Bad Image Error After Malwarebytes cleanup

chowder2757 · October 9, 2014

when i did a full system scan on my computer and restarted it after deleting all the junk it started to come up with errors that would come on onslaughts when starting up my computer and then coming (usually in pairs of 2) when i try to open an application.

Please help, I am tired of it already.

The error looked like this:

MovieMaker.exe - Bad Image

C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll is either not designed to run on Windows or it contains an error. Try installing the program again using the original installation media or contact your system administrator or the software vendor for support

TwinHeadedEagle · October 9, 2014

Hello,

They call me TwinHeadedEagle around here, and I'll be working with you.

Before we start please read and note the following:

Limit your internet access to posting here, some infections just wait to steal typed-in passwords.
Please be patient. I know it is frustrating when your PC isn't working properly, but malware removal takes time.
Don't run any scripts or tools on your own, unsupervised usage may cause more harm than good.
Do not paste the logs in your posts, attachments make my work easier. There is a Upload Files option below which you can use to attach your reports. Always attach reports from all tools.
Stay with me to the end, the absence of symptoms doesn't mean that your machine is fully operational.
Note that we may live in totally different time zones, what may cause some delays between answers.
Do not ask for help for your business PC. Companies are making revenue via computers, so it is good thing to pay someone to repair it.
If I don't hear from you within 3 days from this initial or any subsequent post, then this thread will be closed.

I can't foresee everything, so if anything unexpected happens, please stop and inform me!
There are no silly questions. Never be afraid to ask if in doubt!

Rules and policies

We won't support any piracy.
That being told, if any evidence of illegal OS, software, cracks/keygens or any other will be revealed, any further assistance will be suspended. If you are aware that there is this kind of stuff on your machine, remove it before proceeding!
The same applies to any use of P2P software: uTorrent, BitTorrent, Vuze, Kazaa, Ares... We don't provide any help for P2P, except for their removal. All P2P software has to be uninstalled or at least fully disabled before proceeding!

Failure to follow these guidelines will result with closing your topic and withdrawning any assistance.

Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version.

Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

chowder2757 · October 9, 2014

i did the scan here you go:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-10-2014 01

Ran by Erik_2 (administrator) on ERIK-PC on 09-10-2014 18:28:54

Running from C:\Users\Erik_2\Downloads

Loaded Profile: Erik_2 (Available profiles: Erik_2)

Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)

Internet Explorer Version 11

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe

(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe

(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe

(ASUSTeK Computer Inc.) C:\Windows\SysWOW64\AsHookDevice.exe

(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe

(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe

(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE

(The Weather Channel) C:\Program Files (x86)\The Weather Channel FW\Screensaver\TWCScreensaverUpdater.exe

(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Family Safety\fsui.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIJJE.EXE

(Microsoft Corporation) C:\Windows\System32\StikyNot.exe

(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe

(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Manager\AsShellApplication.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe

() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(Oracle Corporation) C:\Users\Erik_2\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe

(Reason Software Company Inc.) C:\Program Files\Reason\herdProtect\Scanner\herdProtectScan.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe

(Microsoft Corporation) C:\Windows\System32\audiodg.exe

(Farbar) C:\Users\Erik_2\Downloads\FRST64 (1).exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [fssui] => C:\Program Files (x86)\Windows Live\Family Safety\fsui.exe [884584 2012-03-08] (Microsoft Corporation)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2369536 2010-03-14] (VIA)

HKLM-x32\...\Run: [RunAIShell] => C:\Program Files (x86)\ASUS\AI Manager\AsShellApplication.exe [232064 2009-12-23] (ASUSTeK Computer Inc.)

HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [35696 2009-02-27] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [startCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-02-10] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2010-11-29] (Apple Inc.)

HKLM-x32\...\Run: [sunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)

HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3890208 2014-08-08] (AVAST Software)

HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-05-26] (Apple Inc.)

HKLM-x32\...\Run: [fst_us_123] => "C:\Program Files (x86)\fst_us_123\fst_us_123.exe"

HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3802448 2014-09-04] (LogMeIn Inc.)

HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2694040 2014-07-22] (Adobe Systems Incorporated)

HKU\S-1-5-21-390533914-481344091-1144799054-1003\...\Run: [steam] => C:\Program Files (x86)\Steam\Steam.exe [1938112 2014-09-22] (Valve Corporation)

HKU\S-1-5-21-390533914-481344091-1144799054-1003\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIJJE.EXE [283232 2012-09-27] (SEIKO EPSON CORPORATION)

HKU\S-1-5-21-390533914-481344091-1144799054-1003\...\Run: [My Driver Updater] => C:\Program Files (x86)\My Driver Updater\MDULauncher.exe [133432 2014-02-06] (Softitube Ltd)

HKU\S-1-5-21-390533914-481344091-1144799054-1003\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [427520 2009-07-13] (Microsoft Corporation)

HKU\S-1-5-21-390533914-481344091-1144799054-1003\...\Run: [skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [22041192 2014-08-27] (Skype Technologies S.A.)

HKU\S-1-5-21-390533914-481344091-1144799054-1003\...\Policies\system: [LogonHoursAction] 2

HKU\S-1-5-21-390533914-481344091-1144799054-1003\...\Policies\system: [DontDisplayLogonHoursWarnings] 1

HKU\S-1-5-18\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIJJE.EXE [283232 2012-09-27] (SEIKO EPSON CORPORATION)

HKU\S-1-5-18\...\RunOnce: [sPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2013-04-10] (Microsoft Corporation)

AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC64Loader.dll [232896 2014-07-22] ()

AppInit_DLLs: C:\PROGRA~2\SEARCH~1\Datamngr\x64\datamngr.dll => C:\PROGRA~2\SEARCH~1\Datamngr\x64\datamngr.dll File Not Found

AppInit_DLLs: C:\PROGRA~2\SEARCH~1\Datamngr\x64\IEBHO.dll => C:\PROGRA~2\SEARCH~1\Datamngr\x64\IEBHO.dll File Not Found

AppInit_DLLs: C:\PROGRA~2\OPTIMI~1\OPTPRO~2.DLL => C:\PROGRA~2\OPTIMI~1\OPTPRO~2.DLL File Not Found

AppInit_DLLs: C:\PROGRA~2\SSSUPP~1\ASSIST~2.DLL => C:\PROGRA~2\SSSUPP~1\ASSIST~2.DLL File Not Found

AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC32Loader.dll [187328 2014-07-22] ()

AppInit_DLLs-x32: c:\progra~3\browse~2\261519~1.190\{c16c1~1\browse~1.dll => "c:\progra~3\browse~2\261519~1.190\{c16c1~1\browse~1.dll" File Not Found

AppInit_DLLs-x32: c:\progra~2\gssupp~1\assist~1.dll => "c:\progra~2\gssupp~1\assist~1.dll" File Not Found

AppInit_DLLs-x32: c:\progra~2\sssupp~1\assist~1.dll => "c:\progra~2\sssupp~1\assist~1.dll" File Not Found

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\PastaQuotes.lnk

ShortcutTarget: PastaQuotes.lnk -> C:\Program Files (x86)\pastaleads\PastaLeadsWinApp.exe (No File)

Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Best Buy pc app.lnk

ShortcutTarget: Best Buy pc app.lnk -> C:\ProgramData\Best Buy pc app\ClickOnceSetup.exe (Microsoft)

Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Best Buy pc app.lnk

ShortcutTarget: Best Buy pc app.lnk -> C:\ProgramData\Best Buy pc app\ClickOnceSetup.exe (Microsoft)

Startup: C:\Users\Erik_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Warner Bros.lnk

ShortcutTarget: Warner Bros.lnk -> C:\Program Files (x86)\Warner Bros. Digital Copy Manager\Warner Bros. Digital Copy Manager.exe (No File)

ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll ()

ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll ()

ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll ()

ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)

GroupPolicyUsers\S-1-5-21-390533914-481344091-1144799054-1003\User: Group Policy restriction detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com/

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Restore = http://www.facebook.com/

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.trovi.com/?gd=&ctid=CT3330116&octid=EB_ORIGINAL_CTID&ISID=M3CCA6CFB-70BA-4049-B790-77207C6F9837&SearchSource=55&CUI=&UM=5&UP=SPEC927751-82D7-4F99-997A-E8CEA6B3E40D&SSPV=

URLSearchHook: HKCU - (No Name) - {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - No File

SearchScopes: HKLM - DefaultScope {B7971660-A1CE-4FDD-B9E0-2C37D77AFB0B} URL = http://searchfunmoods.com/results.php?f=4&q={searchTerms}&a=aln&chnl=&cd=2XzuyEtN2Y1L1QzutBtD0C0FtAtD0E0EyDzytA0F0E0DtCzytN0D0Tzu0CtAtCtBtN1L2XzutBtFtBtFtDtFtAyEyE&cr=1586822972

SearchScopes: HKLM - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL =

SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://dts.search-results.com/sr?src=ieb&gct=ds&appid=394&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&o=APN10645&apn_uid=3565004510814650&q={searchTerms}

SearchScopes: HKLM - {B7971660-A1CE-4FDD-B9E0-2C37D77AFB0B} URL = http://searchfunmoods.com/results.php?f=4&q={searchTerms}&a=aln&chnl=&cd=2XzuyEtN2Y1L1QzutBtD0C0FtAtD0E0EyDzytA0F0E0DtCzytN0D0Tzu0CtAtCtBtN1L2XzutBtFtBtFtDtFtAyEyE&cr=1586822972

SearchScopes: HKLM-x32 - DefaultScope {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = http://websearch.searchsun.info/?l=1&q={searchTerms}&pid=1387&r=2014/05/22&hid=17652437398255155628&lg=EN&cc=US&unqvl=52

SearchScopes: HKLM-x32 - {443789B7-F39C-4b5c-9287-DA72D38F4FE6} URL = http://slirsredirect.search.aol.com/redirector/sredir?sredir=843&q={searchTerms}&s_it=webpickaol-ie&s_qt=sb&tb_uuid=20130209204144114&tb_oid=09-02-2013

&tb_mrud=09-02-2013

SearchScopes: HKLM-x32 - {4fa67103-5daf-45a1-9ddb-236d1ff7a590} URL = http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=LKxdm003YYus&ptb=FA141D0B-BC57-4136-90F7-BACFA2920308&ind=2012020413&ptnrS=LKxdm003YYus&si=&n=77ecfebd&psa=&st=sb&searchfor={searchTerms}

SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://dts.search-results.com/sr?src=ieb&gct=ds&appid=394&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&o=APN10645&apn_uid=3565004510814650&q={searchTerms}

SearchScopes: HKLM-x32 - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2438727

SearchScopes: HKLM-x32 - {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = http://websearch.searchsun.info/?l=1&q={searchTerms}&pid=1387&r=2014/05/22&hid=17652437398255155628&lg=EN&cc=US&unqvl=52

SearchScopes: HKLM-x32 - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://start.sweetpacks.com/?src=6&q={searchTerms}&st=12&crg=3.5000006.10042&barid={F849E734-E50A-11E2-A60F-20CF30EE593F}

SearchScopes: HKCU - DefaultScope {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = http://www.trovi.com/Results.aspx?gd=&ctid=CT3330116&octid=EB_ORIGINAL_CTID&ISID=M3CCA6CFB-70BA-4049-B790-77207C6F9837&SearchSource=58&CUI=&UM=5&UP=SPEC927751-82D7-4F99-997A-E8CEA6B3E40D&q={searchTerms}&SSPV=

SearchScopes: HKCU - URL http://search.conduit.com/Results.aspx?ctid=CT3322287&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=4&UP=SPE2533A93-5820-430F-9C4C-6AB4E29AA28C&q={searchTerms}&SSPV=

SearchScopes: HKCU - SuggestionsURL_JSON http://suggest.search.conduit.com/CSuggestJson.ashx?prefix={searchTerms}

SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = http://rocket-find.com/results.php?f=4&q={searchTerms}&a=rckt_suma_14_29_ch&cd=2XzuyEtN2Y1L1QzuyB0AyBzytCzytCtAtD0FtA0E0E0DtCzytN0D0Tzu0SzytAtCtN1L2XzutBtFtBtCtFtCyEtFyEtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StC0CyByCyCyBtCzytGyEtDzz0AtGtB0DyB0FtG0BtCzztCtGyB0C0D0EtCzyzz0EyB0CtDtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyCzztD0EtDyEyD0BtGzz0A0C0AtGzz0C0BzytGzyyBtDzztGtDyEtD0DzytD0Ezy0DyEzyzz2Q&cr=919384109&ir=

SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://isearch.babylon.com/?q={searchTerms}&affID=119842&tt=gc_&babsrc=SP_ss_btis2&mntrId=CEAC20CF30EE593F

SearchScopes: HKCU - {36377DD7-B3EB-42f5-986F-680BAF59BA9D} URL = http://start.oberon-media.iplay.com/searchresultsredirect.aspx?o=chrome&q={searchTerms}

SearchScopes: HKCU - {4408C5D3-D063-47B7-F412-10B06D154E1C} URL = http://www.bing.com/search?q={searchTerms}&pc=Z170&form=ZGAIDF&install_date=20111208&iesrc={referrer:source}

SearchScopes: HKCU - {443789B7-F39C-4b5c-9287-DA72D38F4FE6} URL = http://slirsredirect.search.aol.com/redirector/sredir?sredir=843&q={searchTerms}&s_it=webpickaol-ie&s_qt=sb&tb_uuid=20130209204144114&tb_oid=09-02-2013

&tb_mrud=09-02-2013

SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL =

SearchScopes: HKCU - {4fa67103-5daf-45a1-9ddb-236d1ff7a590} URL = http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=LKxdm003YYus&ptb=FA141D0B-BC57-4136-90F7-BACFA2920308&ind=2012020413&ptnrS=LKxdm003YYus&si=&n=77ecfebd&psa=&st=sb&searchfor={searchTerms}

SearchScopes: HKCU - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = http://www.trovi.com/Results.aspx?gd=&ctid=CT3330116&octid=EB_ORIGINAL_CTID&ISID=M3CCA6CFB-70BA-4049-B790-77207C6F9837&SearchSource=58&CUI=&UM=5&UP=SPEC927751-82D7-4F99-997A-E8CEA6B3E40D&q={searchTerms}&SSPV=

SearchScopes: HKCU - {7F4EFF06-7032-458e-AE16-1C1D8255C28A} URL = http://www-search.net/search.aspx?s=E3Hzadku1,b5730602-d115-479f-a5aa-defebde83291,&q={searchTerms}

SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://dts.search-results.com/sr?src=ieb&gct=ds&appid=394&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&o=APN10645&apn_uid=3565004510814650&q={searchTerms}

SearchScopes: HKCU - {A531D99C-5A22-449b-83DA-872725C6D0ED} URL = http://search.alot.com/web?q={searchTerms}&pr=prov&client_id=D24691A001CCC91802145422&install_time=2012-01-02T06:36:15Z&src_id=30305&camp_id=3534&tb_version=1.1.3001.0(B)

SearchScopes: HKCU - {A5439461-A84B-4EC8-928B-97197D81F0AA} URL = http://websearch.ask.com/redirect?client=ie&tb=CDS4&o=41648339&src=crm&q={searchTerms}&locale=en_US&apn_ptnrs=9K&apn_dtid=YYYYYYYYUS&apn_uid=22445EB5-508A-49C1-9EFA-BBD5E8EB0C42&apn_sauid=264E0EA8-8715-4530-99A7-A18C71910AF0&

SearchScopes: HKCU - {ABD93EAF-D775-BC54-E63B-2804F22FD156} URL = http://search.startnow.com/s/?q={searchTerms}&src=defsearch&provider=&provider_name=startnow&provider_code=&partner_id=999&product_id=10&affiliate_id=&channel=&toolbar_id=&toolbar_version=&install_country=&install_date=20120910&user_guid=8C4D566EC0384C84BF8E3B8A7C9AE519&machine_id=f7f166f2ef2030db11b01a2aa0895d15&browser=IE&os=win&os_version=6.1-x64-SP0&iesrc={referrer:source}

SearchScopes: HKCU - {B9C7CE32-DA91-43C2-B7E9-0E9AAFC675CD} URL = http://www.ask.com/web?l=dis&o=APN10022&gct=sb&qsrc=2869&apn_dtid=^YYYYYY^YY^US&apn_ptnrs=^A4D&apn_uid=4076844983524049&p2=^A4D^YYYYYY^YY^US&q={searchTerms}

SearchScopes: HKCU - {E6BC4E68-A71D-44FF-BF47-7979F9625257} URL = https://search.yahoo.com/yhs/search?hspart=w3i&hsimp=yhs-synd1&p={searchTerms}&type=W3i_DS,221,0_0,Search,20140625,0,195,0,7635

SearchScopes: HKCU - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://start.sweetpacks.com/?src=6&q={searchTerms}&st=12&crg=3.5000006.10042&barid={F849E734-E50A-11E2-A60F-20CF30EE593F}

BHO: Object Browser -> {11111111-1111-1111-1111-110311281150} -> C:\Program Files (x86)\Object Browser\Object Browser-bho64.dll No File

BHO: iWebar -> {11111111-1111-1111-1111-110311551110} -> C:\Program Files (x86)\iWebar\iWebar-bho64.dll No File

BHO: QuickShare WidgetEngine -> {31ad400d-1b06-4e33-a59a-90c2c140cba0} -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)

BHO: Expat Shield Class -> {3706EE7C-3CAD-445D-8A43-03EBC3B75908} -> C:\Program Files (x86)\Expat Shield\HssIE\ExpatIE_64.dll No File

BHO: SNT -> {3FA6C151-2C23-AA58-02BF-2734A6DCFDD2} -> C:\Program Files (x86)\SNT\kTWyx2.x64.dll No File

BHO: DowNlOad keeper -> {545D47BC-53A2-66B6-1897-F5A2FFDD337A} -> C:\Program Files (x86)\DowNlOad keeper\AkfS.x64.dll No File

BHO: Java Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Updater By SweetPacks -> {7D4F1959-3F72-49d5-8E59-F02F8AA6815D} -> C:\Program Files\Updater By SweetPacks\Extension64.dll No File

BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)

BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Shopper Pro -> {A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} -> C:\ProgramData\ShopperPro\ShopperPro64.dll No File

BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)

BHO: DataMngr -> {C1ED9DA0-AFD0-4b90-AC6A-D3874F591014} -> C:\PROGRA~2\SEARCH~1\Datamngr\x64\BROWSE~1.DLL No File

BHO: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO: DoWnload keueper -> {FE8CF0F3-9775-5851-13A0-D6691380D7E7} -> C:\Program Files (x86)\DoWnload keueper\l6kv5lSU.x64.dll No File

BHO-x32: No Name -> {02478D38-C3F9-4efb-9B51-7695ECA05670} -> No File

BHO-x32: Toolbar BHO -> {126b343d-7d49-40ed-acd5-c736f4052735} -> C:\PROGRA~2\FESTIV~2\bar\1.bin\3gbar.dll No File

BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)

BHO-x32: Shop to Win -> {284171A7-2F20-7504-35E0-E1B6810714B8} -> C:\Program Files (x86)\Shop to Win 31\Shop to Win 31.dll No File

BHO-x32: Java Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)

BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)

BHO-x32: Search Assistant BHO -> {b6f9d46b-1e99-4fce-b899-cbafe7586956} -> C:\Program Files (x86)\FestiveBar_3g\bar\1.bin\3gSrcAs.dll No File

BHO-x32: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File

Toolbar: HKLM - QuickShare Widget - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\system32\mscoree.dll (Microsoft Corporation)

Toolbar: HKLM - Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files (x86)\Dealio Toolbar\IE\8.9\dealioToolbarIE64.dll No File

Toolbar: HKLM-x32 - No Name - {EEE6C35B-6118-11DC-9C72-001320C79847} - No File

Toolbar: HKLM-x32 - QuickShare Widget - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)

Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File

Toolbar: HKCU - No Name - {7B13EC3E-999A-4B70-B9CB-2617B8323822} - No File

Toolbar: HKCU - No Name - {9AE277E9-32F4-46D5-94F4-20201609D1D0} - No File

Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File

Toolbar: HKCU - No Name - {EEE6C35B-6118-11DC-9C72-001320C79847} - No File

DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab

DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)

Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)

Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - No File

Tcpip\..\Interfaces\{812CA697-691C-4B47-851E-A62527200037}: [NameServer] 208.69.150.250,208.69.150.252

FireFox:

========

FF ProfilePath: C:\Users\Erik_2\AppData\Roaming\Mozilla\Firefox\Profiles\hnc0dmzf.default

FF NewTab: hxxp://search.conduit.com/?ctid=CT3322287&octid=EB_ORIGINAL_CTID&SearchSource=69&CUI=&SSPV=&Lay=1&UM=4&UP=SPE2533A93-5820-430F-9C4C-6AB4E29AA28C

FF DefaultSearchEngine: Trovi search

FF SearchEngineOrder.1: Yahoo

FF SearchEngineOrder.user_pref("browser.search.order.1,S", "WebSearch");: user_pref("browser.search.order.1,S", "WebSearch");

FF SearchEngineOrder.2: WebSearch

FF SelectedSearchEngine: Trovi search

FF Homepage: hxxp://www.trovi.com/?gd=&ctid=CT3330116&octid=EB_ORIGINAL_CTID&ISID=M3CCA6CFB-70BA-4049-B790-77207C6F9837&SearchSource=55&CUI=&UM=5&UP=SPEC927751-82D7-4F99-997A-E8CEA6B3E40D&SSPV=

FF Keyword.URL: hxxp://trovi.com/ResultsExt.aspx?ctid=CT3289847&SearchSource=2&CUI=UN23448004196886176&UM=&q=

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()

FF Plugin: @bestbuy.com/npBestBuyPcAppDetector,version=1.0 -> C:\ProgramData\Best Buy pc app\npBestBuyPcAppDetector.dll (Best Buy)

FF Plugin: @java.com/DTPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE -> disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: adobe.com/AdobeAAMDetect_x86_64 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()

FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @bestbuy.com/npBestBuyPcAppDetector,version=1.0 -> C:\ProgramData\Best Buy pc app\npBestBuyPcAppDetector.dll (Best Buy)

FF Plugin-x32: @FestiveBar_3g.com/Plugin -> C:\Program Files (x86)\FestiveBar_3g\bar\1.bin\NP3gStub.dll No File

FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 -> C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @oberon-media.com/ONCAdapter -> C:\Program Files (x86)\Common Files\Oberon Media\NCAdapter\1.0.0.7\npapicomadapter.dll No File

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)

FF Plugin HKCU: @soe.sony.com/installer,version=1.0.3 -> C:\Users\Erik_2\AppData\Local\Microsoft\Internet Explorer\Downloaded Program Files\npsoe.dll ()

FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Erik_2\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF user.js: detected! => C:\Users\Erik_2\AppData\Roaming\Mozilla\Firefox\Profiles\hnc0dmzf.default\user.js

FF SearchPlugin: C:\Users\Erik_2\AppData\Roaming\Mozilla\Firefox\Profiles\hnc0dmzf.default\searchplugins\aol-search.xml

FF SearchPlugin: C:\Users\Erik_2\AppData\Roaming\Mozilla\Firefox\Profiles\hnc0dmzf.default\searchplugins\babylon.xml

FF SearchPlugin: C:\Users\Erik_2\AppData\Roaming\Mozilla\Firefox\Profiles\hnc0dmzf.default\searchplugins\babylon1.xml

FF SearchPlugin: C:\Users\Erik_2\AppData\Roaming\Mozilla\Firefox\Profiles\hnc0dmzf.default\searchplugins\BrowserDefender.xml

FF SearchPlugin: C:\Users\Erik_2\AppData\Roaming\Mozilla\Firefox\Profiles\hnc0dmzf.default\searchplugins\BrowserProtect.xml

FF SearchPlugin: C:\Users\Erik_2\AppData\Roaming\Mozilla\Firefox\Profiles\hnc0dmzf.default\searchplugins\delta.xml

FF SearchPlugin: C:\Users\Erik_2\AppData\Roaming\Mozilla\Firefox\Profiles\hnc0dmzf.default\searchplugins\my-web-search.xml

FF SearchPlugin: C:\Users\Erik_2\AppData\Roaming\Mozilla\Firefox\Profiles\hnc0dmzf.default\searchplugins\safeguard-secure-search.xml

FF SearchPlugin: C:\Users\Erik_2\AppData\Roaming\Mozilla\Firefox\Profiles\hnc0dmzf.default\searchplugins\sweetim.xml

FF SearchPlugin: C:\Users\Erik_2\AppData\Roaming\Mozilla\Firefox\Profiles\hnc0dmzf.default\searchplugins\trovi-search.xml

FF SearchPlugin: C:\Users\Erik_2\AppData\Roaming\Mozilla\Firefox\Profiles\hnc0dmzf.default\searchplugins\WebSearch.xml

FF SearchPlugin: C:\Users\Erik_2\AppData\Roaming\Mozilla\Firefox\Profiles\hnc0dmzf.default\searchplugins\whitesmoke-new-customized-web-search.xml

FF SearchPlugin: C:\Users\Erik_2\AppData\Roaming\Mozilla\Firefox\Profiles\hnc0dmzf.default\searchplugins\WSE Rocket.xml

FF Extension: ArcadeWeb - C:\Users\Erik_2\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\text_links@arcadeweb.com [2012-08-28]

FF Extension: No Name - C:\Users\Erik_2\AppData\Roaming\Mozilla\Firefox\Profiles\hnc0dmzf.default\Extensions\116 [2013-07-04]

FF Extension: SNT - C:\Users\Erik_2\AppData\Roaming\Mozilla\Firefox\Profiles\hnc0dmzf.default\Extensions\bvzf9z@bqiyiear.com [2014-02-09]

FF Extension: WhiteSmoke New - C:\Users\Erik_2\AppData\Roaming\Mozilla\Firefox\Profiles\hnc0dmzf.default\Extensions\{739df940-c5ee-4bab-9d7e-270894ae687a} [2014-06-19]

FF Extension: Rocket New Tab - C:\Users\Erik_2\AppData\Roaming\Mozilla\Firefox\Profiles\hnc0dmzf.default\Extensions\{ecaa9181-d92a-47b9-8e14-bef9680f204b} [2014-08-09]

FF Extension: Define Ext - C:\Program Files (x86)\Mozilla Firefox\extensions\zgvstddqqjlabihif@opvrjrelhkc.org [2014-06-19]

FF Extension: BeeMP3 - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\525b4e8e9bb1a@525b4e8e9bb1b.com [2014-06-19]

FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-07-14]

FF HKLM\...\Firefox\Extensions: [{7D4F1959-3F72-49d5-8E59-F02F8AA6815D}] - C:\Program Files\Updater By SweetPacks\Firefox

FF HKLM-x32\...\Firefox\Extensions: [3gffxtbr@FestiveBar_3g.com] - C:\Program Files (x86)\FestiveBar_3g\bar\1.bin

FF Extension: FestiveBar - C:\Program Files (x86)\FestiveBar_3g\bar\1.bin [2012-02-04]

FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF

FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-01-05]

FF HKLM-x32\...\Firefox\Extensions: [{a131ab52-77f3-4bd7-acc7-e2dfdfd298f0}] - C:\Users\Erik_2\AppData\Roaming\Mozilla\FireFox\{a131ab52-77f3-4bd7-acc7-e2dfdfd298f0}.xpi

FF HKCU\...\Firefox\Extensions: [wcapturex@deskperience.com] - C:\Program Files (x86)\WhiteSmokeTranslator\WCaptureMoz

FF HKCU\...\Firefox\Extensions: [Lyrics@LyricsContainer.co] - C:\Program Files (x86)\LyricsContainer\116.xpi

Chrome:

=======

CHR Profile: C:\Users\Erik_2\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Docs) - C:\Users\Erik_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-03-23]

CHR Extension: (Google Drive) - C:\Users\Erik_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-03-23]

CHR Extension: (YouTube) - C:\Users\Erik_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-03-23]

CHR Extension: (Search) - C:\Users\Erik_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-03-23]

CHR Extension: (Yahoo Extension) - C:\Users\Erik_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\eihhgekonheiliaidomffpplfhecmkag [2014-06-19]

CHR Extension: (VisualBee V.3) - C:\Users\Erik_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\ieiiggnfmhgcolbimglmfjfpkjildjdd [2014-03-23]

CHR Extension: (Skype Click to Call) - C:\Users\Erik_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2014-03-23]

CHR Extension: (Google Wallet) - C:\Users\Erik_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-03-23]

CHR Extension: (Amazon 1Button App for Chrome) - C:\Users\Erik_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbjikboenpfhbbejgkoklgkhjpfogcam [2014-03-23]

CHR Extension: (Gmail) - C:\Users\Erik_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-03-23]

CHR Extension: (Extutil) - C:\Users\Erik_2\AppData\Local\Temp\D7ADFCCA-EE7E-442C-9999-C4D14FEF360B [2014-06-28]

CHR Extension: (Managera) - C:\Users\Erik_2\AppData\Local\Temp\38fdaae5-8e0e-493c-88ec-e05c3be06e42 [2014-06-28]

CHR HKLM\...\Chrome\Extension: [bbjciahceamgodcoidkjpchnokgfpphh] - C:\Users\Erik_2\AppData\Local\funmoods.crx []

CHR HKLM\...\Chrome\Extension: [cjpglkicenollcignonpgiafdgfeehoj] - C:\Users\Erik_2\AppData\Local\funmoods-speeddial_sf.crx []

CHR HKCU\...\Chrome\Extension: [dlaidocmldibgopdbjiopphnjhaehnbn] - C:\Users\Erik_2\AppData\Local\CRE\dlaidocmldibgopdbjiopphnjhaehnbn.crx []

CHR HKCU\...\Chrome\Extension: [iehjklkgijkjfcfmmjmjlmcccholamaf] - C:\Users\Erik_2\AppData\Local\CRE\iehjklkgijkjfcfmmjmjlmcccholamaf.crx []

CHR HKCU\...\Chrome\Extension: [ieiiggnfmhgcolbimglmfjfpkjildjdd] - C:\Users\Erik_2\AppData\Local\CRE\ieiiggnfmhgcolbimglmfjfpkjildjdd.crx [2013-06-09]

CHR HKCU\...\Chrome\Extension: [incfcgceegpikennjoplhfghaaikdgei] - C:\Users\Erik_2\AppData\Roaming\StartNow Toolbar\CR\zcrx.crx [2013-06-09]

CHR HKCU\...\Chrome\Extension: [klibnahbojhkanfgaglnlalfkgpcppfi] - C:\Users\Erik_2\AppData\Local\CRE\klibnahbojhkanfgaglnlalfkgpcppfi.crx [2013-06-09]

CHR HKCU\...\Chrome\Extension: [pbjikboenpfhbbejgkoklgkhjpfogcam] - C:\Program Files (x86)\Amazon\ABB\AmazonChrome-bds-amzn.crx [2013-07-18]

CHR HKLM-x32\...\Chrome\Extension: [abfmigjiaapipflmopkaaooigcjjdojh] - C:\Program Files (x86)\LyricsContainer\116.crx [2013-07-18]

CHR HKLM-x32\...\Chrome\Extension: [dhkplhfnhceodhffomolpfigojocbpcb] - C:\Users\Erik_2\AppData\Roaming\BabylonToolbar\CR\BabylonChrome1.crx [2013-07-18]

CHR HKLM-x32\...\Chrome\Extension: [ieiiggnfmhgcolbimglmfjfpkjildjdd] - C:\Users\Erik_2\AppData\Local\CRE\ieiiggnfmhgcolbimglmfjfpkjildjdd.crx [2013-06-09]

CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]

CHR HKLM-x32\...\Chrome\Extension: [mjdepfkicdcciagbigfcmdhknnoaaegf] - C:\Program Files (x86)\WhiteSmokeTranslator [2014-07-14]

CHR HKLM-x32\...\Chrome\Extension: [mkndcbhcgphcfkkddanakjiepeknbgle] - C:\Program Files (x86)\RelevantKnowledge\rlcm.crx [2014-07-14]

CHR HKLM-x32\...\Chrome\Extension: [nnhlnhplgmhdclimcadncgcjddhklpao] - C:\ProgramData\nnhlnhplgmhdclimcadncgcjddhklpao\nnhlnhplgmhdclimcadncgcjddhklpao.crx [2014-07-14]

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

CHR HKCU\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-06-19] (AVAST Software)

R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3645456 2014-04-18] (AVG Technologies CZ, s.r.o.)

R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [291912 2014-03-27] (AVG Technologies CZ, s.r.o.)

R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)

R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)

S2 CltMngSvc; C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe [2975168 2014-07-22] () [File not signed]

U2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9216 2014-07-18] (Hi-Rez Studios) [File not signed]

S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]

R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-08-08] (LogMeIn, Inc.)

R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2009-05-14] (Hewlett-Packard) [File not signed]

R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2009-05-14] (Hewlett-Packard) [File not signed]

S2 SpyHunter 4 Service; C:\PROGRA~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [31920 2013-06-02] (Wondershare)

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2009-08-03] ()

R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [13368 2009-07-05] ()

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-06-19] ()

R1 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [21136 2012-10-30] (AVAST Software)

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-06-19] (AVAST Software)

R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-06-19] (AVAST Software)

R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-06-19] ()

R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1039096 2014-06-19] (AVAST Software)

R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423240 2014-06-19] (AVAST Software)

R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [85328 2014-06-19] (AVAST Software)

R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [208416 2014-06-19] ()

U1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [153368 2014-03-27] (AVG Technologies CZ, s.r.o.)

R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [237336 2014-04-18] (AVG Technologies CZ, s.r.o.)

R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [192792 2014-03-27] (AVG Technologies CZ, s.r.o.)

R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [236824 2014-03-27] (AVG Technologies CZ, s.r.o.)

R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [324376 2014-03-27] (AVG Technologies CZ, s.r.o.)

R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [130840 2014-03-31] (AVG Technologies CZ, s.r.o.)

R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [32536 2014-03-27] (AVG Technologies CZ, s.r.o.)

R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [274200 2014-03-31] (AVG Technologies CZ, s.r.o.)

S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2012-06-22] ()

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-10-09] (Malwarebytes Corporation)

R3 MTsensor; C:\Windows\system32\DRIVERS\ASACPI.sys [15416 2009-07-15] ()

S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [51712 2010-12-14] (Apple, Inc.) [File not signed]

S3 SMUpdd; \??\C:\Program Files\Common Files\Goobzo\GBUpdate\smw.sys [X]

S3 SPPD; \??\C:\Windows\system32\drivers\SPPD.sys [X]

S3 taphss; system32\DRIVERS\taphss.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-09 18:28 - 2014-10-09 18:29 - 00040933 _____ () C:\Users\Erik_2\Downloads\FRST.txt

2014-10-09 18:28 - 2014-10-09 18:28 - 02109952 _____ (Farbar) C:\Users\Erik_2\Downloads\FRST64 (1).exe

2014-10-09 17:51 - 2014-10-09 17:51 - 00000000 ____D () C:\Users\Erik_2\AppData\Local\{207E2C40-C076-4F49-8996-57595DFF2756}

2014-10-08 18:03 - 2014-10-08 18:04 - 00000000 ____D () C:\Users\Erik_2\AppData\Local\{9A8807D5-4E6C-47B6-A3D5-F0AB913A68F9}

2014-10-08 17:49 - 2014-10-08 17:49 - 04874632 _____ (LionSea Software co., ltd ) C:\Users\Erik_2\Downloads\setup (2).exe

2014-10-08 16:18 - 2014-10-08 16:18 - 00000000 ____D () C:\Users\Erik_2\AppData\Local\{5D103BDC-C388-4D71-9113-290C49876CD9}

2014-10-07 16:00 - 2014-10-07 16:00 - 00000000 ____D () C:\Users\Erik_2\AppData\Local\{90F5A15D-C3E1-49F2-B2EC-93E561ECA07E}

2014-10-03 15:45 - 2014-10-03 15:46 - 00000000 ____D () C:\Users\Erik_2\AppData\Local\{DAAA8DF7-B439-4C18-9E8D-D3B8341D38EC}

2014-10-02 15:43 - 2014-10-02 15:44 - 00000000 ____D () C:\Users\Erik_2\AppData\Local\{D96729D9-FCFB-470B-BEFA-B9E9D2393E1C}

2014-10-02 15:40 - 2014-10-02 15:40 - 00000000 ____D () C:\Users\Erik_2\AppData\Local\{FAA264D2-4463-4508-8C3D-0B36C5535781}

2014-10-01 22:47 - 2014-10-01 22:47 - 00000000 ____D () C:\Users\Erik_2\AppData\Local\{D538F6C6-6D12-47FD-BFDE-2B7820C559B7}

2014-10-01 21:36 - 2014-10-01 21:36 - 00000000 ____D () C:\Users\Erik_2\AppData\Local\{EC6D0F06-9230-442D-978A-2A2913E6931F}

2014-10-01 21:30 - 2014-10-01 21:30 - 00000000 ____D () C:\Users\Erik_2\AppData\Local\{395CEADF-0B53-4CC2-8E22-327827EF11F4}

2014-10-01 20:28 - 2014-09-24 21:08 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll

2014-10-01 20:28 - 2014-09-24 20:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll

2014-10-01 20:18 - 2014-10-01 20:18 - 00000000 ____D () C:\Users\Erik_2\AppData\Local\{B95191F2-9A65-49DB-8DAD-BE2B9E31E451}

2014-09-29 20:14 - 2014-09-29 20:14 - 00000000 ____D () C:\Users\Erik_2\AppData\Local\{BD6048DE-3706-4002-89F7-83B01B64A0A7}

2014-09-28 22:01 - 2014-09-28 22:01 - 00000874 _____ () C:\Users\Erik_2\AppData\Local\recently-used.xbel

2014-09-28 21:47 - 2014-09-28 21:47 - 00021393 _____ () C:\Users\Erik_2\Downloads\crazykiller.zip

2014-09-28 20:16 - 2014-09-28 20:16 - 00001044 _____ () C:\Users\Erik_2\Desktop\Adobe Photoshop CC 2014.lnk

2014-09-28 20:12 - 2014-09-28 20:12 - 00000000 ____D () C:\Users\Erik_2\AppData\Local\{15F105E6-7895-410C-84E7-8637F95312B8}

2014-09-28 14:59 - 2014-09-28 14:59 - 00000000 ____D () C:\Users\Erik_2\AppData\Local\{8510F909-0A79-4BAE-A0D4-EE9E2C71C1C5}

2014-09-27 22:32 - 2014-09-27 22:32 - 00003502 _____ () C:\Windows\System32\Tasks\AdobeAAMUpdater-1.0-Erik-PC-Erik_2

2014-09-27 20:38 - 2014-09-27 20:38 - 00001044 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CC 2014.lnk

2014-09-27 18:29 - 2014-09-09 17:11 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2014-09-27 18:29 - 2014-09-09 16:47 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll

2014-09-27 17:12 - 2014-09-28 22:00 - 00000000 ___RD () C:\Users\Erik_2\Creative Cloud Files

2014-09-27 17:07 - 2014-09-27 17:07 - 00001273 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk

2014-09-27 17:07 - 2014-09-27 17:07 - 00001261 _____ () C:\Users\Public\Desktop\Adobe Creative Cloud.lnk

2014-09-27 17:01 - 2014-09-27 17:01 - 00615304 _____ (Adobe Systems Incorporated) C:\Users\Erik_2\Downloads\CreativeCloudSet-Up.exe

2014-09-27 14:38 - 2014-09-27 14:38 - 00000000 ____D () C:\Users\Erik_2\Downloads\AdobePhotoshop11Arabiczip

2014-09-27 14:01 - 2014-09-27 14:01 - 00656864 _____ () C:\Users\Erik_2\Downloads\adobephotoshopcs4middleeasternversion-setup (1).exe

2014-09-27 13:52 - 2014-09-27 13:52 - 00656864 _____ () C:\Users\Erik_2\Downloads\adobephotoshopcs4middleeasternversion-setup.exe

2014-09-27 13:11 - 2014-09-27 13:11 - 00000000 ____D () C:\Users\Erik_2\AppData\Local\{B49BBF30-D6B6-4C01-985C-14EAC709B039}

2014-09-20 11:47 - 2014-09-20 11:48 - 00000000 ____D () C:\Users\Erik_2\AppData\Local\{D7FF9692-064B-43CD-933E-BC4610F874C0}

2014-09-19 15:56 - 2014-09-19 15:56 - 00000000 ____D () C:\Users\Erik_2\AppData\Local\{D11F823B-C370-4B02-A5D1-57A9BD3ADC85}

2014-09-18 15:57 - 2014-08-19 13:05 - 00374968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-09-18 15:57 - 2014-08-19 12:39 - 00327872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-09-18 15:57 - 2014-08-18 18:01 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-09-18 15:57 - 2014-08-18 17:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-09-18 15:57 - 2014-08-18 17:29 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-09-18 15:57 - 2014-08-18 17:26 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-09-18 15:57 - 2014-08-18 17:20 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-09-18 15:57 - 2014-08-18 17:19 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-09-18 15:57 - 2014-08-18 17:15 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-09-18 15:57 - 2014-08-18 17:15 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-09-18 15:57 - 2014-08-18 17:14 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-09-18 15:57 - 2014-08-18 17:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-09-18 15:57 - 2014-08-18 17:08 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-09-18 15:57 - 2014-08-18 17:08 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-09-18 15:57 - 2014-08-18 17:08 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-09-18 15:57 - 2014-08-18 17:05 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-09-18 15:57 - 2014-08-18 17:03 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-09-18 15:57 - 2014-08-18 17:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-09-18 15:57 - 2014-08-18 17:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-09-18 15:57 - 2014-08-18 16:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-09-18 15:57 - 2014-08-18 16:56 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-09-18 15:57 - 2014-08-18 16:51 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-09-18 15:57 - 2014-08-18 16:46 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-09-18 15:57 - 2014-08-18 16:45 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-09-18 15:57 - 2014-08-18 16:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-09-18 15:57 - 2014-08-18 16:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-09-18 15:57 - 2014-08-18 16:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-09-18 15:57 - 2014-08-18 16:42 - 02185728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-09-18 15:57 - 2014-08-18 16:40 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-09-18 15:57 - 2014-08-18 16:39 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-09-18 15:57 - 2014-08-18 16:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-09-18 15:57 - 2014-08-18 16:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-09-18 15:57 - 2014-08-18 16:38 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-09-18 15:57 - 2014-08-18 16:37 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-09-18 15:57 - 2014-08-18 16:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-09-18 15:57 - 2014-08-18 16:35 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-09-18 15:57 - 2014-08-18 16:27 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-09-18 15:57 - 2014-08-18 16:25 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-09-18 15:57 - 2014-08-18 16:25 - 00707072 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-09-18 15:57 - 2014-08-18 16:23 - 02104832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-09-18 15:57 - 2014-08-18 16:23 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2014-09-18 15:57 - 2014-08-18 16:22 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-09-18 15:57 - 2014-08-18 16:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-09-18 15:57 - 2014-08-18 16:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-09-18 15:57 - 2014-08-18 16:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-09-18 15:57 - 2014-08-18 16:15 - 02310656 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-09-18 15:57 - 2014-08-18 16:09 - 00603136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-09-18 15:57 - 2014-08-18 16:08 - 02014208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-09-18 15:57 - 2014-08-18 16:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2014-09-18 15:57 - 2014-08-18 15:55 - 01447424 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-09-18 15:57 - 2014-08-18 15:46 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-09-18 15:57 - 2014-08-18 15:38 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-09-18 15:57 - 2014-08-18 15:38 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-09-18 15:57 - 2014-08-18 15:36 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-09-18 15:56 - 2014-08-18 16:16 - 13588480 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-09-18 15:56 - 2014-08-18 16:15 - 11769856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-09-18 15:53 - 2014-09-18 15:53 - 00002515 _____ () C:\Users\Public\Desktop\Skype.lnk

2014-09-18 15:53 - 2014-09-18 15:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

2014-09-18 15:51 - 2014-09-18 15:51 - 00000000 ____D () C:\Users\Erik_2\AppData\Local\{7F33080D-A341-438E-B3B4-CA0464186FC4}

2014-09-17 22:02 - 2014-09-17 22:02 - 00000000 ____D () C:\d89d667a078d3f6568

2014-09-17 22:01 - 2014-06-26 21:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll

2014-09-17 22:01 - 2014-06-26 20:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll

2014-09-17 20:03 - 2014-08-01 06:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll

2014-09-17 20:03 - 2014-08-01 06:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll

2014-09-17 20:02 - 2014-07-06 21:06 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2014-09-17 20:02 - 2014-07-06 21:06 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2014-09-17 20:02 - 2014-07-06 20:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2014-09-17 20:02 - 2014-07-06 20:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2014-09-17 20:02 - 2014-07-06 20:39 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2014-09-17 20:02 - 2014-06-23 22:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll

2014-09-17 20:02 - 2014-06-23 21:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll

2014-09-17 20:01 - 2014-09-04 21:10 - 00578048 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-09-17 20:01 - 2014-09-04 21:05 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-09 18:29 - 2014-08-25 21:35 - 00000000 ____D () C:\FRST

2014-10-09 18:25 - 2014-02-08 10:56 - 00000000 ____D () C:\Users\Erik_2\AppData\Roaming\Skype

2014-10-09 18:01 - 2014-04-16 13:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG

2014-10-09 18:00 - 2011-10-08 11:35 - 00003926 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{190200EA-64F8-43FD-A6F9-52A0040204D2}

2014-10-09 17:59 - 2011-04-05 21:56 - 00000000 ____D () C:\Users\Erik_2\AppData\Local\Adobe

2014-10-09 17:57 - 2009-07-13 23:45 - 00018736 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-10-09 17:57 - 2009-07-13 23:45 - 00018736 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-10-09 17:55 - 2014-07-19 22:05 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-10-09 17:55 - 2014-04-16 13:20 - 00000000 ____D () C:\ProgramData\MFAData

2014-10-09 17:55 - 2012-08-11 23:13 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-10-09 17:55 - 2011-01-29 19:43 - 01650560 _____ () C:\Windows\WindowsUpdate.log

2014-10-09 17:53 - 2009-07-14 00:32 - 00000000 ____D () C:\Windows\system32\FxsTmp

2014-10-09 17:52 - 2013-03-08 17:13 - 00000000 ____D () C:\Program Files (x86)\Steam

2014-10-09 17:51 - 2014-06-29 21:59 - 00000000 ____D () C:\Users\Erik_2\AppData\Local\LogMeIn Hamachi

2014-10-09 17:51 - 2014-04-17 15:04 - 00114503 _____ () C:\Windows\setupact.log

2014-10-09 17:50 - 2011-03-06 20:52 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-10-09 17:48 - 2009-07-14 00:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-10-08 22:36 - 2011-03-06 20:52 - 00000898 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-10-08 18:01 - 2014-04-17 15:03 - 00709262 _____ () C:\Windows\PFRO.log

2014-10-08 16:20 - 2013-01-05 21:54 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update

2014-10-07 17:53 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\rescache

2014-10-07 16:04 - 2012-05-10 21:11 - 00000000 ____D () C:\Users\Erik_2\AppData\Roaming\.minecraft

2014-10-03 17:06 - 2011-01-30 16:37 - 00000000 ____D () C:\Users\Erik_2

2014-10-01 22:47 - 2014-07-24 21:28 - 00000000 ____D () C:\Users\Erik_2\Desktop\Mine-imator v0.6.2

2014-10-01 22:33 - 2014-07-18 13:41 - 00000000 ____D () C:\Users\Erik_2\Desktop\Thumbnails

2014-09-28 22:01 - 2014-07-13 20:46 - 00000000 ____D () C:\Users\Erik_2\.gimp-2.8

2014-09-27 22:32 - 2012-08-01 12:00 - 00000000 ____D () C:\ProgramData\regid.1986-12.com.adobe

2014-09-27 22:32 - 2011-01-30 16:38 - 00000000 ____D () C:\Users\Erik_2\AppData\Roaming\Adobe

2014-09-27 20:58 - 2012-08-01 11:54 - 00000000 ____D () C:\Program Files\Common Files\Adobe

2014-09-27 20:55 - 2012-08-01 11:55 - 00000000 ____D () C:\Program Files\Adobe

2014-09-27 20:54 - 2010-11-02 11:57 - 00000000 ____D () C:\Program Files (x86)\Adobe

2014-09-27 20:31 - 2014-07-04 16:53 - 00000000 ____D () C:\ProgramData\Package Cache

2014-09-27 20:27 - 2010-11-02 11:57 - 00000000 ____D () C:\ProgramData\Adobe

2014-09-27 14:22 - 2014-07-10 23:16 - 00000000 ____D () C:\Users\Erik_2\Desktop\vids that need to be edited

2014-09-27 13:56 - 2014-08-26 22:46 - 00000000 ____D () C:\Program Files (x86)\GreenGamesAndHam

2014-09-27 13:56 - 2014-08-26 22:27 - 00000000 ____D () C:\Users\Erik_2\AppData\Roaming\uTorrent

2014-09-27 13:55 - 2012-08-11 23:13 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-09-27 13:55 - 2012-08-11 23:13 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-09-27 13:55 - 2012-01-02 01:31 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-09-18 15:55 - 2011-11-09 18:05 - 00776456 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2014-09-18 15:55 - 2009-07-14 00:13 - 00776456 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-09-18 15:53 - 2014-02-08 10:55 - 00000000 ___RD () C:\Program Files (x86)\Skype

2014-09-18 15:53 - 2014-02-08 10:55 - 00000000 ____D () C:\ProgramData\Skype

2014-09-17 22:02 - 2013-08-15 03:25 - 00000000 ____D () C:\Windows\system32\MRT

2014-09-17 22:02 - 2011-02-06 14:39 - 101694776 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-09-17 22:01 - 2014-05-05 22:03 - 00000000 ___SD () C:\Windows\system32\CompatTel

Files to move or delete:

====================

C:\Users\Public\AlexaNSISPlugin.3812.dll

C:\Users\Public\dcmsvcsetup.exe

C:\Users\Public\invokesi.exe

Some content of TEMP:

====================

C:\Users\Erik\AppData\Local\Temp\atl80.dll

C:\Users\Erik\AppData\Local\Temp\mfc80.dll

C:\Users\Erik\AppData\Local\Temp\mfc80u.dll

C:\Users\Erik\AppData\Local\Temp\mfcm80.dll

C:\Users\Erik\AppData\Local\Temp\mfcm80u.dll

C:\Users\Erik\AppData\Local\Temp\msvcm80.dll

C:\Users\Erik\AppData\Local\Temp\msvcp80.dll

C:\Users\Erik\AppData\Local\Temp\msvcr80.dll

C:\Users\Erik\AppData\Local\Temp\TmDbg32.dll

C:\Users\Erik\AppData\Local\Temp\TmDbg64.dll

C:\Users\Erik_2\AppData\Local\Temp\AutoRun.exe

C:\Users\Erik_2\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpmof9ty.dll

C:\Users\Erik_2\AppData\Local\Temp\InstallFlashPlayer.exe

C:\Users\Erik_2\AppData\Local\Temp\JavaIC.dll

C:\Users\Erik_2\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe

C:\Users\Erik_2\AppData\Local\Temp\msscct32.dll

C:\Users\Erik_2\AppData\Local\Temp\nsbE7C4.exe

C:\Users\Erik_2\AppData\Local\Temp\nslB2F9.exe

C:\Users\Erik_2\AppData\Local\Temp\nsrA957.exe

C:\Users\Erik_2\AppData\Local\Temp\nsrAE38.exe

C:\Users\Erik_2\AppData\Local\Temp\nsrE11F.exe

C:\Users\Erik_2\AppData\Local\Temp\nswEFE0.exe

C:\Users\Erik_2\AppData\Local\Temp\Tsu22E417B9.dll

C:\Users\Erik_2\AppData\Local\Temp\Tsu23BFCC2B.dll

C:\Users\Erik_2\AppData\Local\Temp\Tsu2F76AE75.dll

C:\Users\Erik_2\AppData\Local\Temp\Tsu479E6B4A.dll

C:\Users\Erik_2\AppData\Local\Temp\Uninstaller-3916.exe

C:\Users\Erik_2\AppData\Local\Temp\wget.exe

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2014-10-07 17:45

==================== End Of Log ============================

------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

chowder2757 · October 9, 2014

and here is the additional log

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 08-10-2014 01

Ran by Erik_2 at 2014-10-09 18:30:23

Running from C:\Users\Erik_2\Downloads

Boot Mode: Normal

==========================================================

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: avast! Antivirus (Enabled - Up to date) {C37D8F93-0602-E43C-40AA-47DAD597F308}

AS: avast! Antivirus (Enabled - Up to date) {781C6E77-2038-EBB2-7A1A-7CA8AE10B9B5}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

"Batman - Arkham Origins" (HKLM-x32\...\{C0E2E169-E84A-435A-B680-AB7E3BB1F23C}_is1) (Version: 1.0.0.0 - )

64 Bit HP CIO Components Installer (Version: 1.2.0 - Hewlett-Packard) Hidden

Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)

Adobe After Effects CS6 (HKLM-x32\...\{4817D846-700B-474E-A31B-80892B3E92E3}) (Version: 11 - Adobe Systems Incorporated)

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.8.0.870 - Adobe Systems Incorporated)

Adobe AIR (x32 Version: 3.8.0.870 - Adobe Systems Incorporated) Hidden

Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 2.7.1.418 - Adobe Systems Incorporated)

Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2.1 - Adobe Systems Incorporated)

Adobe Download Assistant (x32 Version: 1.2.1 - Adobe Systems Incorporated) Hidden

Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.167 - Adobe Systems Incorporated)

Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated)

Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)

Adobe Help Manager (x32 Version: 4.0.244 - Adobe Systems Incorporated) Hidden

Adobe Photoshop CC 2014 (HKLM-x32\...\{D7A4F897-B20A-42D0-862D-CB5F6DB7391D}) (Version: 15.1 - Adobe Systems Incorporated)

Adobe Reader 9.1 MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-A91000000001}) (Version: 9.1.0 - Adobe Systems Incorporated)

AI Manager (HKLM-x32\...\{4AF95DE2-B54D-4C3F-9494-FD3B558E2C2D}) (Version: 1.08.07 - ASUSTeK)

AMD USB Filter Driver (x32 Version: 1.0.15.94 - Advanced Micro Devices, Inc.) Hidden

ASUS Backup Wizard (HKLM-x32\...\{124C9BD0-8C52-40AB-8238-0605703B1C28}) (Version: 1.00.09 - ASUSTeK Computer Inc.)

ASUS VIBE (HKLM-x32\...\ASUS VIBE) (Version: 1.0.188 - Ecareme, Inc.)

ASUSUpdate (HKLM-x32\...\{587178E7-B1DF-494E-9838-FA4DD36E873C}) (Version: 7.18.03 - ASUSTeK Computer Inc.)

ATI Catalyst Install Manager (HKLM\...\{0C798FBB-2BA6-D113-C055-936965550F33}) (Version: 3.0.765.0 - ATI Technologies, Inc.)

avast! Free Antivirus (HKLM-x32\...\avast) (Version: 9.0.2018 - Avast Software)

AVG 2014 (HKLM\...\AVG) (Version: 2014.0.4570 - AVG Technologies)

AVG 2014 (Version: 14.0.4040 - AVG Technologies) Hidden

AVG 2014 (Version: 14.0.4570 - AVG Technologies) Hidden

Bandicam (HKLM-x32\...\Bandicam) (Version: 1.9.4.505 - Bandisoft.com)

Bandisoft MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version: - Bandisoft.com)

Best Buy pc app (Version: 3.1.1.0 - Best Buy) Hidden

Best Buy pc app (x32 Version: 3.1.1.0 - Best Buy) Hidden

Bing Rewards Client Installer (x32 Version: 16.0.345.0 - Microsoft Corporation) Hidden

Catalyst Control Center Core Implementation (x32 Version: 2010.0210.2206.39615 - ATI) Hidden

Catalyst Control Center Graphics Full Existing (x32 Version: 2010.0210.2206.39615 - ATI) Hidden

Catalyst Control Center Graphics Full New (x32 Version: 2010.0210.2206.39615 - ATI) Hidden

Catalyst Control Center Graphics Light (x32 Version: 2010.0210.2206.39615 - ATI) Hidden

Catalyst Control Center Graphics Previews Common (x32 Version: 2010.0210.2206.39615 - ATI) Hidden

Catalyst Control Center Graphics Previews Vista (x32 Version: 2010.0210.2206.39615 - ATI) Hidden

Catalyst Control Center InstallProxy (x32 Version: 2010.0210.2206.39615 - ATI Technologies, Inc.) Hidden

Catalyst Control Center Localization All (x32 Version: 2010.0210.2206.39615 - ATI) Hidden

CCC Help Chinese Standard (x32 Version: 2010.0210.2205.39615 - ATI) Hidden

CCC Help Chinese Traditional (x32 Version: 2010.0210.2205.39615 - ATI) Hidden

CCC Help Czech (x32 Version: 2010.0210.2205.39615 - ATI) Hidden

CCC Help Danish (x32 Version: 2010.0210.2205.39615 - ATI) Hidden

CCC Help Dutch (x32 Version: 2010.0210.2205.39615 - ATI) Hidden

CCC Help English (x32 Version: 2010.0210.2205.39615 - ATI) Hidden

CCC Help Finnish (x32 Version: 2010.0210.2205.39615 - ATI) Hidden

CCC Help French (x32 Version: 2010.0210.2205.39615 - ATI) Hidden

CCC Help German (x32 Version: 2010.0210.2205.39615 - ATI) Hidden

CCC Help Greek (x32 Version: 2010.0210.2205.39615 - ATI) Hidden

CCC Help Hungarian (x32 Version: 2010.0210.2205.39615 - ATI) Hidden

CCC Help Italian (x32 Version: 2010.0210.2205.39615 - ATI) Hidden

CCC Help Japanese (x32 Version: 2010.0210.2205.39615 - ATI) Hidden

CCC Help Korean (x32 Version: 2010.0210.2205.39615 - ATI) Hidden

CCC Help Norwegian (x32 Version: 2010.0210.2205.39615 - ATI) Hidden

CCC Help Polish (x32 Version: 2010.0210.2205.39615 - ATI) Hidden

CCC Help Portuguese (x32 Version: 2010.0210.2205.39615 - ATI) Hidden

CCC Help Russian (x32 Version: 2010.0210.2205.39615 - ATI) Hidden

CCC Help Spanish (x32 Version: 2010.0210.2205.39615 - ATI) Hidden

CCC Help Swedish (x32 Version: 2010.0210.2205.39615 - ATI) Hidden

CCC Help Thai (x32 Version: 2010.0210.2205.39615 - ATI) Hidden

CCC Help Turkish (x32 Version: 2010.0210.2205.39615 - ATI) Hidden

ccc-core-static (x32 Version: 2010.0210.2206.39615 - ATI) Hidden

ccc-utility64 (Version: 2010.0210.2206.39615 - ATI) Hidden

Complément Messenger (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Control ActiveX de Windows Live Mesh para conexiones remotas (HKLM-x32\...\{04668DF2-D32F-4555-9C7E-35523DCD6544}) (Version: 15.4.5722.2 - Microsoft Corporation)

Contrôle ActiveX Windows Live Mesh pour connexions à distance (HKLM-x32\...\{55D003F4-9599-44BF-BA9E-95D060730DD3}) (Version: 15.4.5722.2 - Microsoft Corporation)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

EPSON WF-3520 Series Printer Uninstall (HKLM\...\EPSON WF-3520 Series) (Version: - SEIKO EPSON Corporation)

fst_us_123 (HKLM-x32\...\fst_us_123_is1) (Version: - FREE_SOFTTODAY) <==== ATTENTION

Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

GIMP 2.8.10 (HKLM\...\GIMP-2_is1) (Version: 2.8.10 - The GIMP Team)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 33.0.1750.154 - Google Inc.)

Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden

herdProtect Anti-Malware Scanner (HKLM-x32\...\herdProtectScan) (Version: 1.0 - Reason Company Software Inc.)

Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)

Internet Explorer Toolbar 4.8 by SweetPacks (HKLM-x32\...\{DD85D6BF-4787-4A93-99A5-3F0CF0AE8834}) (Version: 4.8.0000 - SweetIM Technologies Ltd.) <==== ATTENTION

Internet TV for Windows Media Center (HKLM-x32\...\{9D318C86-AF4C-409F-A6AC-7183FF4CF424}) (Version: 4.2.2.0 - Microsoft Corporation)

iTunes (HKLM\...\{5A68A656-979F-4168-8795-E2E368AA4DC2}) (Version: 11.2.2.3 - Apple Inc.)

Java 7 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.250 - Oracle)

Java 7 Update 45 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417045FF}) (Version: 7.0.450 - Oracle)

Java Auto Updater (x32 Version: 2.1.9.5 - Sun Microsystems, Inc.) Hidden

Java 6 Update 26 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216026FF}) (Version: 6.0.260 - Oracle)

Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.236 - LogMeIn, Inc.)

LogMeIn Hamachi (x32 Version: 2.2.0.236 - LogMeIn, Inc.) Hidden

Malwarebytes Anti-Malware version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)

Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden

Messenger Companion (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden

Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden

Microsoft Application Error Reporting (x32 Version: 12.0.6012.5000 - Microsoft Corporation) Hidden

Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)

Microsoft Office Basic Edition 2003 (HKLM-x32\...\{91130409-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)

Microsoft Office Click-to-Run 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)

Microsoft Office Click-to-Run 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden

Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)

Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0407-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)

Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0409-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)

Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-040C-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)

Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0413-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)

Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0C0A-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)

Microsoft Office Starter 2010 - English (HKLM-x32\...\{90140011-0066-0409-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)

Microsoft PowerPoint Viewer (HKLM-x32\...\{95140000-00AF-0409-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft VC9 runtime libraries (x32 Version: 2.0.0 - AOL Inc.) Hidden

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden

Mozilla Firefox 27.0.1 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 27.0.1 (x86 en-US)) (Version: 27.0.1 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 27.0.1 - Mozilla)

MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden

MSVCRT Redists (Version: 1.0 - Sony Creative Software Inc.) Hidden

MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden

MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB973685) (HKLM-x32\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)

My Driver Updater v3.1 (HKLM-x32\...\My Driver Updater_is1) (Version: 3.1 - Softitube Ltd)

NVIDIA PhysX (HKLM-x32\...\{7B5AA67E-FEA0-40BB-BAB5-CA56645A589C}) (Version: 9.13.0725 - NVIDIA Corporation)

Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version: - )

Platform (x32 Version: 1.34 - VIA Technologies, Inc.) Hidden

QuickShare (HKLM-x32\...\{1B325F70-A984-421E-8407-06683E6EF03B}) (Version: 1.90.60.12091 - Linkury Inc.) <==== ATTENTION

QuickTime (HKLM-x32\...\{57752979-A1C9-4C02-856B-FBB27AC4E02C}) (Version: 7.69.80.9 - Apple Inc.)

Realm of the Mad God (HKLM-x32\...\Steam App 200210) (Version: - Wild Shadow Studios)

Rocket (HKCU\...\Rocket) (Version: 31.0.1650.23 - Rocket) <==== ATTENTION

SavetheChildren Reminder by We-Care.com v4.1.22.4 (HKLM-x32\...\{DB9BF6DA-8030-4A21-9FF4-8856A7556FCF}) (Version: 4.1.22.4 - We-Care.com)

ScorpionSaver (HKLM-x32\...\{9B65F9A3-9D24-452A-B6EF-1457D65E4259}) (Version: 1.0.0.0 - Adpeak, Inc.) <==== ATTENTION

ScorpionSaver Services (HKLM\...\{6E810AB6-F34E-49A3-A93F-9E503660F718}) (Version: 1.0.0.0 - Adpeak, Inc.) <==== ATTENTION

Search Protect (HKLM-x32\...\SearchProtect) (Version: 2.16.10.61 - Client Connect LTD) <==== ATTENTION

SelectionLinks (HKLM-x32\...\sl-pmi) (Version: 1.0 - SelectionLinks) <==== ATTENTION

Should I Remove It (HKCU\...\Should I Remove It 1.0.4) (Version: 1.0.4 - Reason Software Company Inc.)

Should I Remove It (x32 Version: 1.0.4 - Reason Software Company Inc.) Hidden

Sierra Utilities (HKLM-x32\...\Sierra Utilities) (Version: - )

Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)

Skype™ 6.20 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.20.104 - Skype Technologies S.A.)

Smite (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF017}) (Version: 1.0.2268.2 - Hi-Rez Studios)

Source SDK Base 2006 (HKLM-x32\...\Steam App 215) (Version: - Valve)

Sparta (HKCU\...\Sparta) (Version: - Sparta)

ss Supporter 1.80 (HKLM-x32\...\{5F189DF5-2D05-472B-9091-84D9848AE48B}{f7dc94c1}) (Version: - Certified Publisher) <==== ATTENTION

Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)

Test Drive Off-Road 3 (HKLM-x32\...\Test Drive Off-Road 3) (Version: - Infogrames)

The Sims™ Life Stories (HKLM-x32\...\{DA932D71-E52A-43D5-009E-395A1AEC1474}) (Version: - )

Toribash (HKLM-x32\...\Steam App 248570) (Version: - Nabi Studios)

Unity Web Player (HKCU\...\UnityWebPlayer) (Version: - Unity Technologies ApS)

Unturned (HKLM-x32\...\Steam App 304930) (Version: - Nelson Sexton)

VIA Platform Device Manager (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.34 - VIA Technologies, Inc.)

Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)

Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)

WhiteSmokeTranslator (HKLM-x32\...\WhiteSmokeTranslator) (Version: 1.00.6033.12731 - WhiteSmoke)

Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)

Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Family Safety (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden

Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden

Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Language Selector (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden

Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (HKLM-x32\...\{C32CE55C-12BA-4951-8797-0967FDEF556F}) (Version: 15.4.5722.2 - Microsoft Corporation)

Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)

Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)

Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden

Windows Live Messenger Companion Core (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden

Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden

Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden

Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden

Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden

Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden

Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

WSE Rocket (HKLM-x32\...\WSE Rocket) (Version: - WSE Rocket) <==== ATTENTION

Xiph.Org Open Codecs 0.85.17777 (HKLM-x32\...\Open Codecs) (Version: 0.85.17777 - Xiph.Org)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

==================== Restore Points =========================

27-09-2014 22:06:04 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030

27-09-2014 22:07:01 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610

28-09-2014 01:29:43 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030

28-09-2014 01:30:46 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610

28-09-2014 01:31:15 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030

28-09-2014 04:02:46 Windows Update

02-10-2014 03:54:09 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-13 21:34 - 2009-06-10 16:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {07B3E8A0-9EE1-411C-BB13-ADA944B64703} - System32\Tasks\ShopperProJSUpd => C:\Program Files (x86)\ShopperPro\updater.exe <==== ATTENTION

Task: {12D9FFF9-C4E6-473D-A09D-D546211FC9CD} - System32\Tasks\twc_screensaver_updater => C:\Program Files (x86)\The Weather Channel FW\Screensaver\TWCScreensaverUpdater.exe [2010-03-31] (The Weather Channel)

Task: {19FEBFAC-1D12-49DA-A530-338B361FB3CA} - System32\Tasks\ASUS\AsBackupWizard_Run => C:\Program Files (x86)\ASUS\AsBackupWizard\AsRunBkWizardHelper.exe [2010-04-23] (ASUSTeK Computer Inc.)

Task: {1DE2C805-0CE2-4CDD-A816-5332CFACDB2E} - System32\Tasks\GorillaPrice => C:\Program Files (x86)\NetNucleous\GorillaPrice\GorillaPrice.exe <==== ATTENTION

Task: {3296FB4E-8F13-4422-99FB-9836D100626B} - System32\Tasks\GPRecover => C:\Users\Erik_2\AppData\Roaming\NetNucleous\GorillaPrice\GpRecover.exe

Task: {3609A33B-2080-47DE-B621-29F766D24AFE} - System32\Tasks\ShopperPro => C:\Program Files (x86)\ShopperPro\ShopperPro.exe <==== ATTENTION

Task: {36476120-0801-42AE-84B8-4C0C5A132C19} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-27] (Adobe Systems Incorporated)

Task: {48F0F782-0930-4189-9932-DFCE07E9E129} - System32\Tasks\GorillaRecover => C:\Users\Erik_2\AppData\Roaming\NetNucleous\GorillaPrice\GpRecover.exe

Task: {4F3C13AF-5D95-4728-90A6-CD31FB3E2AE5} - System32\Tasks\SPDriver => C:\Program Files (x86)\ShopperPro\JSDriver\1.30.1.146\jsdrv.exe <==== ATTENTION

Task: {4F7521E0-5030-4229-81A9-3C590C28B238} - System32\Tasks\ASUS\ASUS Update Checker => C:\Program Files (x86)\ASUS\ASUSUpdate\UpdateChecker\UpdateChecker.exe [2009-12-28] (ASUSTeK Computer Inc.)

Task: {53AFF0D6-FCDD-48BE-B2F8-D6BF6B98B467} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-03-06] (Google Inc.)

Task: {5614FB77-7EC2-45F8-86F3-76368E56F97C} - System32\Tasks\RegClean Pro => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe <==== ATTENTION

Task: {9FDDC0D2-61DF-4CC5-B3C7-A6C301F9B756} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-390533914-481344091-1144799054-1003 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe

Task: {AD27FE19-DD71-4A43-8B11-5116A7CE348F} - System32\Tasks\ASUS\ASUS RegRun Loader => C:\Program Files (x86)\ASUS\AASP\1.00.97\AsLoader.exe [2009-12-24] (ASUSTeK Computer Inc.)

Task: {B24516AB-CC9A-472F-A97D-B8DC4BF8A4CF} - System32\Tasks\Updater19866.exe => C:\Users\Erik_2\AppData\Local\Updater19866\Updater19866.exe <==== ATTENTION

Task: {D674376B-1DAE-449A-8989-0B95B37999B7} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-03-06] (Google Inc.)

Task: {D7EE1F6D-7EF4-44FA-81B8-3787DFB5F5AA} - System32\Tasks\Advanced System Protector_startup => C:\Program Files (x86)\Advanced System Protector\AdvancedSystemProtector.exe <==== ATTENTION

Task: {DB754F11-5C62-40E0-BCCD-A961793AA46C} - System32\Tasks\SpyHunter4Startup => C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter4.exe

Task: {DEA7C68F-3493-4948-BA3F-D19C81F879C4} - System32\Tasks\AdobeAAMUpdater-1.0-Erik-PC-Erik_2 => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2014-02-27] (Adobe Systems Incorporated)

Task: {EE193CFC-3167-4C84-83E2-5E8C93574C23} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-06-19] (AVAST Software)

Task: {F235FC23-4016-4556-B37A-03A8574EA0FA} - System32\Tasks\VisualBeeRecovery => C:\Users\Erik_2\AppData\Local\VisualBeeExe\VisualBeeRecovery.exe <==== ATTENTION

Task: {F3783033-9F0C-42B5-BDB2-EF7817A0A7A0} - System32\Tasks\Advanced System Protector => C:\Program Files (x86)\RegClean Pro\SystweakASP.exe <==== ATTENTION

Task: {F5B75499-9552-4E2C-97F5-3483D56CDF9F} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-390533914-481344091-1144799054-1003 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe

Task: {F6783632-F9B0-46B9-9566-9D437818EC15} - System32\Tasks\RunAsStdUser Task => C:\Users\Erik_2\AppData\Local\Temp\{86D4B82A-ABED-442A-BE86-96357B70F4FE}\RunIE.exe <==== ATTENTION

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2014-07-16 11:06 - 2014-07-16 11:06 - 00672416 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll

2010-11-02 11:55 - 2009-05-07 03:51 - 00071680 _____ () C:\Program Files (x86)\VIA\VIAudioi\VDeck\QsApoApi64.dll

2010-11-02 11:55 - 2009-05-07 03:53 - 00379392 _____ () C:\Program Files (x86)\VIA\VIAudioi\VDeck\Dts2ApoApi64.dll

2010-11-02 11:55 - 2008-01-18 01:50 - 00098816 _____ () C:\Program Files (x86)\VIA\VIAudioi\VDeck\VMicApi.dll

2010-11-02 11:55 - 2010-03-02 02:31 - 64105984 _____ () C:\Program Files (x86)\VIA\VIAudioi\VDeck\Skin.dll

2014-07-16 11:05 - 2014-07-16 11:05 - 05558432 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe

2011-01-29 19:46 - 2011-01-29 19:46 - 00270336 _____ () C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll

2014-10-09 17:49 - 2014-10-09 17:49 - 02859008 _____ () C:\Program Files\AVAST Software\Avast\defs\14100901\algo.dll

2014-03-22 12:52 - 2014-03-22 12:52 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll

2014-07-03 06:45 - 2014-07-03 06:45 - 32733056 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CEF\libcef.dll

2014-07-03 06:45 - 2014-07-03 06:45 - 00742784 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CEF\libglesv2.dll

2014-07-03 06:45 - 2014-07-03 06:45 - 00136576 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CEF\libegl.dll

2014-03-23 14:35 - 2014-03-14 19:50 - 00051016 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\chrome_elf.dll

2014-03-23 14:35 - 2014-03-14 19:50 - 00716616 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\libglesv2.dll

2014-03-23 14:35 - 2014-03-14 19:50 - 00100168 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\libegl.dll

2014-03-23 14:35 - 2014-03-14 19:50 - 04061000 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\pdf.dll

2014-03-23 14:35 - 2014-03-14 19:50 - 00394568 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\ppGoogleNaClPluginChrome.dll

2014-03-23 14:35 - 2014-03-14 19:50 - 01647432 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:373E1720

AlternateDataStreams: C:\ProgramData\TEMP:5711EF65

AlternateDataStreams: C:\ProgramData\TEMP:A18D1A5B

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\plsapp => ""="service"

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

========================= Accounts: ==========================

Administrator (S-1-5-21-390533914-481344091-1144799054-500 - Administrator - Disabled)

Erik_2 (S-1-5-21-390533914-481344091-1144799054-1003 - Administrator - Enabled) => C:\Users\Erik_2

Guest (S-1-5-21-390533914-481344091-1144799054-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-390533914-481344091-1144799054-1002 - Limited - Enabled)

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:

==================

Error: (10/09/2014 06:00:48 PM) (Source: MsiInstaller) (EventID: 10005) (User: NT AUTHORITY)

Description: SA_Error1709: StandardAction(0xC00706AD): Product: AVG 2014 -- Error 27046. CA_Error27046: SetWfpCallbacksAction(0xC007001C): Driver installation failed

Error: (10/09/2014 06:00:13 PM) (Source: MsiInstaller) (EventID: 11311) (User: NT AUTHORITY)

Description: SA_Error1709: StandardAction(0xC00706AD): Product: AVG 2014 -- Error 1311. SA_Error1311: StandardAction(0xC007051F): Source file not found(cabinet): C:\ProgramData\AVG2014\SetupBackup\lng_esa.cab. Verify that the file exists and that you can access it.

Error: (10/09/2014 06:00:10 PM) (Source: MsiInstaller) (EventID: 11311) (User: NT AUTHORITY)

Description: SA_Error1709: StandardAction(0xC00706AD): Product: AVG 2014 -- Error 1311. SA_Error1311: StandardAction(0xC007051F): Source file not found(cabinet): C:\ProgramData\AVG2014\SetupBackup\lng_zta.cab. Verify that the file exists and that you can access it.

Error: (10/09/2014 06:00:08 PM) (Source: MsiInstaller) (EventID: 11311) (User: NT AUTHORITY)

Description: SA_Error1709: StandardAction(0xC00706AD): Product: AVG 2014 -- Error 1311. SA_Error1311: StandardAction(0xC007051F): Source file not found(cabinet): C:\ProgramData\AVG2014\SetupBackup\lng_zha.cab. Verify that the file exists and that you can access it.

Error: (10/09/2014 06:00:05 PM) (Source: MsiInstaller) (EventID: 11311) (User: NT AUTHORITY)

Description: SA_Error1709: StandardAction(0xC00706AD): Product: AVG 2014 -- Error 1311. SA_Error1311: StandardAction(0xC007051F): Source file not found(cabinet): C:\ProgramData\AVG2014\SetupBackup\lng_tra.cab. Verify that the file exists and that you can access it.

Error: (10/09/2014 06:00:02 PM) (Source: MsiInstaller) (EventID: 11311) (User: NT AUTHORITY)

Description: SA_Error1709: StandardAction(0xC00706AD): Product: AVG 2014 -- Error 1311. SA_Error1311: StandardAction(0xC007051F): Source file not found(cabinet): C:\ProgramData\AVG2014\SetupBackup\lng_rua.cab. Verify that the file exists and that you can access it.

Error: (10/09/2014 06:00:00 PM) (Source: MsiInstaller) (EventID: 11311) (User: NT AUTHORITY)

Description: SA_Error1709: StandardAction(0xC00706AD): Product: AVG 2014 -- Error 1311. SA_Error1311: StandardAction(0xC007051F): Source file not found(cabinet): C:\ProgramData\AVG2014\SetupBackup\lng_msa.cab. Verify that the file exists and that you can access it.

Error: (10/09/2014 05:59:56 PM) (Source: MsiInstaller) (EventID: 11311) (User: NT AUTHORITY)

Description: SA_Error1709: StandardAction(0xC00706AD): Product: AVG 2014 -- Error 1311. SA_Error1311: StandardAction(0xC007051F): Source file not found(cabinet): C:\ProgramData\AVG2014\SetupBackup\lng_koa.cab. Verify that the file exists and that you can access it.

Error: (10/09/2014 05:59:54 PM) (Source: MsiInstaller) (EventID: 11311) (User: NT AUTHORITY)

Description: SA_Error1709: StandardAction(0xC00706AD): Product: AVG 2014 -- Error 1311. SA_Error1311: StandardAction(0xC007051F): Source file not found(cabinet): C:\ProgramData\AVG2014\SetupBackup\lng_ida.cab. Verify that the file exists and that you can access it.

Error: (10/09/2014 05:59:52 PM) (Source: MsiInstaller) (EventID: 11311) (User: NT AUTHORITY)

Description: SA_Error1709: StandardAction(0xC00706AD): Product: AVG 2014 -- Error 1311. SA_Error1311: StandardAction(0xC007051F): Source file not found(cabinet): C:\ProgramData\AVG2014\SetupBackup\lng_ina.cab. Verify that the file exists and that you can access it.

System errors:

=============

Error: (10/09/2014 05:51:22 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)

Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)

Error: (10/09/2014 05:49:51 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)

Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYLOCAL SERVICES-1-5-19LocalHost (Using LRPC)

Error: (10/09/2014 05:48:56 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: The Search Protect Service service failed to start due to the following error:

%%216

Error: (10/09/2014 05:48:50 PM) (Source: Service Control Manager) (EventID: 7003) (User: )

Description: The IPsec Policy Agent service depends the following service: BFE. This service might not be installed.

Error: (10/09/2014 05:48:50 PM) (Source: Service Control Manager) (EventID: 7003) (User: )

Description: The IKE and AuthIP IPsec Keying Modules service depends the following service: BFE. This service might not be installed.

Error: (10/09/2014 05:48:48 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: The Computer Browser service terminated with the following error:

%%1060

Error: (10/09/2014 05:48:40 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: The SpyHunter 4 Service service failed to start due to the following error:

%%2

Error: (10/08/2014 06:03:50 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)

Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)

Error: (10/08/2014 06:02:32 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)

Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYLOCAL SERVICES-1-5-19LocalHost (Using LRPC)

Error: (10/08/2014 06:01:31 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: The Search Protect Service service failed to start due to the following error:

%%216

Microsoft Office Sessions:

=========================

Error: (10/09/2014 06:00:48 PM) (Source: MsiInstaller) (EventID: 10005) (User: NT AUTHORITY)

Description: SA_Error1709: StandardAction(0xC00706AD): Product: AVG 2014 -- Error 27046. CA_Error27046: SetWfpCallbacksAction(0xC007001C): Driver installation failed(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (10/09/2014 06:00:13 PM) (Source: MsiInstaller) (EventID: 11311) (User: NT AUTHORITY)

Description: SA_Error1709: StandardAction(0xC00706AD): Product: AVG 2014 -- Error 1311. SA_Error1311: StandardAction(0xC007051F): Source file not found(cabinet): C:\ProgramData\AVG2014\SetupBackup\lng_esa.cab. Verify that the file exists and that you can access it.(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (10/09/2014 06:00:10 PM) (Source: MsiInstaller) (EventID: 11311) (User: NT AUTHORITY)

Description: SA_Error1709: StandardAction(0xC00706AD): Product: AVG 2014 -- Error 1311. SA_Error1311: StandardAction(0xC007051F): Source file not found(cabinet): C:\ProgramData\AVG2014\SetupBackup\lng_zta.cab. Verify that the file exists and that you can access it.(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (10/09/2014 06:00:08 PM) (Source: MsiInstaller) (EventID: 11311) (User: NT AUTHORITY)

Description: SA_Error1709: StandardAction(0xC00706AD): Product: AVG 2014 -- Error 1311. SA_Error1311: StandardAction(0xC007051F): Source file not found(cabinet): C:\ProgramData\AVG2014\SetupBackup\lng_zha.cab. Verify that the file exists and that you can access it.(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (10/09/2014 06:00:05 PM) (Source: MsiInstaller) (EventID: 11311) (User: NT AUTHORITY)

Description: SA_Error1709: StandardAction(0xC00706AD): Product: AVG 2014 -- Error 1311. SA_Error1311: StandardAction(0xC007051F): Source file not found(cabinet): C:\ProgramData\AVG2014\SetupBackup\lng_tra.cab. Verify that the file exists and that you can access it.(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (10/09/2014 06:00:02 PM) (Source: MsiInstaller) (EventID: 11311) (User: NT AUTHORITY)

Description: SA_Error1709: StandardAction(0xC00706AD): Product: AVG 2014 -- Error 1311. SA_Error1311: StandardAction(0xC007051F): Source file not found(cabinet): C:\ProgramData\AVG2014\SetupBackup\lng_rua.cab. Verify that the file exists and that you can access it.(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (10/09/2014 06:00:00 PM) (Source: MsiInstaller) (EventID: 11311) (User: NT AUTHORITY)

Description: SA_Error1709: StandardAction(0xC00706AD): Product: AVG 2014 -- Error 1311. SA_Error1311: StandardAction(0xC007051F): Source file not found(cabinet): C:\ProgramData\AVG2014\SetupBackup\lng_msa.cab. Verify that the file exists and that you can access it.(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (10/09/2014 05:59:56 PM) (Source: MsiInstaller) (EventID: 11311) (User: NT AUTHORITY)

Description: SA_Error1709: StandardAction(0xC00706AD): Product: AVG 2014 -- Error 1311. SA_Error1311: StandardAction(0xC007051F): Source file not found(cabinet): C:\ProgramData\AVG2014\SetupBackup\lng_koa.cab. Verify that the file exists and that you can access it.(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (10/09/2014 05:59:54 PM) (Source: MsiInstaller) (EventID: 11311) (User: NT AUTHORITY)

Description: SA_Error1709: StandardAction(0xC00706AD): Product: AVG 2014 -- Error 1311. SA_Error1311: StandardAction(0xC007051F): Source file not found(cabinet): C:\ProgramData\AVG2014\SetupBackup\lng_ida.cab. Verify that the file exists and that you can access it.(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (10/09/2014 05:59:52 PM) (Source: MsiInstaller) (EventID: 11311) (User: NT AUTHORITY)

Description: SA_Error1709: StandardAction(0xC00706AD): Product: AVG 2014 -- Error 1311. SA_Error1311: StandardAction(0xC007051F): Source file not found(cabinet): C:\ProgramData\AVG2014\SetupBackup\lng_ina.cab. Verify that the file exists and that you can access it.(NULL)(NULL)(NULL)(NULL)(NULL)

==================== Memory info ===========================

Processor: AMD Athlon II X2 220 Processor

Percentage of memory in use: 58%

Total physical RAM: 3839.18 MB

Available physical RAM: 1585.16 MB

Total Pagefile: 7676.53 MB

Available Pagefile: 5093.69 MB

Total Virtual: 8192 MB

Available Virtual: 8191.84 MB

==================== Drives ================================

Drive c: (WIN7) (Fixed) (Total:917.33 GB) (Free:720.54 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

==================== MBR & Partition Table ==================

========================================================

Disk: 0 (Size: 931.5 GB) (Disk ID: CB5BD2B2)

Partition 1: (Not Active) - (Size=14.2 GB) - (Type=1B)

Partition 2: (Active) - (Size=917.3 GB) - (Type=07 NTFS)

==================== End Of Log ============================

TwinHeadedEagle · October 13, 2014

I overlooked this topic. Still with me?

chowder2757 · October 14, 2014

yes i am

TwinHeadedEagle · October 15, 2014

Scan with Farbar Recovery Scan Tool

Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.

Right-click on icon and select Run as Administrator to start the tool.
(XP users click run after receipt of Windows Security Warning - Open File).
Make sure that Addition option is checked.
Press Scan button and wait.
The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.

Please include their content into your next reply.

chowder2757 · October 16, 2014

Right now I'm on holiday but im still in this and I am checking it often I just can't get to my computer

chowder2757 · October 19, 2014

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-10-2014

Ran by Erik_2 (administrator) on ERIK-PC on 19-10-2014 15:09:07

Running from C:\Users\Erik_2\Desktop