\Users\Doc\AppData\Local\Otfics => Moved successfully.

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\D => Key deleted successfully.

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\E => Key deleted successfully.

C:\Windows\system32\exqyjj.jat => Moved successfully.

C:\Windows\system32\dtdyesr.ulh => Moved successfully.

Could not move "C:\Windows\system32\wgwwrjq.ibh" => Scheduled to move on reboot.

C:\Windows\system32\hlzmmo.dha => Moved successfully.

C:\6a5de6caee34d21948280e => Moved successfully.

Could not move "C:\Windows\system32\lfvnjal.oco" => Scheduled to move on reboot.

C:\821c85da40c18fcdd5f2ba => Moved successfully.

C:\Users\Doc\AppData\Local\Temp\Quarantine.exe => Moved successfully.

C:\Windows\System32\rpcss.dll => Moved successfully.

C:\Windows\winsxs\x86_microsoft-windows-com-base-qfe-rpcss_31bf3856ad364e35_6.1.7600.16385_none_69a1321f9f3393ad\rpcss.dll copied successfully to C:\Windows\System32\rpcss.dll

=> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2014-01-06 16:00:27)<=

C:\Windows\system32\wgwwrjq.ibh => Moved successfully.

C:\Windows\system32\lfvnjal.oco => Moved successfully.

==== End of Fixlog ====


			
		


		

		
	


	

	

		
Link to post

		
			
		
		
		

		
			
Share on other sites

			

	


	

	

		
	




	



					
					
					
				

					

					
					






	

	

	

		

			

				


	
		chanceinit
	

				
				
			

		

		

			

				


chanceinit
			

			

				Posted 
				
			

		

	

	
	

		




	

		

			

				
    
					
						
  • Author
    • 
					
					
					
					
					
				

			

			
		


		

			Posted  
			
			
				
				
			
		

	


	


	

		
		

			
Haven't heard any yet, but they come and go.  I'll keep listening.
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Database version: v2014.01.06.05

Windows 7 x86 NTFS
Internet Explorer 8.0.7600.16385
Doc :: DOC-PC [administrator]

1/6/2014 4:03:01 PM
mbam-log-2014-01-06 (16-03-01).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 236679
Time elapsed: 10 minute(s), 36 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)
 


			
		


		

		
	


	

	

		
Link to post

		
			
		
		
		

		
			
Share on other sites

			

	


	

	

		
	




	



					
					
					
				

					

					
					






	

	

	

		

			

				


	
		kevinf80
	

				
				
			

		

		

			

				


kevinf80
			

			

				Posted 
				
			

		

	

	
	

		




	

		

			

				
    
					
					
					
					
					
				

			

			
		


		

			Posted  
			
			
				
				
			
		

	


	


	

		
		

			
Thanks for the update, We still need to run an online AV scan to ensure there are no remnants of any infection left on your system that we may have missed. This scan is very thorough and well worth running, it can take several hours please be patient and let it complete:
 
Run Eset Online Scanner
 
**Note** You will need to use Internet explorer for this scan - Vista and win 7 right click on IE shortcut and run as admin
 
Go to Eset web page http://www.eset.com/us/online-scanner/ to run an online scan from ESET.
 
  •  Turn off the real time scanner of any existing antivirus program while performing the online scan
  •  click on the Run ESET Online Scanner button
  •  Tick the box next to YES, I accept the Terms of Use.
    Click Start
  •  When asked, allow the add/on to be installed
    Click Start
  •  Make sure that the option Remove found threats is unticked
  •  Click on Advanced Settings, ensure the options
  •  Scan for potentially unwanted applications, Scan for potentially unsafe applications, and Enable Anti-Stealth Technology are ticked.
    Click Scan
  •  wait for the virus definitions to be downloaded
  •  Wait for the scan to finish
 
When the scan is complete
 
  •  If no threats were found
  •  put a checkmark in "Uninstall application on close"
  •  close program
  •  report to me that nothing was found
 
If threats were found
 
  •  click on "list of threats found"
  •  click on "export to text file" and save it as ESET SCAN and save to the desktop
  •  Click on back
  •  put a checkmark in "Uninstall application on close"
  •  click on finish
 
close program
 
copy and paste the report in next reply
 
Next,
 
Download Security Check by screen317 from either of the following: 
http://screen317.spywareinfoforum.org/SecurityCheck.exe or http://screen317.changelog.fr/SecurityCheck.exe
Save it to your Desktop. (If your security alerts either accept the alert, or turn the security off while Secuirity Check runs)
Double click SecurityCheck.exe (Vista or Windows 7 users right click and select "Run as Administrator") and follow the onscreen instructions inside of the black box. Press any key when asked.
A Notepad document should open automatically called checkup.txt; please post the contents of that document.
 
Let me see those two logs, also tell me if any remaining issues or concerns...
 
Kevin


			
		


		

		
			

		
	


	

	

		
Link to post

		
			
		
		
		

		
			
Share on other sites

			

	


	

	

		
	




	



					
					
					
				

					

					
					






	

	

	

		

			

				


	
		chanceinit
	

				
				
			

		

		

			

				


chanceinit
			

			

				Posted 
				
			

		

	

	
	

		




	

		

			

				
    
					
						
  • Author
    • 
					
					
					
					
					
				

			

			
		


		

			Posted  
			
			
				
				
			
		

	


	


	

		
		

			
C:\$Recycle.Bin\S-1-5-21-517927956-3188704247-810187072-1000\$R2U4T88\Uninstall.exe    a variant of MSIL/DomaIQ.A application
C:\AdwCleaner\Quarantine\C\Users\Doc\AppData\LocalLow\AskToolbar\setup.exe.vir    a variant of Win32/Bundled.Toolbar.Ask application
C:\FRST\Quarantine\Otfics\MetaNetM80.dll    a variant of Win32/Sefnit.CV trojan
C:\Users\Doc\AppData\Local\Temp\NJ9x09k0.exe.part    a variant of Win32/CNETInstaller.B application
C:\Users\Doc\AppData\Roaming\Mozilla\Firefox\Profiles\vno77ekb.default\extensions\{13CF5C10-9020-1030-0448-9F14B1D26FB9}\components\CLSIDContactReadingPane.js    Win32/Boaxxe.BE trojan
C:\Users\Doc\Downloads\cbsidlm-cbsi171-AdwCleaner-SEO-75851221.exe    a variant of Win32/CNETInstaller.B application
 


			
		


		

		
	


	

	

		
Link to post

		
			
		
		
		

		
			
Share on other sites

			

	


	

	

		
	




	



					
					
					
				

					

					
					






	

	

	

		

			

				


	
		chanceinit
	

				
				
			

		

		

			

				


chanceinit
			

			

				Posted 
				
			

		

	

	
	

		




	

		

			

				
    
					
						
  • Author
    • 
					
					
					
					
					
				

			

			
		


		

			Posted  
			
			
				
				
			
		

	


	


	

		
		

			
 Results of screen317's Security Check version 0.99.78  
 Windows 7  x86 (UAC is disabled!)  
 Out of date service pack!!
``````````````Antivirus/Firewall Check:``````````````
 Windows Firewall Enabled!  
AVG AntiVirus Free Edition 2014   
 Antivirus out of date!  
`````````Anti-malware/Other Utilities Check:`````````
 Malwarebytes Anti-Malware version 1.75.0.1300  
 Java 7 Update 15  
 Java version out of Date!
 Adobe Flash Player     11.9.900.170  
 Adobe Reader 9 Adobe Reader out of Date!
 Mozilla Firefox (26.0)
````````Process Check: objlist.exe by Laurent````````  
 AVG avgwdsvc.exe
`````````````````System Health check`````````````````
 Total Fragmentation on Drive C: 0%
````````````````````End of Log``````````````````````
 


			
		


		

		
	


	

	

		
Link to post

		
			
		
		
		

		
			
Share on other sites

			

	


	

	

		
	




	



					
					
					
				

					

					
					






	

	

	

		

			

				


	
		kevinf80
	

				
				
			

		

		

			

				


kevinf80
			

			

				Posted 
				
			

		

	

	
	

		




	

		

			

				
    
					
					
					
					
					
				

			

			
		


		

			Posted  
			
			
				
				
			
		

	


	


	

		
		

			
Download OTM from either of the following links and save to your Desktop: (If your security alerts to OTM, either accept the alert or turn off security to allow OTM to run)

http://oldtimer.geekstogo.com/OTM.exe.
http://www.itxassociates.com/OT-Tools/OTM.com
http://www.itxassociates.com/OT-Tools/OTM.exe  

Double click OTM.exe to start the tool. Vista or Windows 7 users accepy UAC alert. Be aware all processes will be stopped during run, also Desktop will disappear, this will be put back on completion.... If your security alerts to OTM either, accept the alert or turn off security until OTM completes...
  • Copy the text from the code box belowbelow to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy). Ensure to start with and include the colon before Files :Files

    :FilesC:\$Recycle.Bin\S-1-5-21-517927956-3188704247-810187072-1000\$R2U4T88\Uninstall.exeC:\Users\Doc\AppData\Local\Temp\NJ9x09k0.exe.partC:\Users\Doc\AppData\Roaming\Mozilla\Firefox\Profiles\vno77ekb.default\extensions\{13CF5C10-9020-1030-0448-9F14B1D26FB9}\components\CLSIDContactReadingPane.jsC:\Users\Doc\Downloads\cbsidlm-cbsi171-AdwCleaner-SEO-75851221.exe:Commands[EmptyTemp]
    

  •  Return to OTMoveIt3, right click in the "Paste Instructions for Items to be Moved" window (under the yellow bar) and choose Paste.

  • Click the red btnmoveit.png button.

  • Copy everything in the Results window (under the green bar) to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy), and paste it in your next reply.

  • Close OTM

Note: If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.

If the machine reboots, the Results log can be found here:

c:\_OTMoveIt\MovedFiles\mmddyyyy_hhmmss.log

Where mmddyyyy_hhmmss is the date of the tool run.
 
Next,
 
Adobe Reader is outdated...
Visit http://get.adobe.com/uk/reader/otherversions/ and download the latest version of Acrobat Reader
 
Step 1 - Select your Operating System.
Step 2 - Select your Langauge.
Step 3 - Select latest version.
 
Untick the option for any security scanner or toolbar if offered.
 
Download and install.
 
Having the latest updates ensures there are no security vulnerabilities in your system.
 
Next,
 
Your Java javaicon.gif is out of date. Older versions have vulnerabilities that malware can use to infect your system.
Please follow these steps to remove older version of Java components and upgrade the application.
 
Upgrading Java:
 
Go to http://java.com/en/ and click on "Do I have Java"
It will check your current version and then offer to update to the latest version
Watch for and make sure you untick the box next to whatever free program they prompt you to install during the installation, unless you want it.
 
***Note: Check in Programs and Features (or Add/Remove Programs if you are an XP user) to make certain there are no old versions of Java still installed, if so - remove them.
 
Let me know if those steps complete ok, post OTM log, also let me know if any remaining issues or concerns...


			
		


		

		
			

		
	


	

	

		
Link to post

		
			
		
		
		

		
			
Share on other sites

			

	


	

	

		
	




	



					
					
					
				

					

					
					






	

	

	

		

			

				


	
		chanceinit
	

				
				
			

		

		

			

				


chanceinit
			

			

				Posted 
				
			

		

	

	
	

		




	

		

			

				
    
					
						
  • Author
    • 
					
					
					
					
					
				

			

			
		


		

			Posted  
			
			
				
				
			
		

	


	


	

		
		

			
All processes killed
Error: Unable to interpret <:FilesC:\$Recycle.Bin\S-1-5-21-517927956-3188704247-810187072-1000\$R2U4T88\Uninstall.exeC:\Users\Doc\AppData\Local\Temp\NJ9x09k0.exe.partC:\Users\Doc\AppData\Roaming\Mozilla\Firefox\Profiles\vno77ekb.default\extensions\{13CF5C10-9020-1030-0448-9F14B1D26FB9}\components\CLSIDContactReadingPane.jsC:\Users\Doc\Downloads\cbsidlm-cbsi171-AdwCleaner-SEO-75851221.exe:Commands[EmptyTemp]> in the current context!
 
OTM by OldTimer - Version 3.1.21.0 log created on 01082014_074536
 


			
		


		

		
	


	

	

		
Link to post

		
			
		
		
		

		
			
Share on other sites

			

	


	

	

		
	




	



					
					
					
				

					

					
					






	

	

	

		

			

				


	
		kevinf80
	

				
				
			

		

		

			

				


kevinf80
			

			

				Posted 
				
			

		

	

	
	

		




	

		

			

				
    
					
					
					
					
					
				

			

			
		


		

			Posted  
			
			
				
				
			
		

	


	


	

		
		

			
Looks like you did not copy the script correctly to OTM text field, it must go in as a list as per the code box:
:FilesC:\$Recycle.Bin\S-1-5-21-517927956-3188704247-810187072-1000\$R2U4T88\Uninstall.exeC:\Users\Doc\AppData\Local\Temp\NJ9x09k0.exe.partC:\Users\Doc\AppData\Roaming\Mozilla\Firefox\Profiles\vno77ekb.default\extensions\{13CF5C10-9020-1030-0448-9F14B1D26FB9}\components\CLSIDContactReadingPane.jsC:\Users\Doc\Downloads\cbsidlm-cbsi171-AdwCleaner-SEO-75851221.exe:Commands[EmptyTemp]
Start with the colon and files :Files then each other line directly underneath....


			
		


		

		
			

		
	


	

	

		
Link to post

		
			
		
		
		

		
			
Share on other sites

			

	


	

	

		
	




	



					
					
					
				

					

					
					






	

	

	

		

			

				


	
		chanceinit
	

				
				
			

		

		

			

				


chanceinit
			

			

				Posted 
				
			

		

	

	
	

		




	

		

			

				
    
					
						
  • Author
    • 
					
					
					
					
					
				

			

			
		


		

			Posted  
			
			
				
				
			
		

	


	


	

		
		

			
All processes killed
========== FILES ==========
C:\$Recycle.Bin\S-1-5-21-517927956-3188704247-810187072-1000\$R2U4T88\Uninstall.exe moved successfully.
C:\Users\Doc\AppData\Local\Temp\NJ9x09k0.exe.part moved successfully.
C:\Users\Doc\AppData\Roaming\Mozilla\Firefox\Profiles\vno77ekb.default\extensions\{13CF5C10-9020-1030-0448-9F14B1D26FB9}\components\CLSIDContactReadingPane.js moved successfully.
C:\Users\Doc\Downloads\cbsidlm-cbsi171-AdwCleaner-SEO-75851221.exe moved successfully.
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: All Users
 
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 57472 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
 
User: Doc
->Temp folder emptied: 6077418 bytes
->Temporary Internet Files folder emptied: 12815856 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 87030124 bytes
->Flash cache emptied: 523856 bytes
 
User: Public
 
User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 56504 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 180224 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 117764237 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 349411147 bytes
RecycleBin emptied: 47729 bytes
 
Total Files Cleaned = 547.00 mb
 
 
OTM by OldTimer - Version 3.1.21.0 log created on 01082014_080740

Files moved on Reboot...
C:\Users\Doc\AppData\Local\Temp\MSI98f06.LOG moved successfully.
C:\Users\Doc\AppData\Local\Temp\RD250D.tmp moved successfully.
C:\Windows\temp\avg_a02676\avg-secure-search-installer.exe moved successfully.
File move failed. C:\Windows\temp\avg_secure_search.log scheduled to be moved on reboot.
File C:\Windows\temp\OutofProcReport1526093.txt not found!
C:\Windows\temp\ri_{E42FD8C0-C3F4-4EDE-8BDB-37DB6442F3ED}.exe moved successfully.
C:\Windows\temp\wbxtra_01082014_074636.wbt moved successfully.

Registry entries deleted on Reboot...
 


			
		


		

		
	


	

	

		
Link to post

		
			
		
		
		

		
			
Share on other sites

			

	


	

	

		
	




	



					
					
					
				

					

					
					





					
					
					
				

					

					
					





					
					
					
				

					

					
					





					
					
					
				

					

					
					





					
					
					
				

					

					
					





					
					
					
				

					

					
					





					
					
					
				

					

					
					





					
					
					
				

					

					
					





					
					
					
				

					

					
					






	

	

	

		

			

				


	
		LDTate
	

				
				
			

		

		

			

				


LDTate
			

			

				Posted 
				
			

		

	

	
	

		




	

		

			

				
    
					
					
					
					
					
				

			

			
		


		

			Posted  
			
			
				
				
			
		

	


	


	

		
		

			
Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!


			
		


		

		
			

		
	


	

	

		
Link to post

		
			
		
		
		

		
			
Share on other sites

			

	


	

	

		
	




	



					
					
					
				
			
			



		

	


	
	
	
	
	
		
	

			
				
					


	


	
		Guest
	


	

		

			 This topic is now closed to further replies. 
		
			
		

	



				
			
		

	

	
		

			

				
					


    
          Share
    

    

        
        
            

            
        
    


				
				
					

				
                

                


				
			

		

	







	

		
			
				Go to topic listing
			
		
	

	




						


	

		
    
			
				
					
					
  • 

    
    
    
        
            Recently Browsing
        
        
          0 members
        
    
    
    
    
        
      
            
                
    • No registered users viewing this page.
      • 
            
        
    
        
    
    

    • 
				
			
		

	


					

					


					

				

			

			
		

		
         
 Back to top

      			
			


	

		×
		

			
				

					
				

			

			

			

			
		

	






	

		×
		

			
    
				
  • Create New...
    • 
				
			

		

	



			






















	

		

			
Important Information

			
This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.