Redirects and compromised banking log on?

luckygals · February 8, 2014

Hi, i have been infected by something that is asking for all important detail about my bank and login details. I ran a few programs i was told could help ie.

RKill

JRT

Adwarecleaner

Rogue Killer and malwalwarebytes

I am still afraid to use computer for banking and the bank has suspended my online banking until i get my computer sorted. Here are my logs.

DDS (Ver_2012-11-20.01) - NTFS_AMD64

Internet Explorer: 11.0.9600.16428 BrowserJavaVersion: 1.6.0_29

Run by user at 9:21:35 on 2014-02-08

Microsoft Windows 7 Home Premium 6.1.7601.1.1252.44.1033.18.4040.2584 [GMT 0:00]

.

AV: Microsoft Security Essentials *Enabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}

SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

SP: Microsoft Security Essentials *Enabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}

.

============== Running Processes ===============

.

C:\Windows\system32\lsm.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\svchost.exe -k RPCSS

C:\Program Files\Microsoft Security Client\MsMpEng.exe

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k NetworkService

C:\Windows\System32\spoolsv.exe

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

C:\Program Files (x86)\Acer\Registration\GREGsvc.exe

C:\Windows\system32\lxbkcoms.exe

C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

C:\Windows\system32\taskhost.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Windows\system32\taskeng.exe

C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe

C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe

C:\Windows\system32\svchost.exe -k imgsvc

C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe

C:\Program Files\Acer\Acer Updater\UpdaterService.exe

C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

C:\Windows\System32\svchost.exe -k WerSvcGroup

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe

C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE

C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\Windows\System32\igfxpers.exe

C:\Program Files\Microsoft Security Client\msseces.exe

C:\Users\user\AppData\Roaming\Dropbox\bin\Dropbox.exe

C:\Windows\system32\SearchIndexer.exe

C:\Windows\System32\WUDFHost.exe

C:\Program Files\Windows Media Player\wmpnetwk.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe

C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

C:\Windows\system32\sppsvc.exe

C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Program Files\Microsoft Security Client\NisSrv.exe

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Program Files\Microsoft Security Client\MpCmdRun.exe

C:\Windows\system32\SearchProtocolHost.exe

C:\Windows\system32\SearchFilterHost.exe

C:\Windows\explorer.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Windows\System32\cscript.exe

.

============== Pseudo HJT Report ===============

.

mWinlogon: Userinit = userinit.exe,

BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

BHO: Windows Live Messenger Companion Helper: {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll

BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll

uRun: [Exetender] "C:\Program Files (x86)\Free Ride Games\GPlayer.exe" /runonstartup

mRun: [MDS_Menu] "C:\Program Files (x86)\Acer Arcade Deluxe\MediaEspresso\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Acer Arcade Deluxe\MediaEspresso" UpdateWithCreateOnce "Software\CyberLink\MediaEspresso\6.1"

dRun: [Exetender] "C:\Program Files (x86)\Free Ride Games\GPlayer.exe" /runonstartup

StartupFolder: C:\Users\user\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\Dropbox.lnk - C:\Users\user\AppData\Roaming\Dropbox\bin\Dropbox.exe

uPolicies-Explorer: AlwaysShowClassicMenu = dword:1

uPolicies-Explorer: NoDriveTypeAutoRun = dword:145

mPolicies-Explorer: NoActiveDesktop = dword:1

mPolicies-System: ConsentPromptBehaviorAdmin = dword:5

mPolicies-System: ConsentPromptBehaviorUser = dword:3

mPolicies-System: EnableUIADesktopToggle = dword:0

mPolicies-System: SynchronousMachineGroupPolicy = dword:1

mPolicies-System: SynchronousUserGroupPolicy = dword:1

mPolicies-Windows\System: AllowBlockingAppsAtShutdown = dword:1

IE: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr/200

IE: Download with Mipony - C:\Program Files (x86)\MiPony\Browser\IEContext.htm

IE: {0000036B-C524-4050-81A0-243669A86B9F} - {B63DBA5F-523F-4B9C-A43D-65DF1977EAD3} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll

IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} -

TCP: NameServer = 192.168.1.1

TCP: Interfaces\{302AB316-07AC-4C60-BE52-4759A6C407DA} : DHCPNameServer = 192.168.1.1

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll

Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

SSODL: WebCheck - <orphaned>

mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome

x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

x64-BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll

x64-Run: [igfxTray] C:\Windows\System32\igfxtray.exe

x64-Run: [Persistence] C:\Windows\System32\igfxpers.exe

x64-Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey

x64-IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll

x64-Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll

x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>

x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>

x64-Notify: igfxcui - igfxdev.dll

x64-SSODL: WebCheck - <orphaned>

.

================= FIREFOX ===================

.

FF - ProfilePath - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\6s2izxyg.default\

FF - plugin: C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL

FF - plugin: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

FF - plugin: C:\Program Files (x86)\Free Ride Games\npExentCtl.dll

FF - plugin: C:\Program Files (x86)\Free Ride Games\npGameTreatWidget.dll

FF - plugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll

FF - plugin: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll

FF - plugin: C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll

FF - plugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll

FF - plugin: C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrlui.dll

FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

FF - plugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\6s2izxyg.default\extensions\{f92a9fe4-2850-4198-b9d5-279880e49b16}\plugins\np-mswmp.dll

FF - plugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\6s2izxyg.default\extensions\{f92a9fe4-2850-4198-b9d5-279880e49b16}\plugins\npConduitFirefoxPlugin.dll

FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll

.

============= SERVICES / DRIVERS ===============

.

R0 MpFilter;Microsoft Malware Protection Driver;C:\Windows\System32\drivers\MpFilter.sys [2013-9-27 248240]

R1 mwlPSDFilter;mwlPSDFilter;C:\Windows\System32\drivers\mwlPSDFilter.sys [2009-6-3 22576]

R1 mwlPSDNServ;mwlPSDNServ;C:\Windows\System32\drivers\mwlPSDNserv.sys [2009-6-3 20016]

R1 mwlPSDVDisk;mwlPSDVDisk;C:\Windows\System32\drivers\mwlPSDVDisk.sys [2009-6-3 60464]

R2 cvhsvc;Client Virtualization Handler;C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE [2013-4-22 822504]

R2 GREGService;GREGService;C:\Program Files (x86)\Acer\Registration\GREGsvc.exe [2010-1-8 23584]

R2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-11-17 13336]

R2 lxbk_device;lxbk_device;C:\Windows\System32\lxbkcoms.exe -service --> C:\Windows\System32\lxbkcoms.exe -service [?]

R2 MBAMScheduler;MBAMScheduler;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2014-2-7 418376]

R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2014-2-7 701512]

R2 NisDrv;Microsoft Network Inspection System;C:\Windows\System32\drivers\NisDrvWFP.sys [2011-4-27 134944]

R2 sftlist;Application Virtualization Client;C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2013-6-26 523944]

R2 Skype C2C Service;Skype C2C Service;C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2013-10-9 3275136]

R2 TeamViewer7;TeamViewer 7;C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [2012-1-4 2848168]

R2 UNS;Intel® Management and Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2010-11-17 2655768]

R2 Updater Service;Updater Service;C:\Program Files\Acer\Acer Updater\UpdaterService.exe [2010-11-17 243232]

R3 IntcDAud;Intel® Display Audio;C:\Windows\System32\drivers\IntcDAud.sys [2010-11-17 317440]

R3 MBAMProtector;MBAMProtector;C:\Windows\System32\drivers\mbam.sys [2014-2-7 25928]

R3 NisSrv;Microsoft Network Inspection;C:\Program Files\Microsoft Security Client\NisSrv.exe [2013-10-23 348376]

R3 Sftfs;Sftfs;C:\Windows\System32\drivers\Sftfslh.sys [2013-6-26 767144]

R3 Sftplay;Sftplay;C:\Windows\System32\drivers\Sftplaylh.sys [2013-6-26 273576]

R3 Sftredir;Sftredir;C:\Windows\System32\drivers\Sftredirlh.sys [2013-6-26 28840]

R3 Sftvol;Sftvol;C:\Windows\System32\drivers\Sftvollh.sys [2013-6-26 23208]

R3 sftvsa;Application Virtualization Service Agent;C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2013-6-26 207528]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]

S2 MgAssistService;MgAssist Service;C:\Program Files (x86)\Mobogenie\MgAssist.exe --> C:\Program Files (x86)\Mobogenie\MgAssist.exe [?]

S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]

S3 IEEtwCollectorService;Internet Explorer ETW Collector Service;C:\Windows\System32\ieetwcollector.exe [2013-12-12 111616]

S3 MWLService;MyWinLocker Service;C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [2010-5-27 305520]

S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2011-12-26 59392]

S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2011-12-22 1255736]

S4 wlcrasvc;Windows Live Mesh remote connections service;C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-9-22 57184]

.

=============== Created Last 30 ================

.

2014-02-07 22:51:41 53248 ----a-w- C:\Windows\SysWow64\zlib.dll

2014-02-07 20:54:29 25928 ----a-w- C:\Windows\System32\drivers\mbam.sys

2014-02-07 16:09:05 -------- d-----w- C:\AdwCleaner

2014-02-07 16:05:39 -------- d-----w- C:\Support

2014-02-07 15:56:01 10315576 ----a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{598F7A9B-935F-4AC5-9EC4-202093F9BF1F}\mpengine.dll

2014-02-06 09:54:28 -------- d-----w- C:\Users\user\AppData\Roaming\Malwarebytes

2014-02-06 09:54:22 -------- d-----w- C:\ProgramData\Malwarebytes

2014-02-06 09:54:21 -------- d-----w- C:\Users\user\AppData\Local\Programs

2014-02-06 09:54:21 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware

2014-01-31 23:00:22 -------- d-----w- C:\Users\user\AppData\Local\wrkehcle

2014-01-31 22:17:48 10315576 ----a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll

2014-01-23 12:36:02 965000 ------w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{FA7FB8AE-C20A-40DD-A259-2023361A9DF0}\gapaengine.dll

2014-01-15 08:55:13 53248 ----a-w- C:\Windows\System32\drivers\usbehci.sys

2014-01-15 08:55:12 99840 ----a-w- C:\Windows\System32\drivers\usbccgp.sys

2014-01-15 08:55:12 7808 ----a-w- C:\Windows\System32\drivers\usbd.sys

2014-01-15 08:55:12 343040 ----a-w- C:\Windows\System32\drivers\usbhub.sys

2014-01-15 08:55:12 325120 ----a-w- C:\Windows\System32\drivers\usbport.sys

2014-01-15 08:55:12 30720 ----a-w- C:\Windows\System32\drivers\usbuhci.sys

2014-01-15 08:55:12 25600 ----a-w- C:\Windows\System32\drivers\usbohci.sys

2014-01-15 08:54:42 3156480 ----a-w- C:\Windows\System32\win32k.sys

2014-01-15 08:54:12 376768 ----a-w- C:\Windows\System32\drivers\netio.sys

.

==================== Find3M ====================

.

2014-02-05 07:39:32 71048 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl

2014-02-05 07:39:32 692616 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe

2014-01-16 09:59:44 270496 ------w- C:\Windows\System32\MpSigStub.exe

2013-11-26 10:19:07 2724864 ----a-w- C:\Windows\System32\mshtml.tlb

2013-11-26 10:18:23 4096 ----a-w- C:\Windows\System32\ieetwcollectorres.dll

2013-11-26 09:48:07 66048 ----a-w- C:\Windows\System32\iesetup.dll

2013-11-26 09:46:25 48640 ----a-w- C:\Windows\System32\ieetwproxystub.dll

2013-11-26 09:23:02 2724864 ----a-w- C:\Windows\SysWow64\mshtml.tlb

2013-11-26 09:18:39 139264 ----a-w- C:\Windows\System32\ieUnatt.exe

2013-11-26 09:18:09 111616 ----a-w- C:\Windows\System32\ieetwcollector.exe

2013-11-26 09:16:57 708608 ----a-w- C:\Windows\System32\jscript9diag.dll

2013-11-26 08:35:02 5769216 ----a-w- C:\Windows\System32\jscript9.dll

2013-11-26 08:28:16 553472 ----a-w- C:\Windows\SysWow64\jscript9diag.dll

2013-11-26 08:16:12 4243968 ----a-w- C:\Windows\SysWow64\jscript9.dll

2013-11-26 08:02:16 1995264 ----a-w- C:\Windows\System32\inetcpl.cpl

2013-11-26 07:32:06 1928192 ----a-w- C:\Windows\SysWow64\inetcpl.cpl

2013-11-26 07:07:57 2334208 ----a-w- C:\Windows\System32\wininet.dll

2013-11-26 06:33:33 1820160 ----a-w- C:\Windows\SysWow64\wininet.dll

2013-11-23 18:26:20 417792 ----a-w- C:\Windows\SysWow64\WMPhoto.dll

2013-11-23 17:47:34 465920 ----a-w- C:\Windows\System32\WMPhoto.dll

2013-11-12 02:23:09 2048 ----a-w- C:\Windows\System32\tzres.dll

2013-11-12 02:07:29 2048 ----a-w- C:\Windows\SysWow64\tzres.dll

.

============= FINISH: 9:23:55.72 ===============

.

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

.

DDS (Ver_2012-11-20.01)

.

Microsoft Windows 7 Home Premium

Boot Device: \Device\HarddiskVolume2

Install Date: 27/07/2011 15:09:21

System Uptime: 08/02/2014 09:14:37 (0 hours ago)

.

Motherboard: Acer | | Aspire X3960

Processor: Intel® Core i3-2100 CPU @ 3.10GHz | CPU 1 | 3100/100mhz

.

==== Disk Partitions =========================

.

C: is FIXED (NTFS) - 458 GiB total, 402.635 GiB free.

D: is FIXED (NTFS) - 458 GiB total, 456.799 GiB free.

E: is CDROM ()

F: is Removable

G: is Removable

H: is Removable

I: is Removable

.

==== Disabled Device Manager Items =============

.

Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Description: X5XSEx_Pr143

Device ID: ROOT\LEGACY_X5XSEX_PR143\0000

Manufacturer:

Name: X5XSEx_Pr143

PNP Device ID: ROOT\LEGACY_X5XSEX_PR143\0000

Service: X5XSEx_Pr143

.

==== System Restore Points ===================

.

RP246: 10/12/2013 21:25:36 - Windows Update

RP247: 12/12/2013 08:55:42 - Windows Update

RP248: 14/12/2013 10:15:25 - Windows Update

RP249: 17/12/2013 12:17:30 - Windows Update

RP250: 20/12/2013 22:02:48 - Windows Update

RP251: 24/12/2013 12:58:57 - Windows Update

RP252: 24/12/2013 21:56:02 - Installed DirectX

RP253: 28/12/2013 09:35:10 - Windows Update

RP254: 31/12/2013 19:01:44 - Windows Update

RP255: 04/01/2014 16:22:58 - Windows Update

RP256: 08/01/2014 11:53:05 - Windows Update

RP257: 11/01/2014 16:42:32 - Windows Update

RP258: 15/01/2014 09:19:30 - Windows Update

RP259: 19/01/2014 11:04:47 - Windows Update

RP260: 23/01/2014 12:34:31 - Windows Update

RP261: 27/01/2014 10:06:46 - Windows Update

RP262: 30/01/2014 21:19:57 - Windows Update

.

==== Installed Programs ======================

.

Acer Arcade Deluxe

Acer Arcade Movie

Acer eRecovery Management

Acer GameZone Console

Acer Registration

Acer ScreenSaver

Acer Updater

Acrobat.com

Adobe AIR

Adobe Flash Player 12 ActiveX

Adobe Flash Player 12 Plugin

Adobe Reader X (10.1.2)

Advertising Center

Airport Mania First Flight

Alchemy 1.2

Amazonia

Bejeweled 2

Brain Teasers

BrowseSmart

Cake Mania

CCleaner

Cradle of Rome

D3DX10

Daily Mah Jong

Dream Day First Home

Dropbox

eBay Worldwide

eSobi v2

ExtractNow

Farm Frenzy 2

FileHippo.com Update Checker

FolderHighlight 2.1

Galapago

Google Chrome

Google Earth

Google Update Helper

Heartwild Solitaire - Book Two

Heroes of Hellas

Hotkey Utility

Hoyle Puzzle Games 2005

Identity Card

ImagXpress

Intel® Control Center

Intel® Management Engine Components

Intel® Processor Graphics

Intel® Rapid Storage Technology

Java Auto Updater

Java 6 Update 29

Java 7 Update 2 (64-bit)

Jewel Quest Solitaire III

Junk Mail filter update

Lexmark X1100 Series

Magic Inlay (RA)

Mah Jong Medley

Malwarebytes Anti-Malware version 1.75.0.1300

MediaEspresso

Merriam Websters Spell Jam

Mesh Runtime

Messenger Companion

Microsoft .NET Framework 4 Client Profile

Microsoft .NET Framework 4 Extended

Microsoft Application Error Reporting

Microsoft Office 2010

Microsoft Office Click-to-Run 2010

Microsoft Office Starter 2010 - English

Microsoft Security Client

Microsoft Security Essentials

Microsoft Silverlight

Microsoft SQL Server 2005 Compact Edition [ENU]

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053

Microsoft Visual C++ 2005 Redistributable

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319

MiPony 1.5.3

Mozilla Firefox 27.0 (x86 en-US)

Mozilla Maintenance Service

MSVCRT

MSVCRT_amd64

MSXML 4.0 SP2 (KB954430)

MSXML 4.0 SP2 (KB973688)

MyWinLocker

MyWinLocker Suite

Nero 9 Essentials

Nero ControlCenter

Nero DiscSpeed

Nero DiscSpeed Help

Nero DriveSpeed

Nero DriveSpeed Help

Nero Express Help

Nero InfoTool

Nero InfoTool Help

Nero Installer

Nero Online Upgrade

Nero StartSmart

Nero StartSmart Help

Nero StartSmart OEM

NeroExpress

neroxml

Picasa 3

Poker Pop

Puzzle Solitaire

Real Alternative 2.0.2

Realtek High Definition Audio Driver

Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2736428)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2804576)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2835393)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2840628)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2840628v2)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2858302v2)

Security Update for Microsoft .NET Framework 4 Extended (KB2416472)

Security Update for Microsoft .NET Framework 4 Extended (KB2487367)

Security Update for Microsoft .NET Framework 4 Extended (KB2656351)

Security Update for Microsoft .NET Framework 4 Extended (KB2736428)

Security Update for Microsoft .NET Framework 4 Extended (KB2742595)

Security Update for Microsoft .NET Framework 4 Extended (KB2858302v2)

Shredder

Skype Click to Call

Skype™ 6.11

Solitaire3

Spin & Win

Super GameHouse Solitaire Vol. 3

TeamViewer 7

The KMPlayer (remove only)

The Treasures of Montezuma

Time Riddles: The Mansion

TurtleBay

Update for Microsoft .NET Framework 4 Client Profile (KB2468871)

Update for Microsoft .NET Framework 4 Client Profile (KB2473228)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3)

Update for Microsoft .NET Framework 4 Extended (KB2468871)

Update for Microsoft .NET Framework 4 Extended (KB2533523)

Update for Microsoft .NET Framework 4 Extended (KB2600217)

Update for Microsoft .NET Framework 4 Extended (KB2836939)

Update for Microsoft .NET Framework 4 Extended (KB2836939v3)

VLC media player 1.1.11

Welcome Center

Windows 7 Manager

Windows Live Communications Platform

Windows Live Essentials

Windows Live ID Sign-in Assistant

Windows Live Installer

Windows Live Language Selector

Windows Live Mail

Windows Live Mesh

Windows Live Mesh ActiveX Control for Remote Connections

Windows Live Messenger

Windows Live Messenger Companion Core

Windows Live MIME IFilter

Windows Live Movie Maker

Windows Live Photo Common

Windows Live Photo Gallery

Windows Live PIMT Platform

Windows Live Remote Client

Windows Live Remote Client Resources

Windows Live Remote Service

Windows Live Remote Service Resources

Windows Live SOXE

Windows Live SOXE Definitions

Windows Live UX Platform

Windows Live UX Platform Language Pack

Windows Live Writer

Windows Live Writer Resources

WinRAR 4.00 beta 1 (64-bit)

Your Uninstaller! 7

.

==== Event Viewer Messages From Past Week ========

.

08/02/2014 09:15:49, Error: Service Control Manager [7023] - The Function Discovery Resource Publication service terminated with the following error: %%-2147024891

08/02/2014 09:15:49, Error: Service Control Manager [7001] - The HomeGroup Provider service depends on the Function Discovery Resource Publication service which failed to start because of the following error: %%-2147024891

08/02/2014 09:15:32, Error: Service Control Manager [7023] - The Computer Browser service terminated with the following error: The specified service does not exist as an installed service.

08/02/2014 09:15:07, Error: Service Control Manager [7000] - The X5XSEx_Pr143 service failed to start due to the following error: The system cannot find the path specified.

08/02/2014 09:15:05, Error: Service Control Manager [7000] - The MgAssist Service service failed to start due to the following error: The system cannot find the file specified.

07/02/2014 22:45:14, Error: Disk [11] - The driver detected a controller error on \Device\Harddisk3\DR3.

07/02/2014 16:12:08, Error: Service Control Manager [7000] - The Windows Live ID Sign-in Assistant service failed to start due to the following error: The system cannot find the path specified.

07/02/2014 16:12:08, Error: Service Control Manager [7000] - The Print Spooler service failed to start due to the following error: The system cannot find the path specified.

07/02/2014 16:12:08, Error: Service Control Manager [7000] - The Intel® Management and Security Application Local Management Service service failed to start due to the following error: The system cannot find the path specified.

07/02/2014 16:11:58, Error: Service Control Manager [7031] - The Windows Search service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.

07/02/2014 16:11:58, Error: Service Control Manager [7031] - The Windows Media Player Network Sharing Service service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.

07/02/2014 16:11:58, Error: Service Control Manager [7031] - The Windows Live ID Sign-in Assistant service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.

07/02/2014 16:11:58, Error: Service Control Manager [7031] - The Intel® Management and Security Application Local Management Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.

07/02/2014 16:11:38, Error: Service Control Manager [7032] - The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Windows Search service, but this action failed with the following error: An instance of the service is already running.

07/02/2014 16:11:10, Error: Service Control Manager [7034] - The Application Virtualization Client service terminated unexpectedly. It has done this 1 time(s).

07/02/2014 16:11:08, Error: Service Control Manager [7034] - The Updater Service service terminated unexpectedly. It has done this 1 time(s).

07/02/2014 16:11:08, Error: Service Control Manager [7034] - The Skype C2C Service service terminated unexpectedly. It has done this 1 time(s).

07/02/2014 16:11:08, Error: Service Control Manager [7034] - The MgAssist Service service terminated unexpectedly. It has done this 1 time(s).

07/02/2014 16:11:08, Error: Service Control Manager [7034] - The lxbk_device service terminated unexpectedly. It has done this 1 time(s).

07/02/2014 16:11:08, Error: Service Control Manager [7034] - The Intel® Rapid Storage Technology service terminated unexpectedly. It has done this 1 time(s).

07/02/2014 16:11:08, Error: Service Control Manager [7034] - The Intel® Management and Security Application User Notification Service service terminated unexpectedly. It has done this 1 time(s).

07/02/2014 16:11:08, Error: Service Control Manager [7034] - The GREGService service terminated unexpectedly. It has done this 1 time(s).

07/02/2014 16:11:08, Error: Service Control Manager [7034] - The Google Update Service (gupdate) service terminated unexpectedly. It has done this 1 time(s).

07/02/2014 16:11:08, Error: Service Control Manager [7034] - The Client Virtualization Handler service terminated unexpectedly. It has done this 1 time(s).

07/02/2014 16:11:08, Error: Service Control Manager [7034] - The Application Virtualization Service Agent service terminated unexpectedly. It has done this 1 time(s).

07/02/2014 16:11:08, Error: Service Control Manager [7034] - The Adobe Acrobat Update Service service terminated unexpectedly. It has done this 1 time(s).

07/02/2014 16:11:08, Error: Service Control Manager [7031] - The Windows Search service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.

07/02/2014 16:11:08, Error: Service Control Manager [7031] - The Windows Media Player Network Sharing Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.

07/02/2014 16:11:08, Error: Service Control Manager [7031] - The Windows Live ID Sign-in Assistant service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.

07/02/2014 16:11:08, Error: Service Control Manager [7031] - The Util BrowseSmart service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 5000 milliseconds: Restart the service.

07/02/2014 16:11:08, Error: Service Control Manager [7031] - The Update BrowseSmart service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 5000 milliseconds: Restart the service.

07/02/2014 16:11:08, Error: Service Control Manager [7031] - The Print Spooler service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.

07/02/2014 15:55:54, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.165.3064.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: Default URL Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.10201.0 Error code: 0x80070422 Error description: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

07/02/2014 15:39:34, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 109.107.0.0 Update Source: Microsoft Malware Protection Center Update Stage: Search Source Path: http://go.microsoft.com/fwlink/?LinkID=260974&clcid=0x409&NRI=true&arch=x64&eng=2.1.10003.0&sig=109.107.0.0∏=EDB4FA23-53B8-4AFA-8C5D-99752CCA7094 Signature Type: Network Inspection System Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: Previous Engine Version: 2.1.10003.0 Error code: 0x80072ee7 Error description: The server name or address could not be resolved

07/02/2014 15:39:34, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.165.3064.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: Default URL Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.10201.0 Error code: 0x80070422 Error description: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

07/02/2014 15:39:34, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.165.3064.0 Update Source: Microsoft Malware Protection Center Update Stage: Search Source Path: http://go.microsoft.com/fwlink/?LinkID=121721&clcid=0x409&arch=x64&eng=1.1.10201.0&avdelta=1.165.3064.0&asdelta=1.165.3064.0∏=EDB4FA23-53B8-4AFA-8C5D-99752CCA7094 Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: Previous Engine Version: 1.1.10201.0 Error code: 0x80072ee7 Error description: The server name or address could not be resolved

07/02/2014 15:39:34, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.165.3064.0 Update Source: Microsoft Malware Protection Center Update Stage: Search Source Path: http://go.microsoft.com/fwlink/?LinkID=121721&clcid=0x409&arch=x64&eng=1.1.10201.0&avdelta=1.165.3064.0&asdelta=1.165.3064.0∏=EDB4FA23-53B8-4AFA-8C5D-99752CCA7094 Signature Type: AntiSpyware Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: Previous Engine Version: 1.1.10201.0 Error code: 0x80072ee7 Error description: The server name or address could not be resolved

07/02/2014 10:28:57, Error: Ntfs [137] - The default transaction resource manager on volume \\?\Volume{9e738ad9-8fe2-11e3-a244-806e6f6e6963} encountered a non-retryable error and could not start. The data contains the error code.

06/02/2014 09:27:26, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.165.3064.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: Default URL Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.10201.0 Error code: 0x80070422 Error description: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

06/02/2014 09:04:25, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.165.3064.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: Default URL Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.10201.0 Error code: 0x80070422 Error description: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

05/02/2014 22:15:08, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.165.3064.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: Default URL Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.10201.0 Error code: 0x80070422 Error description: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

05/02/2014 12:13:28, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.165.3064.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: Default URL Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.10201.0 Error code: 0x80070422 Error description: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

05/02/2014 09:28:15, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.165.3064.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: Default URL Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.10201.0 Error code: 0x80070422 Error description: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

05/02/2014 09:10:05, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.165.3064.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: Default URL Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.10201.0 Error code: 0x80070422 Error description: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

05/02/2014 08:48:26, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.165.3064.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: Default URL Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.10201.0 Error code: 0x80070422 Error description: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

05/02/2014 07:49:02, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.165.3064.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: Default URL Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.10201.0 Error code: 0x80070422 Error description: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

04/02/2014 21:16:20, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.165.3064.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: Default URL Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.10201.0 Error code: 0x80070422 Error description: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

04/02/2014 18:06:22, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.165.3064.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: Default URL Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.10201.0 Error code: 0x80070422 Error description: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

04/02/2014 15:19:28, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.165.3064.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: Default URL Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.10201.0 Error code: 0x80070422 Error description: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

04/02/2014 13:56:47, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.165.3064.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: Default URL Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.10201.0 Error code: 0x80070422 Error description: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

04/02/2014 12:18:56, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.165.3064.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: Default URL Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.10201.0 Error code: 0x80070422 Error description: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

04/02/2014 12:15:33, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.165.3064.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: Default URL Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.10201.0 Error code: 0x80070422 Error description: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

04/02/2014 09:36:32, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.165.3064.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: Default URL Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.10201.0 Error code: 0x80070422 Error description: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

03/02/2014 21:18:41, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.165.3064.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: Default URL Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.10201.0 Error code: 0x80070422 Error description: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

03/02/2014 09:33:25, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.165.3064.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: Default URL Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.10201.0 Error code: 0x80070422 Error description: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

02/02/2014 19:55:54, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.165.3064.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: Default URL Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.10201.0 Error code: 0x80070422 Error description: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

02/02/2014 13:47:46, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.165.3064.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: Default URL Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.10201.0 Error code: 0x80070422 Error description: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

02/02/2014 12:15:21, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.165.3064.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: Default URL Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.10201.0 Error code: 0x80070422 Error description: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

.

==== End Of File ===========================

Thanks in advance for your help

kevinf80 · February 8, 2014

Please note:

If you have Malwarebytes Pro as a paying customer you qualify for help at Consumer Support If you choose that option to get help, please let me know.

If you do not qualify or decline that help we continue, Please be aware of the following:

P2P/Piracy Warning:

If you're using Peer 2 Peer software such as uTorrent, BitTorrent or similar you must either fully uninstall them or completely disable them from running while being assisted here.
Failure to remove or disable such software will result in your topic being closed and no further assistance being provided.
If you have illegal/cracked software, cracks, keygens etc. on the system, please remove or uninstall them now and read the policy on Piracy.

Next,

Download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system (32 bit or 64 bit). If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

Kevin....

luckygals · February 8, 2014

Hi and thank you for your quick response. Sorry about the double post, the forum said not responding at first try and saved my text so i tried again and it posted again in error.

My scan results

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-02-2014

Ran by user (administrator) on USER-PC on 08-02-2014 13:49:09

Running from C:\Users\user\Desktop

Windows 7 Home Premium Service Pack 1 (X64) OS Language: English(US)

Internet Explorer Version 11

Boot Mode: Normal

The only official download link for FRST:

Download link for 32-Bit version:

Download link for 64-Bit Version:

Download link from any site other than Bleeping Computer is unpermitted or outdated.

See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe

(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe

( ) C:\Windows\System32\lxbkcoms.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe

(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe

(Acer Group) C:\Program Files\Acer\Acer Updater\UpdaterService.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(Dropbox, Inc.) C:\Users\user\AppData\Roaming\Dropbox\bin\Dropbox.exe

(CyberLink Corp.) C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe

(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE

(Microsoft Corporation) C:\Windows\System32\UI0Detect.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MpCmdRun.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)

HKLM-x32\...\Run: [MDS_Menu] - C:\Program Files (x86)\Acer Arcade Deluxe\MediaEspresso\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKU\.DEFAULT\...\Run: [Exetender] - "C:\Program Files (x86)\Free Ride Games\GPlayer.exe" /runonstartup

HKU\S-1-5-19\...\Run: [Exetender] - "C:\Program Files (x86)\Free Ride Games\GPlayer.exe" /runonstartup

HKU\S-1-5-20\...\Run: [Exetender] - "C:\Program Files (x86)\Free Ride Games\GPlayer.exe" /runonstartup

HKU\S-1-5-21-764395833-1939329319-3225455460-1000\...\Run: [Exetender] - "C:\Program Files (x86)\Free Ride Games\GPlayer.exe" /runonstartup

HKU\S-1-5-21-764395833-1939329319-3225455460-1000\...\Policies\Explorer: [AlwaysShowClassicMenu] 1

Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Users\user\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer.msn.com

HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={sear

SearchScopes: HKCU - {C710F991-B813-491B-A0CB-8540172F1477} URL = http://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dnldstr1202&cd=2XzuyEtN2Y1L1QzutCtDyBzz0DtB0Ezy0F0FyBzzzyzz0EtDtN0D0Tzu0SyBtByCtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=281459687&ir=

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)

BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)

BHO-x32: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)

DPF: HKLM-x32 {6A060448-60F9-11D5-A6CD-0002B31F7455}

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)

Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:

========

FF ProfilePath: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\6s2izxyg.default

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()

FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE - disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()

FF Plugin-x32: @exent.com/npExentCtl,version=7.0.0.0 - C:\Program Files (x86)\Free Ride Games\npExentCtl.dll No File

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)

FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)

FF Plugin-x32: @microsoft.com/GENUINE - disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @real.com/nppl3260;version=6.0.12.450 - C:\Program Files (x86)\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.448 - C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=1.1.11 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (the VideoLAN Team)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin-x32: www.exent.com/GameTreatWidget - C:\Program Files (x86)\Free Ride Games\NPGameTreatPlugin.dll No File

FF SearchPlugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\6s2izxyg.default\searchplugins\a-free-ride-games-bar-customized-web-search.xml

FF Extension: CuteButtons - Crystal SVG - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\6s2izxyg.default\Extensions\CuteButtonsCrystalSVG@ChoGGi [2012-02-14]

FF Extension: Fast Translation - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\6s2izxyg.default\Extensions\fasttrans@kemot [2013-07-20]

FF Extension: Toolbar Buttons - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\6s2izxyg.default\Extensions\{03B08592-E5B4-45ff-A0BE-C1D975458688} [2011-12-22]

FF Extension: InFormEnter - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\6s2izxyg.default\Extensions\{5546F97E-11A5-46b0-9082-32AD74AAA920} [2013-10-22]

FF Extension: SearchPreview - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\6s2izxyg.default\Extensions\{EF522540-89F5-46b9-B6FE-1829E2B572C6} [2014-02-05]

FF Extension: Copy Link Text - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\6s2izxyg.default\Extensions\copylinktext@brett.zamir.xpi [2011-12-22]

FF Extension: InstaClick - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\6s2izxyg.default\Extensions\instaclick@leahscape.com.xpi [2011-12-21]

FF Extension: Translate This! - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\6s2izxyg.default\Extensions\jid0-k75TfRGfOXPHfEZmJ9cKu5eCgLc@jetpack.xpi [2012-11-04]

FF Extension: Restart Firefox - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\6s2izxyg.default\Extensions\restart@restart.org.xpi [2011-12-22]

FF Extension: Saved Passwords Button (Gemte adgangskoder) - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\6s2izxyg.default\Extensions\savedpasswords@adamfranco.com.xpi [2011-12-22]

FF Extension: Dict.cc Translation - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\6s2izxyg.default\Extensions\searchdictcc@roughael.xpi [2012-11-06]

FF Extension: FastestFox - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\6s2izxyg.default\Extensions\smarterwiki@wikiatic.com.xpi [2011-12-21]

FF Extension: Test Pilot - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\6s2izxyg.default\Extensions\testpilot@labs.mozilla.com.xpi [2011-12-23]

FF Extension: Tools Menu Button - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\6s2izxyg.default\Extensions\toolsMenuButton@peter.faj.xpi [2011-12-22]

FF Extension: Google Translator for Firefox - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\6s2izxyg.default\Extensions\translator@zoli.bod.xpi [2012-11-04]

FF Extension: Undo Closed Tabs Button - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\6s2izxyg.default\Extensions\undoclosedtabsbutton@supernova00.biz.xpi [2011-12-21]

FF Extension: Remove Cookies for Site - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\6s2izxyg.default\Extensions\{06997db0-c027-4d5f-bd37-b0d9230226ea}.xpi [2013-08-05]

FF Extension: X-notifier - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\6s2izxyg.default\Extensions\{37fa1426-b82d-11db-8314-0800200c9a66}.xpi [2012-03-17]

FF Extension: Compact Menu 2 - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\6s2izxyg.default\Extensions\{57068FBE-1506-42ee-AB02-BD183E7999E4}.xpi [2011-12-22]

FF Extension: Quick Translator - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\6s2izxyg.default\Extensions\{5C655500-E712-41e7-9349-CE462F844B19}.xpi [2012-11-04]

FF Extension: Speed Dial - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\6s2izxyg.default\Extensions\{64161300-e22b-11db-8314-0800200c9a66}.xpi [2011-12-21]

FF Extension: Close Button - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\6s2izxyg.default\Extensions\{962e0d4d-6b89-4b73-aa72-df03360da12e}.xpi [2011-12-22]

FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-01-30]

FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-01-30]

Chrome:

=======

CHR DefaultSearchKeyword: mysearchdial.com

CHR DefaultSearchProvider: Mysearchdial

CHR DefaultSearchURL: http://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dnldstr1202&cd=2XzuyEtN2Y1L1QzutCtDyBzz0DtB0Ezy0F0FyBzzzyzz0EtDtN0D0Tzu0SyBtByCtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=281459687&ir=

CHR DefaultNewTabURL:

CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\PepperFlash\pepflashplayer.dll ()

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\pdf.dll ()

CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)

CHR Plugin: (Java Deployment Toolkit 6.0.290.11) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll (Sun Microsystems, Inc.)

CHR Plugin: (Java Platform SE 6 U29) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)

CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)

CHR Plugin: (Exent® AOD Gecko Plugin) - C:\Program Files (x86)\Free Ride Games\npExentCtl.dll No File

CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

CHR Plugin: (Picasa) - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)

CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File

CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File

CHR Plugin: (RealPlayer G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files (x86)\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)

CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)

CHR Plugin: (VLC Multimedia Plug-in) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (the VideoLAN Team)

CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll No File

CHR Extension: (YouTube) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2011-12-25]

CHR Extension: (Google Search) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2011-12-25]

CHR Extension: (Skype Click to Call) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2014-02-06]

CHR Extension: (Google Wallet) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-10-22]

CHR Extension: (Gmail) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2011-12-25]

CHR HKLM-x32\...\Chrome\Extension: [ippenodjaoidmkkfdlmdhofiebnpjddb] - C:\Program Files (x86)\BrowseSmart\ippenodjaoidmkkfdlmdhofiebnpjddb.crx [2011-12-25]

CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2013-10-09]

==================== Services (Whitelisted) =================

R2 lxbk_device; C:\Windows\system32\lxbkcoms.exe [565928 2008-02-19] ( )

R2 lxbk_device; C:\Windows\SysWOW64\lxbkcoms.exe [537256 2008-02-19] ( )

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)

S3 MWLService; C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [305520 2010-05-27] (Egis Technology Inc.)

R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)

S2 MgAssistService; C:\Program Files (x86)\Mobogenie\MgAssist.exe [X]

==================== Drivers (Whitelisted) ====================

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)

R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)

S2 X5XSEx_Pr143; \??\C:\Program Files (x86)\Free Ride Games\X5XSEx_Pr143.Sys [X]

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2014-02-08 13:49 - 2014-02-08 13:49 - 00018598 _____ () C:\Users\user\Desktop\FRST.txt

2014-02-08 13:49 - 2014-02-08 13:49 - 00000000 ____D () C:\FRST

2014-02-08 13:47 - 2014-02-08 13:48 - 02079744 _____ (Farbar) C:\Users\user\Desktop\FRST64.exe

2014-02-08 09:24 - 2014-02-08 09:24 - 00030073 _____ () C:\Users\user\Desktop\attach.txt

2014-02-08 09:24 - 2014-02-08 09:23 - 00017487 _____ () C:\Users\user\Desktop\dds.txt

2014-02-08 09:20 - 2014-02-08 09:20 - 00688992 ____R (Swearware) C:\Users\user\Desktop\dds.scr

2014-02-07 23:00 - 2014-02-07 23:00 - 00287744 _____ (Oleg N. Scherbakov) C:\Users\user\Desktop\dCL_SFX.exe

2014-02-07 22:51 - 2014-02-07 22:51 - 00053248 _____ () C:\Windows\SysWOW64\zlib.dll

2014-02-07 20:54 - 2014-02-07 20:54 - 00001113 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-02-07 20:54 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-02-07 20:53 - 2014-02-07 20:54 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\user\Downloads\mbam-setup-1.75.0.1300.exe

2014-02-07 16:13 - 2014-02-07 16:16 - 00000000 ____D () C:\Users\user\Desktop\RK_Quarantine

2014-02-07 16:09 - 2014-02-07 16:11 - 00000000 ____D () C:\AdwCleaner

2014-02-07 16:08 - 2014-02-04 07:38 - 01037530 _____ (Thisisu) C:\Users\user\Desktop\JRT_NEW.exe

2014-02-07 16:05 - 2014-02-07 22:45 - 00000000 ____D () C:\Support

2014-02-06 09:54 - 2014-02-07 20:54 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware

2014-02-06 09:54 - 2014-02-06 09:54 - 00000000 ____D () C:\Users\user\AppData\Roaming\Malwarebytes

2014-02-06 09:54 - 2014-02-06 09:54 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-02-06 09:44 - 2014-02-06 09:44 - 00000000 ____D () C:\Users\user\Desktop\rkill

2014-02-06 09:43 - 2014-02-07 16:04 - 00000058 _____ () C:\Users\Public\Desktop\Daves Support.url

2014-02-01 11:49 - 2014-02-07 16:11 - 00000000 _____ () C:\Users\user\AppData\Local\esxfyxke.log

2014-01-31 23:01 - 2014-02-07 16:05 - 00752538 _____ () C:\Users\user\AppData\Local\irlmeiwf.log

2014-01-31 23:01 - 2014-02-07 15:48 - 00323000 _____ () C:\Users\user\AppData\Local\pdxtssuc.log

2014-01-31 23:01 - 2014-02-07 15:48 - 00003617 _____ () C:\Users\user\AppData\Local\nhewjtqy.log

2014-01-31 23:01 - 2014-02-07 15:48 - 00003288 _____ () C:\Users\user\AppData\Local\trnjxcua.log

2014-01-31 23:00 - 2014-02-07 16:13 - 00000000 ____D () C:\Users\user\AppData\Local\wrkehcle

2014-01-31 23:00 - 2014-02-07 16:11 - 00000028 _____ () C:\Users\user\AppData\Local\geojnbmo.log

2014-01-31 23:00 - 2014-02-07 15:48 - 00005370 _____ () C:\Users\user\AppData\Local\gbbqrwyd.log

2014-01-31 23:00 - 2014-01-31 23:00 - 00432112 _____ () C:\Users\user\AppData\Local\huswgbtl.log

2014-01-31 23:00 - 2014-01-31 23:00 - 00000064 _____ () C:\ProgramData\tfwhlptp.log

2014-01-31 23:00 - 2014-01-31 23:00 - 00000000 _____ () C:\Users\user\AppData\Local\ijasaefa.log

2014-01-31 23:00 - 2014-01-31 23:00 - 00000000 _____ () C:\Users\user\AppData\Local\cericbvl.log

2014-01-30 12:41 - 2014-01-30 12:41 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-01-29 22:16 - 2014-01-29 22:19 - 00001126 _____ () C:\Users\user\Desktop\Play Daily Mah Jong.lnk

2014-01-28 22:24 - 2014-01-28 22:24 - 00262144 _____ () C:\Windows\Minidump\012814-15756-01.dmp

2014-01-15 21:13 - 2014-01-15 21:14 - 00731536 _____ () C:\Users\user\Downloads\GamesSetup(2).exe

2014-01-15 21:13 - 2014-01-15 21:13 - 00731536 _____ () C:\Users\user\Downloads\GamesSetup.exe

2014-01-15 21:13 - 2014-01-15 21:13 - 00731536 _____ () C:\Users\user\Downloads\GamesSetup(1).exe

2014-01-15 08:55 - 2013-11-27 01:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys

2014-01-15 08:55 - 2013-11-27 01:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys

2014-01-15 08:55 - 2013-11-27 01:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys

2014-01-15 08:55 - 2013-11-27 01:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys

2014-01-15 08:55 - 2013-11-27 01:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys

2014-01-15 08:55 - 2013-11-27 01:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys

2014-01-15 08:55 - 2013-11-27 01:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys

2014-01-15 08:54 - 2013-11-26 11:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys

2014-01-15 08:54 - 2013-11-26 10:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

==================== One Month Modified Files and Folders =======

2014-02-08 13:49 - 2014-02-08 13:49 - 00018598 _____ () C:\Users\user\Desktop\FRST.txt

2014-02-08 13:49 - 2014-02-08 13:49 - 00000000 ____D () C:\FRST

2014-02-08 13:48 - 2014-02-08 13:47 - 02079744 _____ (Farbar) C:\Users\user\Desktop\FRST64.exe

2014-02-08 13:47 - 2011-12-25 22:01 - 00000000 ___RD () C:\Users\user\Dropbox

2014-02-08 13:47 - 2011-12-21 22:10 - 00000000 ____D () C:\Users\user\AppData\Roaming\Dropbox

2014-02-08 13:43 - 2013-09-15 09:10 - 00034407 _____ () C:\Windows\setupact.log

2014-02-08 13:43 - 2011-12-21 22:06 - 00000890 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-02-08 13:43 - 2009-07-14 05:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-02-08 09:26 - 2011-12-21 21:59 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-02-08 09:24 - 2014-02-08 09:24 - 00030073 _____ () C:\Users\user\Desktop\attach.txt

2014-02-08 09:23 - 2014-02-08 09:24 - 00017487 _____ () C:\Users\user\Desktop\dds.txt

2014-02-08 09:22 - 2009-07-14 04:45 - 00018736 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-02-08 09:22 - 2009-07-14 04:45 - 00018736 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-02-08 09:20 - 2014-02-08 09:20 - 00688992 ____R (Swearware) C:\Users\user\Desktop\dds.scr

2014-02-07 23:00 - 2014-02-07 23:00 - 00287744 _____ (Oleg N. Scherbakov) C:\Users\user\Desktop\dCL_SFX.exe

2014-02-07 22:51 - 2014-02-07 22:51 - 00053248 _____ () C:\Windows\SysWOW64\zlib.dll

2014-02-07 22:46 - 2011-07-27 14:20 - 00000000 ____D () C:\Users\Kiosk

2014-02-07 22:46 - 2009-07-14 03:20 - 00000000 __RHD () C:\Users\Default

2014-02-07 22:45 - 2014-02-07 16:05 - 00000000 ____D () C:\Support

2014-02-07 22:11 - 2011-12-21 22:06 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-02-07 20:54 - 2014-02-07 20:54 - 00001113 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-02-07 20:54 - 2014-02-07 20:53 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\user\Downloads\mbam-setup-1.75.0.1300.exe

2014-02-07 20:54 - 2014-02-06 09:54 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware

2014-02-07 20:31 - 2012-01-02 12:49 - 00007514 _____ () C:\Windows\PFRO.log

2014-02-07 16:16 - 2014-02-07 16:13 - 00000000 ____D () C:\Users\user\Desktop\RK_Quarantine

2014-02-07 16:13 - 2014-01-31 23:00 - 00000000 ____D () C:\Users\user\AppData\Local\wrkehcle

2014-02-07 16:13 - 2011-07-27 14:11 - 00000000 ___RD () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2014-02-07 16:11 - 2014-02-07 16:09 - 00000000 ____D () C:\AdwCleaner

2014-02-07 16:11 - 2014-02-01 11:49 - 00000000 _____ () C:\Users\user\AppData\Local\esxfyxke.log

2014-02-07 16:11 - 2014-01-31 23:00 - 00000028 _____ () C:\Users\user\AppData\Local\geojnbmo.log

2014-02-07 16:05 - 2014-01-31 23:01 - 00752538 _____ () C:\Users\user\AppData\Local\irlmeiwf.log

2014-02-07 16:05 - 2009-07-14 05:13 - 00779724 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-02-07 16:04 - 2014-02-06 09:43 - 00000058 _____ () C:\Users\Public\Desktop\Daves Support.url

2014-02-07 15:55 - 2010-02-10 13:19 - 02090542 _____ () C:\Windows\WindowsUpdate.log

2014-02-07 15:48 - 2014-01-31 23:01 - 00323000 _____ () C:\Users\user\AppData\Local\pdxtssuc.log

2014-02-07 15:48 - 2014-01-31 23:01 - 00003617 _____ () C:\Users\user\AppData\Local\nhewjtqy.log

2014-02-07 15:48 - 2014-01-31 23:01 - 00003288 _____ () C:\Users\user\AppData\Local\trnjxcua.log

2014-02-07 15:48 - 2014-01-31 23:00 - 00005370 _____ () C:\Users\user\AppData\Local\gbbqrwyd.log

2014-02-06 09:54 - 2014-02-06 09:54 - 00000000 ____D () C:\Users\user\AppData\Roaming\Malwarebytes

2014-02-06 09:54 - 2014-02-06 09:54 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-02-06 09:44 - 2014-02-06 09:44 - 00000000 ____D () C:\Users\user\Desktop\rkill

2014-02-06 09:25 - 2009-07-14 02:34 - 00000611 _____ () C:\Windows\win.ini

2014-02-05 09:36 - 2013-12-24 21:44 - 00000000 ____D () C:\Users\user\Desktop\mums games

2014-02-05 07:39 - 2011-12-21 21:59 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-02-05 07:39 - 2011-12-21 21:59 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-02-05 07:39 - 2011-12-21 21:59 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-02-04 07:38 - 2014-02-07 16:08 - 01037530 _____ (Thisisu) C:\Users\user\Desktop\JRT_NEW.exe

2014-02-03 21:57 - 2011-12-27 08:38 - 00000029 _____ () C:\Windows\popcinfo.dat

2014-02-02 14:48 - 2013-03-05 15:18 - 00000000 ____D () C:\Users\user\AppData\Roaming\Skype

2014-01-31 23:08 - 2011-12-26 15:44 - 00000000 ____D () C:\Users\user\AppData\Roaming\SoftGrid Client

2014-01-31 23:00 - 2014-01-31 23:00 - 00432112 _____ () C:\Users\user\AppData\Local\huswgbtl.log

2014-01-31 23:00 - 2014-01-31 23:00 - 00000064 _____ () C:\ProgramData\tfwhlptp.log

2014-01-31 23:00 - 2014-01-31 23:00 - 00000000 _____ () C:\Users\user\AppData\Local\ijasaefa.log

2014-01-31 23:00 - 2014-01-31 23:00 - 00000000 _____ () C:\Users\user\AppData\Local\cericbvl.log

2014-01-31 22:52 - 2012-11-09 08:04 - 00001150 _____ () C:\Users\user\Desktop\Play The Treasures of Montezuma.lnk

2014-01-30 21:08 - 2012-05-24 09:09 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2014-01-30 12:41 - 2014-01-30 12:41 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-01-30 12:41 - 2011-12-26 15:57 - 00000277 _____ () C:\Windows\Lexstat.ini

2014-01-29 22:19 - 2014-01-29 22:16 - 00001126 _____ () C:\Users\user\Desktop\Play Daily Mah Jong.lnk

2014-01-29 09:37 - 2013-12-26 17:34 - 00000000 ____D () C:\Users\user\AppData\Local\cache

2014-01-28 22:24 - 2014-01-28 22:24 - 00262144 _____ () C:\Windows\Minidump\012814-15756-01.dmp

2014-01-28 22:24 - 2013-12-01 22:07 - 456314051 _____ () C:\Windows\MEMORY.DMP

2014-01-28 12:34 - 2013-12-26 18:33 - 00000151 _____ () C:\Users\user\AppData\Roaming\WB.CFG

2014-01-23 12:52 - 2013-12-26 17:39 - 00000000 ___RD () C:\Program Files (x86)\Skype

2014-01-19 17:49 - 2009-07-14 05:08 - 00032620 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2014-01-16 09:59 - 2011-12-23 10:19 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

2014-01-15 21:14 - 2014-01-15 21:13 - 00731536 _____ () C:\Users\user\Downloads\GamesSetup(2).exe

2014-01-15 21:13 - 2014-01-15 21:13 - 00731536 _____ () C:\Users\user\Downloads\GamesSetup.exe

2014-01-15 21:13 - 2014-01-15 21:13 - 00731536 _____ () C:\Users\user\Downloads\GamesSetup(1).exe

2014-01-15 13:20 - 2009-07-14 04:45 - 00275712 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-01-15 09:23 - 2013-08-14 20:21 - 00000000 ____D () C:\Windows\system32\MRT

2014-01-15 09:19 - 2012-01-01 21:21 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-01-09 08:50 - 2013-12-26 17:34 - 00005336 _____ () C:\Users\user\daemonprocess.txt

2014-01-09 08:40 - 2011-12-25 22:01 - 00001017 _____ () C:\Users\user\Desktop\Dropbox.lnk

2014-01-09 08:40 - 2011-12-21 22:10 - 00000000 ____D () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

Some content of TEMP:

====================

C:\Users\user\AppData\Local\Temp\ntdll_dump.dll

C:\Users\user\AppData\Local\Temp\Quarantine.exe

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

LastRegBack: 2012-07-19 05:29

==================== End Of Log ============================

attach.txt

luckygals · February 8, 2014

Sorry attached wrong file, here is the correct one.

Regards

Addition.txt

kevinf80 · February 8, 2014

Download attached fixlist.txt file and save it to the Desktop, or the folder you saved FRST into.

NOTE. It's important that both FRST and fixlist.txt are in the same location or the fix will not work.

Run FRST and press the Fix button just once and wait.

The tool will make a log on the Desktop (Fixlog.txt). Please post it to your reply.

Next,

Download AdwCleaner by Xplode from here: http://www.bleepingcomputer.com/download/adwcleaner/ and save to your Desktop.

Double click on AdwCleaner.exe to run the tool.
Vista/Windows 7/8 users right-click and select Run As Administrator
Click on the Scan button.
AdwCleaner will begin...be patient as the scan may take some time to complete.
When it's done you'll see: Pending: Uncheck any elements you don't want removed.
Now click on the Report button...a logfile (AdwCleaner[R0].txt) will open in Notepad for review.
Look over the log especially under Files/Folders for any program you want to save.
If there's a program you want to save, just uncheck it from AdwCleaner.
If you're not sure, post the log for review.
If you're ready to clean it all up.....click the Clean button.
After rebooting, a logfile report (AdwCleaner[s0].txt) will open automatically.
Copy and paste the contents of that logfile in your next reply.
A copy of that logfile will also be saved in the C:\AdwCleaner folder.
Items that are deleted are moved to the Quarantine Folder: C:\AdwCleaner\Quarantine
To restore an item that has been deleted (if necessary):
Go to Tools > Quarantine Manager > check what you want restored > now click on Restore.

Next,

Please download Junkware Removal Tool to your desktop.

Shut down your protection software now to avoid potential conflicts.
Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
The tool will open and start scanning your system.
Please be patient as this can take a while to complete depending on your system's specifications.
On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
Post the contents of JRT.txt into your next message.

Next,

Run Malwarebytes, Open > Settings Tab > Scanner Settings > Under action for PUP > Select: Show in Results List and Check for removal.

Please Update and run a Full scan

Make sure that everything is checked, and click Remove Selected on any found items.

Post the produced log.

Let me see the logs from above scans in next reply, also give an update on any remaining issues or concerns..

Kevin

fixlist.txt

luckygals · February 9, 2014

Hi here are the logs

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 07-02-2014

Ran by user at 2014-02-09 09:15:03 Run:1

Running from C:\Users\user\Desktop

Boot Mode: Normal

==============================================

Content of fixlist:

*****************

Start

HKU\.DEFAULT\...\Run: [Exetender] - "C:\Program Files (x86)\Free Ride Games\GPlayer.exe" /runonstartup

HKU\S-1-5-19\...\Run: [Exetender] - "C:\Program Files (x86)\Free Ride Games\GPlayer.exe" /runonstartup

HKU\S-1-5-20\...\Run: [Exetender] - "C:\Program Files (x86)\Free Ride Games\GPlayer.exe" /runonstartup

HKU\S-1-5-21-764395833-1939329319-3225455460-1000\...\Run: [Exetender] - "C:\Program Files (x86)\Free Ride Games\GPlayer.exe" /runonstartup

C:\Program Files (x86)\Free Ride Games

SearchScopes: HKCU - {C710F991-B813-491B-A0CB-8540172F1477} URL = http://start.mysearc...ults.php?f=4&q={searchTerms}&a=dnldstr1202&cd=2XzuyEtN2Y1L1QzutCtDyBzz0DtB0Ezy0F0FyBzzzyzz0EtDtN0D0Tzu0SyBtByCtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=281459687&ir=

FF Plugin-x32: www.exent.com/GameTreatWidget - C:\Program Files (x86)\Free Ride Games\NPGameTreatPlugin.dll No File

FF SearchPlugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\6s2izxyg.default\searchplugins\a-free-ride-games-bar-customized-web-search.xml

CHR DefaultSearchKeyword: mysearchdial.com

CHR DefaultSearchProvider: Mysearchdial

CHR DefaultSearchURL: http://start.mysearc...ults.php?f=4&q={searchTerms}&a=dnldstr1202&cd=2XzuyEtN2Y1L1QzutCtDyBzz0DtB0Ezy0F0FyBzzzyzz0EtDtN0D0Tzu0SyBtByCtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=281459687&ir=