Jump to content

Having issues with turning windows features on or off, need help

Rocket

By Rocket
in Resolved Malware Removal Logs

 Share

Recommended Posts

Rocket

Rocket

Posted
Posted

My issues first started with Windows Media player, whenever I tried launching it it gave me an error saying wmploc.dll version did not match the version expected and it said media player was installed improperly and needed to be reinstalled. I started receiving that error when I tried launching media player like right after I ran Windows repair tool from tweaking.com, I ran the tool to fix some other issues I was having with Windows so I don't know if the tool screwed something up because media player started giving me that error after I ran the repairs.

 

I made restore points for both windows and the registry from within the tool and I tried restoring windows to before I ran the repairs from the restore point I made before running it but it gave me an error when I tried to restore saying that it was corrupt so I was screwed. I read online how to uninstall media player by going into programs and features and then going into turn windows features on or off and unchecking Windows media player from in there and then rebooting.

 

So I did that, unchecked it and rebooted and when I tried reenabling it it keeps giving me an error saying An error has occurred. Not all of the features were successfully changed. And it tells me to reboot even though it gave me an error and when I reboot it tries to configure the features and it says, failed to configure windows updates, reverting changes. I also installed the Windows update readiness tool, I downloaded it from Microsoft's site and that did nothing, it still gives me an error in Windows features.

 

I also tried running the sfc/scannow command in the command prompt and it repaired some corrupt files it found and that did nothing, I still get an error when trying to re-enable Media player. I also tried manually resetting the Windows update components (I looked up instructions online) by typing a ton of commands in the Command prompt to turn off some services and re-registering files, etc, etc. And that didn't work either and I am completely frustrated at Windows right now that none of the fixes I found worked. And I use Windows Media player as my default player so I need it.

 

Please if someone could help me fix this issue I would be entirely grateful.

Link to post
Share on other sites
TwinHeadedEagle

TwinHeadedEagle

Posted
Posted

Hello,
    
 
They call me TwinHeadedEagle around here, and I'll be working with you.
 
     
    
Before we start please read and note the following:

  • Limit your internet access to posting here, some infections just wait to steal typed-in passwords.
  • Please be patient. I know it is frustrating when your PC isn't working properly, but malware removal takes time.
  • Don't run any scripts or tools on your own, unsupervised usage may cause more harm than good.
  • Do not paste the logs in your posts, attachments make my work easier. There is a More reply options button, that gives you Upload Files option below which you can use to attach your reports. Always attach reports from all tools.
  • Always execute my instructions in given order. If for some reason you cannot completely follow one instruction, inform me about that.
  • Stay with me to the end, the absence of symptoms doesn't mean that your machine is fully operational.
  • Note that we may live in totally different time zones, what may cause some delays between answers.
  • Do not ask for help for your business PC. Companies are making revenue via computers, so it is good thing to pay someone to repair it.
  • If I don't hear from you within 3 days from this initial or any subsequent post, then this thread will be closed.

:excl: I can't foresee everything, so if anything unexpected happens, please stop and inform me!
:excl: There are no silly questions. Never be afraid to ask if in doubt!
 
 
 
  warning.gif Rules and policies
 
We won't support any piracy.
That being told, if any evidence of illegal OS, software, cracks/keygens or any other will be revealed, any further assistance will be suspended. If you are aware that there is this kind of stuff on your machine, remove it before proceeding!
The same applies to any use of P2P software: uTorrent, BitTorrent, Vuze, Kazaa, Ares... We don't provide any help for P2P, except for their removal. All P2P software has to be uninstalled or at least fully disabled before proceeding!
 
Failure to follow these guidelines will result with closing your topic and withdrawning any assistance.
 
 
 
 

Please download Farbar Recovery Scan Tool and save it to your desktop.
 
Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version.

  • Double-click to run it. When the tool opens click Yes to disclaimer.
  • Press Scan button.
  • It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
  • The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.
Link to post
Share on other sites
Rocket

Rocket

Posted
  • Author
Posted

My computer is seriously screwed up, now Magix Music maker stopped working and it won't let me uninstall it, it keeps giving me an error. I can reinstall it if I can get it uninstalled but I can't uninstall it, keep getting an error. And I need music maker to compose my music.

Link to post
Share on other sites
TwinHeadedEagle

TwinHeadedEagle

Posted
Posted

It seems some services aren't working on your PC so we need to turn them on.




reg_file_icon.jpg Registry Fix

Modifying the registry may create unforeseen results. Please do not proceed, unless you have created a registry backup prior to doing that!

Please download the attached registry fix file and save it to your desktop:
 
http://www68.zippyshare.com/v/Me87UceK/file.html

Now we need to import the file into the registry.

  • Locate the fix.reg file on your desktop.
  • Right-click the reg_file_icon.jpg icon of your file and select Merge.
  • You'll be prompted about adding the information to the registry. Please agree.

After this please manually reboot your machine. Any report won't be generated.
 
 
 
 
FRST.gif Scan with Farbar Recovery Scan Tool
 
Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.

  • Right-click on FRST.gif icon and select RunAsAdmin.jpg Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Make sure that Addition option is checked.
  • Press Scan button and wait.
  • The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.
  • Please include their content into your next reply.
Link to post
Share on other sites
Rocket

Rocket

Posted
  • Author
Posted

Ok I applied the regfix and scanned. Here is the log attached. Also when I rebooted Msi afterburner gave me an error, I didn't read the error and clicked ok, guess I should've read it and told you what it said. But Msi afterburner still runs ok so I dunno. Ok the attach files button isn't working so I'll just post it.

 

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-01-2015
Ran by Ant (administrator) on ROCKET on 23-01-2015 04:16:40
Running from C:\Users\Ant\Desktop
Loaded Profiles: Ant (Available profiles: Ant)
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 10 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe
() F:\Program Files\DAZ 3D\Content Management Service\ContentManagementServer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
() C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Microsoft Corporation) C:\Program Files\Microsoft LifeCam\MSCamS64.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe
(AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.10\ToolbarUpdater.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Program Files\Microsoft LifeChat\LifeChat.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliType Pro\itype.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(FNet Co., Ltd.) C:\Program Files (x86)\XFastUSB\XFastUsb.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgui.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [shadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2531472 2014-12-12] (NVIDIA Corporation)
HKLM\...\Run: [LifeChat] => C:\Program Files\Microsoft LifeChat\LifeChat.exe [371712 2009-09-24] (Microsoft Corporation)
HKLM\...\Run: [itype] => c:\Program Files\Microsoft IntelliType Pro\itype.exe [2306448 2010-07-21] (Microsoft Corporation)
HKLM\...\Run: [intelliPoint] => c:\Program Files\Microsoft IntelliPoint\ipoint.exe [2417032 2011-08-01] (Microsoft Corporation)
HKLM-x32\...\Run: [XFastUSB] => C:\Program Files (x86)\XFastUSB\XFastUsb.exe [5019360 2013-09-24] (FNet Co., Ltd.)
HKLM-x32\...\Run: [WTClient] => C:\Windows\SysWOW64\WTClient.exe [32768 2014-03-09] (Tablet Driver)
HKLM-x32\...\Run: [vProt] => C:\Program Files (x86)\AVG Web TuneUp\vprot.exe [3060248 2014-11-06] ()
HKLM-x32\...\Run: [switchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [5199984 2011-06-20] (VIA)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2013\avgui.exe [4411952 2014-11-04] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [amd_dc_opt] => C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKLM-x32\...\Run: [ADSKAppManager] => C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe [477064 2013-12-22] (Autodesk Inc.)
HKU\S-1-5-21-14057114-1929341420-811863276-1000\...\Run: [skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [30524520 2014-11-27] (Skype Technologies S.A.)
HKU\S-1-5-21-14057114-1929341420-811863276-1000\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\Overwolf.exe [40176 2015-01-12] (Overwolf LTD)
IFEO\adappmgr.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\chrome.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\licensewizard.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\tbs.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
ShellIconOverlayIdentifiers: [1SecureIconsProvider] -> {FC9D8189-520A-4417-AED7-9EAC810C6FBA} =>  No File
ShellIconOverlayIdentifiers-x32: [sharingPrivate] -> {08244EE6-92F0-47f2-9FC9-929BAA2E7235} =>  No File

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-14057114-1929341420-811863276-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-14057114-1929341420-811863276-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKU\S-1-5-21-14057114-1929341420-811863276-1000 -> DefaultScope {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-14057114-1929341420-811863276-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-14057114-1929341420-811863276-1000 -> {26FA9842-99EC-5E06-B85A-1C19D5B532C6} URL = http://www.bing.com/search?q={searchTerms}&pc=Z006&form=ZGAIDF
SearchScopes: HKU\S-1-5-21-14057114-1929341420-811863276-1000 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = https://mysearch.avg.com/search?cid={62E30593-3989-4D35-8120-4ED71D7B8107}&mid=a39649707f0847d68827d152ffb0b424-ad1491be2ce6c122f6b66faa90e70c2decf7d34c〈=en&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2014-09-1222:25:10&v=4.0.0.19&pid=wtu&sg=&sap=dsp&q={searchTerms}
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Skype add-on for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: No Name -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} ->  No File
BHO-x32: No Name -> {9030D464-4C02-4ABF-8ECC-5164760863C6} ->  No File
BHO-x32: No Name -> {95B7759C-8C7F-4BF1-B163-73684A933233} ->  No File
BHO-x32: No Name -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} ->  No File
BHO-x32: No Name -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} ->  No File
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} -  No File
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} -  No File
Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} -  No File
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} -  No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler-x32: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.1.10\ViProtocol.dll (AVG Secure Search)
Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} -  No File
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{11968BCE-C480-4894-BAF8-88050B7C35B7}: [NameServer] 8.8.8.8,8.8.8.8
Tcpip\..\Interfaces\{19E76667-51DA-4A49-BAF5-7CE39DDA5DF7}: [NameServer] 8.8.8.8,8.8.8.8
Tcpip\..\Interfaces\{2A071843-0FD0-49BB-A402-3D9F857F4F66}: [NameServer] 8.8.8.8,8.8.8.8
Tcpip\..\Interfaces\{602287C6-DAD3-4C7B-BA83-F5D37AA92133}: [NameServer] 8.8.8.8,8.8.8.8
Tcpip\..\Interfaces\{67EA6AB8-AC40-409A-8EA6-592A66562704}: [NameServer] 8.8.8.8,8.8.8.8
Tcpip\..\Interfaces\{692B067A-E82A-46C1-A426-3F15AE9C5919}: [NameServer] 8.8.8.8,8.8.8.8
Tcpip\..\Interfaces\{72322A1C-2A83-4C10-B357-4D62B47B4A1F}: [NameServer] 8.8.8.8,8.8.8.8
Tcpip\..\Interfaces\{B7202694-3385-4531-A590-03718D2C1723}: [NameServer] 8.8.8.8,8.8.8.8
Tcpip\..\Interfaces\{BF82183D-E56C-4DCE-9C99-21E3B9541595}: [NameServer] 8.8.8.8,8.8.8.8
Tcpip\..\Interfaces\{C2C71C94-64AE-4AB3-9D65-3EB0E24D43EF}: [NameServer] 8.8.8.8,8.8.8.8
Tcpip\..\Interfaces\{C6A95884-9333-4296-A217-C38459189375}: [NameServer] 8.8.8.8,8.8.8.8
Tcpip\..\Interfaces\{C8E1B88A-9452-4065-97D8-7A9E00A066A8}: [NameServer] 8.8.8.8,8.8.8.8
Tcpip\..\Interfaces\{E031576F-6A75-4E62-AD1B-51AFF7470DD2}: [NameServer] 8.8.8.8,8.8.8.8
Tcpip\..\Interfaces\{F0196FA7-8144-4EF2-9AF0-A7134D8F923B}: [NameServer] 8.8.8.8,8.8.8.8
Tcpip\..\Interfaces\{F35A1FB6-B123-465B-998B-66C7A59138C3}: [NameServer] 8.8.8.8,8.8.8.8
Tcpip\..\Interfaces\{FB6A84AB-DE48-4047-A5AA-2499AD67F265}: [NameServer] 8.8.8.8,8.8.8.8

FireFox:
========
FF ProfilePath: C:\Users\Ant\AppData\Roaming\Mozilla\Firefox\Profiles\zn2mznam.default-1401590938101
FF NewTab: hxxp://www.google.com/
FF DefaultSearchEngine: Google
FF DefaultSearchUrl: hxxp://www.google.com/search?btnG=Google+Search&q=
FF SearchEngineOrder.1: Google
FF Homepage: https://www.yahoo.com/
FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_287.dll ()
FF Plugin: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelogx64.dll No File
FF Plugin: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll (EA Digital Illusions CE AB)
FF Plugin: @java.com/DTPlugin,version=10.10.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\Microsoft Office\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_287.dll ()
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\18.1.10\\npsitesafety.dll No File
FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 -> C:\Windows\system32\C2MP\npdivx32.dll No File
FF Plugin-x32: @esn/npbattlelog,version=2.4.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll No File
FF Plugin-x32: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @garmin.com/GpsControl -> C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
FF Plugin-x32: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6 -> C:\Program Files (x86)\Yahoo!\Shared\npYState.dll No File
FF Plugin-x32: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\Microsoft Office\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\Microsoft Office\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BrowserPlugin\npBrowserPlugin.dll (Nero AG)
FF Plugin-x32: @nexon.net/NxGame -> C:\ProgramData\NexonUS\NGM\npNxGameUS.dll (Nexon)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin-x32: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll (Adobe Systems)
FF Plugin HKU\S-1-5-21-14057114-1929341420-811863276-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Ant\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-14057114-1929341420-811863276-1000: @yahoo.com/BrowserPlus,version=2.9.8 -> C:\Users\Ant\AppData\Local\Yahoo!\BrowserPlus\2.9.8\Plugins\npybrowserplus_2.9.8.dll (Yahoo! Inc.)
FF Plugin HKU\S-1-5-21-14057114-1929341420-811863276-1000: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin HKU\S-1-5-21-14057114-1929341420-811863276-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Ant\AppData\Roaming\mozilla\plugins\np-mswmp.dll (Microsoft Corporation)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wtu-secure-search.xml
FF Extension: Yahoo! Toolbar - C:\Users\Ant\AppData\Roaming\Mozilla\Firefox\Profiles\zn2mznam.default-1401590938101\Extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} [2014-11-01]
FF Extension: Play command invocation - C:\Users\Ant\AppData\Roaming\Mozilla\Firefox\Profiles\zn2mznam.default-1401590938101\Extensions\{80A23016-2B83-A803-C967-BE186C550E70} [2014-10-19]
FF Extension: Share on Twitter - C:\Users\Ant\AppData\Roaming\Mozilla\Firefox\Profiles\zn2mznam.default-1401590938101\Extensions\jid1-SmvuJ9Cq3Cx13w@jetpack.xpi [2015-01-21]
FF Extension: Gmail™ Notifier Plus - C:\Users\Ant\AppData\Roaming\Mozilla\Firefox\Profiles\zn2mznam.default-1401590938101\Extensions\jid1-sqmEAwSoa3FZPc@jetpack.xpi [2015-01-21]
FF Extension: Personas Plus - C:\Users\Ant\AppData\Roaming\Mozilla\Firefox\Profiles\zn2mznam.default-1401590938101\Extensions\personas@christopher.beard.xpi [2014-06-08]
FF Extension: Twitter App - C:\Users\Ant\AppData\Roaming\Mozilla\Firefox\Profiles\zn2mznam.default-1401590938101\Extensions\{12b6fdcd-4423-4276-82a3-73fdbff5f7e4}.xpi [2014-11-12]
FF Extension: Adblock Plus - C:\Users\Ant\AppData\Roaming\Mozilla\Firefox\Profiles\zn2mznam.default-1401590938101\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-05-31]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2015-01-16]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2015-01-16]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2015-01-16]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2015-01-16]
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird

Chrome:
=======
CHR Profile: C:\Users\Ant\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Play command invocation) - C:\Users\Ant\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajpgkpeckebdhofmmjfgcjjiiejpodla [2014-10-19]
CHR Extension: (Docs) - C:\Users\Ant\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-05-02]
CHR Extension: (Google Drive) - C:\Users\Ant\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-05-02]
CHR Extension: (YouTube) - C:\Users\Ant\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-05-02]
CHR Extension: (Google Search) - C:\Users\Ant\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-05-02]
CHR Extension: (Google Wallet) - C:\Users\Ant\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-05-02]
CHR Extension: (Gmail) - C:\Users\Ant\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-05-02]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S4 AdAppMgrSvc; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [576904 2013-12-22] (Autodesk Inc.)
S2 avgfws; C:\Program Files (x86)\AVG\AVG2013\avgfws.exe [1432592 2014-11-04] (AVG Technologies CZ, s.r.o.)
S2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe [4942384 2014-10-17] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe [283136 2013-11-20] (AVG Technologies CZ, s.r.o.)
R2 DAZContentManagementService; F:\Program Files\DAZ 3D\Content Management Service\ContentManagementServer.exe [22528 2011-05-05] () [File not signed]
S4 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1858048 2012-01-23] (MAGIX AG) [File not signed]
S4 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2702848 2011-04-26] (MAGIX®) [File not signed]
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148560 2014-12-12] (NVIDIA Corporation)
S4 lxdd_device; C:\Windows\system32\lxddcoms.exe [567216 2007-05-25] ( )
S4 lxdd_device; C:\Windows\SysWOW64\lxddcoms.exe [537520 2007-05-25] ( )
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
R2 MSSQL$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [58345832 2011-09-22] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1701520 2014-12-12] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19823248 2014-12-12] (NVIDIA Corporation)
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [998640 2015-01-12] (Overwolf LTD)
S4 SQLAgent$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [431464 2011-09-22] (Microsoft Corporation)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [2099000 2013-10-08] (AVG)
S4 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27760 2011-06-14] (VIA Technologies, Inc.)
R2 vToolbarUpdater18.1.10; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.10\ToolbarUpdater.exe [1849368 2014-11-06] (AVG Secure Search)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-26] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 Avgfwfd; C:\Windows\System32\DRIVERS\avgfwd6a.sys [50296 2012-09-04] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [246072 2013-11-25] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [71480 2013-07-20] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [209720 2014-11-04] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [311608 2013-07-20] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [116536 2013-07-01] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [45880 2013-10-23] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [240952 2014-10-17] (AVG Technologies CZ, s.r.o.)
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [50976 2014-11-06] (AVG Technologies)
S3 FNETTBOH_305; C:\Windows\System32\drivers\FNETTBOH_305.SYS [32320 2015-01-17] (FNet Co., Ltd.)
R1 FNETURPX; C:\Windows\System32\drivers\FNETURPX.SYS [15936 2013-09-24] (FNet Co., Ltd.)
S3 HSF_DP; C:\Windows\System32\DRIVERS\CAX_DP.sys [1485824 2009-02-13] (Conexant Systems, Inc.)
S3 leafnets; C:\Windows\System32\DRIVERS\leafnets.sys [29696 2010-08-10] (Leaf Networks)
R3 LoopBeMidi1; C:\Windows\System32\drivers\loopbe1.sys [13824 2011-04-09] (nerds.de)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-01-23] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-11-21] (Malwarebytes Corporation)
S3 NVR0Dev; C:\Windows\nvoclk64.sys [18216 2007-01-22] (NVidia Corp.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2014-12-12] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-06-22] (Corel Corporation)
R3 RTCore64; C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [13368 2013-03-11] ()
S3 RTL8187B; C:\Windows\System32\DRIVERS\RTL8187B.sys [446976 2009-09-16] (Realtek Semiconductor Corporation                           ) [File not signed]
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [834544 2011-01-03] () [File not signed]
R3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [14112 2013-09-18] (TuneUp Software)
R3 VCSVADHWSer; C:\Windows\System32\DRIVERS\vcsvad.sys [21504 2008-12-26] (Avnex)
S3 VST64HWBS2; C:\Windows\System32\DRIVERS\VSTBS26.SYS [411136 2009-06-10] (Conexant Systems, Inc.)
S3 VST64_DPV; C:\Windows\System32\DRIVERS\VSTDPV6.SYS [1485312 2009-06-10] (Conexant Systems, Inc.)
U3 a3im8xpx; C:\Windows\System32\Drivers\a3im8xpx.sys [0 ] (Microsoft Corporation) <==== ATTENTION (zero size file/folder)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 cpuz134; \??\C:\Users\Ant\AppData\Local\Temp\cpuz134\cpuz134_x64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-23 03:56 - 2015-01-23 03:56 - 00381060 _____ () C:\Users\Ant\Desktop\fix.reg
2015-01-23 01:52 - 2015-01-23 01:52 - 00001202 _____ () C:\Users\Ant\Desktop\TeamSpeak.lnk
2015-01-23 01:36 - 2015-01-23 04:01 - 00000000 ____D () C:\Users\Ant\AppData\Roaming\TS3Client
2015-01-22 22:06 - 2015-01-22 22:06 - 00003728 _____ () C:\Windows\System32\Tasks\Overwolf Updater Task
2015-01-22 22:05 - 2015-01-22 22:06 - 00000000 ____D () C:\Program Files (x86)\Overwolf
2015-01-22 22:05 - 2015-01-22 22:05 - 00000000 ____D () C:\Users\Ant\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf
2015-01-22 22:04 - 2015-01-22 22:05 - 00000000 ____D () C:\ProgramData\Overwolf
2015-01-22 22:02 - 2015-01-23 04:12 - 00000000 ____D () C:\Users\Ant\AppData\Local\Overwolf
2015-01-22 22:02 - 2015-01-22 22:02 - 00000000 ____D () C:\Users\Ant\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2015-01-22 22:02 - 2015-01-22 22:02 - 00000000 ____D () C:\Users\Ant\AppData\Local\TeamSpeak 3 Client
2015-01-22 21:59 - 2015-01-22 22:00 - 30014480 _____ (TeamSpeak Systems GmbH) C:\Users\Ant\Downloads\TeamSpeak3-Client-win64-3.0.16.exe
2015-01-22 06:32 - 2015-01-22 17:24 - 00050609 _____ () C:\Users\Ant\Desktop\Addition.txt
2015-01-22 06:27 - 2015-01-23 04:16 - 00028404 _____ () C:\Users\Ant\Desktop\FRST.txt
2015-01-22 03:45 - 2015-01-22 04:06 - 02126848 _____ (Farbar) C:\Users\Ant\Desktop\FRST64.exe
2015-01-21 03:42 - 2015-01-21 03:42 - 650825648 _____ () C:\Users\Ant\Desktop\RegistryBackup jan21.2015.reg
2015-01-21 03:23 - 2015-01-21 03:23 - 00347816 _____ (Microsoft Corporation) C:\Users\Ant\Downloads\MicrosoftFixit.wu.LB.134525932149935.1.1.Run.exe
2015-01-21 02:40 - 2015-01-23 04:04 - 00003014 _____ () C:\Windows\System32\Tasks\MSIAfterburner
2015-01-21 01:49 - 2015-01-21 01:49 - 00000000 ____D () C:\Windows\CheckSur
2015-01-20 22:09 - 2015-01-20 23:00 - 564744309 _____ () C:\Users\Ant\Downloads\Windows6.1-KB947821-v34-x64.msu
2015-01-20 21:48 - 2015-01-20 22:21 - 00000530 _____ () C:\Windows\DtcInstall.log
2015-01-20 19:47 - 2015-01-20 19:57 - 291852366 _____ () C:\Users\Ant\Downloads\Windows6.1-KB968211-x86-RefreshPkg.msu
2015-01-20 18:12 - 2015-01-20 18:12 - 00347816 _____ (Microsoft Corporation) C:\Users\Ant\Downloads\MicrosoftFixit.WinMediaPlayer.RNP.Run.exe
2015-01-20 17:47 - 2015-01-20 17:47 - 00224667 _____ () C:\Users\Ant\Downloads\FixWMP.zip
2015-01-19 12:34 - 2015-01-19 12:34 - 00001228 _____ () C:\Windows\IE11_main.log
2015-01-19 11:30 - 2015-01-19 11:30 - 00260364 _____ () C:\Windows\msxml4-KB2758694-enu.LOG
2015-01-19 07:44 - 2014-07-08 20:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2015-01-19 07:44 - 2014-07-08 20:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2015-01-19 07:44 - 2014-07-08 20:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2015-01-19 07:44 - 2014-07-08 20:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2015-01-19 07:44 - 2014-07-08 20:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2015-01-19 07:44 - 2014-07-08 19:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2015-01-19 07:44 - 2014-07-08 19:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2015-01-19 07:44 - 2014-07-08 19:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2015-01-19 07:44 - 2014-07-08 19:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2015-01-19 07:44 - 2014-07-08 19:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2015-01-19 07:44 - 2014-07-08 19:00 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-01-19 07:44 - 2014-07-08 16:38 - 00419992 _____ () C:\Windows\system32\locale.nls
2015-01-19 07:44 - 2014-07-08 16:30 - 00419992 _____ () C:\Windows\SysWOW64\locale.nls
2015-01-18 21:11 - 2015-01-18 21:11 - 00000883 _____ () C:\Users\Ant\Desktop\Adobe Audition CC 2014.lnk
2015-01-18 20:20 - 2015-01-18 20:20 - 09957947 _____ ( ) C:\Users\Ant\Downloads\ffmpeg-win-2.2.2.exe
2015-01-18 20:12 - 2015-01-19 21:13 - 00000000 ____D () C:\Users\Ant\AppData\Roaming\Audacity
2015-01-18 20:12 - 2015-01-18 20:12 - 00001067 _____ () C:\Users\Ant\Desktop\Audacity.lnk
2015-01-18 20:08 - 2015-01-18 20:09 - 22892794 _____ (Audacity Team ) C:\Users\Ant\Downloads\audacity-win-2.0.6.exe
2015-01-18 07:14 - 2015-01-18 07:14 - 00005120 ____N () C:\bootex.log
2015-01-18 02:46 - 2015-01-19 12:10 - 00000000 ____D () C:\Windows\SoftwareDistribution.bak
2015-01-18 02:37 - 2015-01-19 12:32 - 00000000 ____D () C:\Windows\system32\catroot2.bak
2015-01-18 02:03 - 2015-01-23 04:08 - 00003976 _____ () C:\Windows\setupact.log
2015-01-18 02:03 - 2015-01-18 02:03 - 00000000 _____ () C:\Windows\setuperr.log
2015-01-18 02:02 - 2015-01-20 07:19 - 00165370 _____ () C:\Windows\PFRO.log
2015-01-18 01:44 - 2015-01-18 01:44 - 00001469 _____ () C:\Users\Ant\Desktop\Repair Windows.lnk
2015-01-18 01:42 - 2015-01-18 01:42 - 09842552 _____ () C:\Users\Ant\Downloads\tweaking.com_windows_repair_aio_setup(2).exe
2015-01-17 20:17 - 2015-01-17 20:17 - 00001366 _____ () C:\Users\Ant\Desktop\PowerISO.lnk
2015-01-17 20:09 - 2015-01-17 20:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerISO
2015-01-17 20:08 - 2015-01-17 20:09 - 00000000 ____D () C:\Program Files\PowerISO
2015-01-17 20:07 - 2015-01-17 20:07 - 02878920 _____ (Power Software Ltd) C:\Users\Ant\Downloads\PowerISO6-x64(1).exe
2015-01-17 20:03 - 2015-01-17 20:03 - 00104171 _____ (Power Software Ltd) C:\Users\Ant\Downloads\PowerISO6-x64.exe
2015-01-17 02:26 - 2015-01-17 02:28 - 109364313 _____ () C:\Users\Ant\Downloads\Magus 1.25.zip
2015-01-17 02:05 - 2015-01-17 02:05 - 00045092 _____ () C:\ComboFix.txt
2015-01-17 01:41 - 2015-01-17 01:42 - 05609736 ____R (Swearware) C:\Users\Ant\Desktop\ComboFix.exe
2015-01-16 21:05 - 2015-01-16 21:05 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-LAMBDA-Microsoft-Windows-7-Ultimate-(64-bit).dat
2015-01-16 21:05 - 2015-01-16 21:05 - 00000000 ____D () C:\RegBackup
2015-01-16 21:00 - 2015-01-16 21:01 - 09842552 _____ () C:\Users\Ant\Downloads\tweaking.com_windows_repair_aio_setup(1).exe
2015-01-16 20:59 - 2015-01-16 20:59 - 09817304 _____ () C:\Users\Ant\Downloads\tweaking.com_windows_repair_aio_setup.exe
2015-01-16 20:56 - 2015-01-16 20:56 - 00000000 ____D () C:\Users\Ant\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Tweaking.com
2015-01-16 20:56 - 2015-01-16 20:56 - 00000000 ____D () C:\Program Files (x86)\Tweaking.com
2015-01-16 20:55 - 2015-01-16 20:55 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-01-16 20:45 - 2015-01-16 20:45 - 00003092 _____ () C:\Windows\System32\Tasks\{E072E1A9-FB1D-41D6-B736-7480AD93C6BA}
2015-01-14 17:46 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2015-01-14 17:41 - 2015-01-14 17:41 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2015-01-14 17:41 - 2015-01-14 17:41 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-01-14 17:41 - 2015-01-14 17:41 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2015-01-14 17:41 - 2015-01-14 17:41 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-01-14 17:41 - 2015-01-14 17:41 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-01-14 17:41 - 2015-01-14 17:41 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-01-14 17:41 - 2015-01-14 17:41 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-01-14 17:41 - 2015-01-14 17:41 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-01-14 17:41 - 2015-01-14 17:41 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-01-14 17:41 - 2015-01-14 17:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-01-14 17:41 - 2015-01-14 17:41 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-01-14 17:41 - 2015-01-14 17:41 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-01-14 17:28 - 2013-10-01 18:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2015-01-14 17:28 - 2013-10-01 17:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2015-01-14 17:05 - 2012-08-23 07:24 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2015-01-14 17:05 - 2012-08-23 05:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll
2015-01-14 17:05 - 2012-08-23 04:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2015-01-14 16:53 - 2012-06-02 08:57 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2015-01-14 07:08 - 2012-12-07 05:20 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
2015-01-14 07:08 - 2012-12-07 05:19 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
2015-01-14 07:08 - 2012-12-07 05:19 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
2015-01-14 07:08 - 2012-12-07 05:19 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
2015-01-14 07:08 - 2012-12-07 04:46 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs
2015-01-14 07:08 - 2012-12-07 04:46 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs
2015-01-14 07:08 - 2012-12-07 04:46 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs
2015-01-14 07:08 - 2012-12-07 04:46 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs
2015-01-14 07:04 - 2014-02-03 20:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2015-01-14 07:03 - 2013-11-26 19:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2015-01-14 07:03 - 2013-11-26 19:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2015-01-14 07:03 - 2013-11-26 19:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2015-01-14 07:03 - 2013-11-26 19:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2015-01-14 07:03 - 2013-11-26 19:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2015-01-14 07:03 - 2013-11-26 19:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2015-01-14 07:03 - 2013-11-26 19:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2015-01-14 07:03 - 2013-08-04 20:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2015-01-14 07:03 - 2012-08-21 15:01 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe
2015-01-13 00:50 - 2015-01-13 00:51 - 36210245 _____ () C:\Users\Ant\Downloads\MSIAfterburnerSetup410.zip
2015-01-12 23:20 - 2015-01-12 23:21 - 15340120 _____ () C:\Users\Ant\Desktop\RogueKiller.exe
2015-01-12 21:07 - 2015-01-12 21:08 - 00000000 ____D () C:\Program Files (x86)\ERUNT
2015-01-12 21:07 - 2015-01-12 21:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ERUNT
2015-01-12 21:04 - 2015-01-12 21:04 - 00791393 _____ (Lars Hederer ) C:\Users\Ant\Downloads\erunt-setup.exe
2015-01-11 17:41 - 2015-01-11 17:41 - 00003154 _____ () C:\Windows\System32\Tasks\{33A66EFF-5ABF-4303-A629-E59058AEE75E}
2015-01-11 17:35 - 2015-01-11 17:35 - 00003154 _____ () C:\Windows\System32\Tasks\{04A4D044-4C58-4189-BC93-50628327D587}
2015-01-11 17:34 - 2015-01-11 17:34 - 01548384 _____ (Skype Technologies S.A.) C:\Users\Ant\Downloads\SkypeSetup(1).exe
2015-01-11 17:29 - 2015-01-11 17:29 - 00003092 _____ () C:\Windows\System32\Tasks\{36AB0ADB-7C38-45A2-9AAF-4FE628D394AC}
2015-01-10 19:05 - 2015-01-10 19:05 - 00003092 _____ () C:\Windows\System32\Tasks\{2490AE02-CAAC-4473-9662-875E0BDA5671}
2015-01-09 18:45 - 2015-01-09 18:45 - 00003092 _____ () C:\Windows\System32\Tasks\{C54F093D-3239-401F-90F6-6B3EDC211DC6}
2015-01-09 03:28 - 2015-01-09 03:28 - 00000914 _____ () C:\Users\Ant\Desktop\Adobe Media Encoder CC 2014.lnk
2015-01-08 02:58 - 2015-01-08 02:58 - 00002762 _____ () C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013
2015-01-07 18:08 - 2015-01-07 18:08 - 00002209 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp 2014.lnk
2015-01-07 18:08 - 2015-01-07 18:08 - 00002197 _____ () C:\Users\Public\Desktop\AVG PC TuneUp 2014.lnk
2015-01-07 18:08 - 2015-01-07 18:08 - 00002197 _____ () C:\ProgramData\Desktop\AVG PC TuneUp 2014.lnk
2015-01-07 18:08 - 2015-01-07 18:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp 2014
2015-01-07 18:07 - 2015-01-07 18:07 - 00000000 ____D () C:\Users\Ant\AppData\Roaming\AVG
2015-01-07 18:03 - 2015-01-07 18:45 - 00000000 __SHD () C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2015-01-06 23:26 - 2015-01-06 23:26 - 00000000 ____D () C:\Users\Ant\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
2015-01-06 22:03 - 2015-01-06 22:03 - 00000883 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Audition CC 2014.lnk
2015-01-05 05:27 - 2015-01-05 05:27 - 00000914 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Media Encoder CC 2014.lnk
2015-01-05 01:27 - 2015-01-05 01:27 - 00000906 _____ () C:\Users\Ant\Desktop\Adobe Premiere Pro CC 2014.lnk
2015-01-05 01:13 - 2015-01-05 01:13 - 00000906 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Premiere Pro CC 2014.lnk
2015-01-05 00:24 - 2015-01-05 00:24 - 00000882 _____ () C:\Users\Ant\Desktop\Voice Changer 7.0 Diamond.lnk
2015-01-05 00:24 - 2015-01-05 00:24 - 00000000 ____D () C:\Users\Ant\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Voice Changer Software DIAMOND
2015-01-05 00:23 - 2015-01-05 00:23 - 00000000 ____D () C:\Users\Ant\AppData\Roaming\Avnex
2015-01-05 00:23 - 2008-12-26 12:56 - 00021504 _____ (Avnex) C:\Windows\system32\Drivers\vcsvad.sys
2015-01-04 23:02 - 2015-01-06 22:09 - 00000000 ____D () C:\Users\Public\Documents\Adobe
2015-01-04 23:02 - 2015-01-06 22:09 - 00000000 ____D () C:\ProgramData\Documents\Adobe
2015-01-04 22:44 - 2015-01-04 22:44 - 00000021 _____ () C:\Windows\SurCode.INI
2015-01-04 22:44 - 2015-01-04 22:44 - 00000000 ____D () C:\Program Files\Common Files\PACE Anti-Piracy
2015-01-04 22:43 - 2015-01-06 22:13 - 00000000 ____D () C:\Users\Ant\Documents\Adobe
2015-01-04 22:38 - 2015-01-04 22:38 - 00000000 ____D () C:\Program Files (x86)\My Company Name
2015-01-04 22:38 - 2012-06-22 03:01 - 00056336 _____ (Corel Corporation) C:\Windows\system32\Drivers\PxHlpa64.sys
2015-01-04 22:38 - 2012-04-24 03:01 - 00011376 _____ (Corel Corporation) C:\Windows\system32\Drivers\cdralw2k.sys
2015-01-04 22:38 - 2012-04-24 03:01 - 00010864 _____ (Corel Corporation) C:\Windows\system32\Drivers\cdr4_xp.sys
2015-01-04 22:35 - 2015-01-05 05:23 - 00001528 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Application Manager.lnk
2015-01-04 22:35 - 2015-01-05 05:23 - 00001516 _____ () C:\Users\Public\Desktop\Adobe Application Manager.lnk
2015-01-04 22:35 - 2015-01-05 05:23 - 00001516 _____ () C:\ProgramData\Desktop\Adobe Application Manager.lnk
2015-01-04 20:41 - 2015-01-04 20:42 - 00000000 ____D () C:\Users\Ant\AppData\Local\{A798B7AB-D6EB-435C-AF03-EC0BB39AFE02}
2015-01-03 21:41 - 2015-01-03 23:28 - 00001456 _____ () C:\Users\Ant\AppData\Local\Adobe Save for Web 13.0 Prefs
2015-01-03 20:42 - 2015-01-03 20:42 - 00000000 ____D () C:\Users\Ant\AppData\Roaming\NVIDIA
2014-12-29 20:09 - 2015-01-01 14:22 - 00003799 _____ () C:\Users\Ant\Desktop\GamerProfile.xml
2014-12-26 23:53 - 2014-12-26 23:53 - 00000583 _____ () C:\Users\Public\Desktop\Far Cry 4.lnk
2014-12-26 23:53 - 2014-12-26 23:53 - 00000583 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Far Cry 4.lnk
2014-12-26 23:53 - 2014-12-26 23:53 - 00000583 _____ () C:\ProgramData\Desktop\Far Cry 4.lnk
2014-12-24 12:00 - 2014-12-24 12:03 - 00000000 ____D () C:\Users\Ant\Documents\VirtualDJ
2014-12-24 12:00 - 2014-12-24 12:00 - 00000735 _____ () C:\Users\Ant\Desktop\VirtualDJ 8.lnk
2014-12-24 12:00 - 2014-12-24 12:00 - 00000000 ____D () C:\Users\Ant\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-23 04:17 - 2009-07-13 22:45 - 00025936 _____ () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-23 04:17 - 2009-07-13 22:45 - 00025936 _____ () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-23 04:16 - 2014-10-01 19:51 - 00000000 ____D () C:\FRST
2015-01-23 04:13 - 2010-10-17 19:17 - 00000000 ____D () C:\Program Files (x86)\MSI Afterburner
2015-01-23 04:12 - 2010-12-18 20:38 - 00000000 ____D () C:\Users\Ant\AppData\Roaming\Skype
2015-01-23 04:10 - 2014-10-25 04:20 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-01-23 04:10 - 2009-07-13 22:45 - 05064656 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-01-23 04:07 - 2010-08-03 12:03 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-01-23 04:07 - 2009-07-13 23:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-23 04:04 - 2010-08-02 15:16 - 01426918 _____ () C:\Windows\WindowsUpdate.log
2015-01-23 03:52 - 2012-03-30 22:02 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-01-23 02:00 - 2014-06-18 01:00 - 00000000 ____D () C:\Users\Ant\AppData\Local\Adobe
2015-01-23 01:45 - 2014-10-02 00:34 - 00000000 ____D () C:\Users\Ant\AppData\Local\CrashDumps
2015-01-22 18:52 - 2012-03-30 22:02 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-01-22 18:52 - 2012-03-30 22:01 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-01-22 18:52 - 2011-07-14 21:43 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-01-22 18:37 - 2011-03-07 14:09 - 00000000 ____D () C:\ProgramData\MFAData
2015-01-22 07:25 - 2010-08-02 15:21 - 00000000 ___RD () C:\Users\Ant
2015-01-22 07:17 - 2009-07-13 20:34 - 31457280 _____ () C:\Windows\system32\config\SYSTEM_tureg_old
2015-01-22 07:17 - 2009-07-13 20:34 - 00032768 _____ () C:\Windows\system32\config\SECURITY_tureg_old
2015-01-22 07:16 - 2009-07-13 20:34 - 05242880 _____ () C:\Windows\system32\config\DEFAULT_tureg_old
2015-01-22 07:16 - 2009-07-13 20:34 - 00106496 _____ () C:\Windows\system32\config\SAM_tureg_old
2015-01-22 04:37 - 2014-11-17 00:30 - 00000000 ____D () C:\Users\Ant\Desktop\Scan tools
2015-01-22 03:31 - 2014-05-02 21:09 - 00000898 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-01-22 03:31 - 2014-05-02 21:09 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-01-21 20:00 - 2014-05-02 21:09 - 00003906 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-01-21 20:00 - 2014-05-02 21:09 - 00003654 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-01-21 19:53 - 2009-07-13 23:13 - 00878462 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-21 04:06 - 2009-07-14 01:45 - 00000000 ___RD () C:\Users\Public\Recorded TV
2015-01-21 04:06 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2015-01-21 02:20 - 2009-07-14 01:46 - 00000000 ____D () C:\Program Files\Windows Journal
2015-01-21 02:20 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2015-01-21 02:20 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\system32\Dism
2015-01-20 21:48 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\registration
2015-01-20 18:42 - 2009-07-13 23:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2015-01-20 18:12 - 2010-08-02 22:37 - 00106000 _____ () C:\Users\Ant\AppData\Local\GDIPFONTCACHEV1.DAT
2015-01-20 00:37 - 2013-03-25 01:47 - 00003704 _____ () C:\Windows\System32\Tasks\Java Update Scheduler
2015-01-20 00:37 - 2013-03-25 01:47 - 00003694 _____ () C:\Windows\System32\Tasks\Adobe online update program
2015-01-19 12:25 - 2010-08-23 13:51 - 00854692 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2015-01-19 05:36 - 2010-08-19 22:26 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-01-18 05:54 - 2007-10-16 13:47 - 00000000 ____D () C:\Temp
2015-01-18 04:48 - 2010-08-27 20:15 - 00000000 ____D () C:\Users\Ant\AppData\Roaming\playitall
2015-01-18 03:22 - 2014-10-02 01:20 - 00000000 ____D () C:\Windows\pss
2015-01-18 02:41 - 2009-07-14 01:46 - 00000000 ____D () C:\Windows\CSC
2015-01-18 01:29 - 2010-08-02 16:12 - 00000000 ____D () C:\Windows\Panther
2015-01-18 01:16 - 2009-07-13 20:34 - 00000855 _____ () C:\Windows\system32\Drivers\etc\hosts_bak_530
2015-01-17 19:54 - 2013-10-21 00:05 - 00032320 _____ (FNet Co., Ltd.) C:\Windows\system32\Drivers\FNETTBOH_305.SYS
2015-01-17 19:21 - 2012-02-26 22:14 - 00000000 ____D () C:\Program Files\PeerBlock
2015-01-17 02:05 - 2012-10-14 14:01 - 00000000 ____D () C:\Qoobox
2015-01-17 02:01 - 2009-07-13 20:34 - 00000215 _____ () C:\Windows\system.ini
2015-01-17 01:45 - 2014-11-06 15:52 - 00001257 _____ () C:\Windows\SysWOW64\debug.log
2015-01-17 01:22 - 2010-08-02 15:21 - 13389824 _____ () C:\Users\Ant\ntuser.bak
2015-01-17 01:22 - 2009-07-13 20:34 - 31457280 _____ () C:\Windows\system32\config\system.bak
2015-01-17 01:22 - 2009-07-13 20:34 - 113573888 _____ () C:\Windows\system32\config\software.bak
2015-01-17 01:22 - 2009-07-13 20:34 - 04993024 _____ () C:\Windows\system32\config\default.bak
2015-01-17 01:22 - 2009-07-13 20:34 - 00106496 _____ () C:\Windows\system32\config\sam.bak
2015-01-17 01:22 - 2009-07-13 20:34 - 00032768 _____ () C:\Windows\system32\config\security.bak
2015-01-17 01:06 - 2009-07-13 21:20 - 00000000 ___RD () C:\Users\Default
2015-01-17 01:05 - 2009-07-13 20:34 - 50331648 _____ () C:\Windows\system32\config\components.old
2015-01-17 01:05 - 2009-07-13 20:34 - 31719424 _____ () C:\Windows\system32\config\system.old
2015-01-17 01:05 - 2009-07-13 20:34 - 115867648 _____ () C:\Windows\system32\config\software.old
2015-01-17 01:05 - 2009-07-13 20:34 - 05242880 _____ () C:\Windows\system32\config\default.old
2015-01-17 01:05 - 2009-07-13 20:34 - 00106496 _____ () C:\Windows\system32\config\sam.old
2015-01-17 01:05 - 2009-07-13 20:34 - 00032768 _____ () C:\Windows\system32\config\security.old
2015-01-16 22:26 - 2009-07-13 20:34 - 00000855 _____ () C:\Windows\system32\Drivers\etc\hosts_bak_878
2015-01-16 22:26 - 2009-07-13 20:34 - 00000417 _____ () C:\Windows\win.ini
2015-01-16 21:14 - 2012-05-05 23:26 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-01-15 15:49 - 2010-08-02 15:22 - 00001411 _____ () C:\Users\Ant\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-01-15 07:20 - 2009-07-13 21:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-01-14 07:31 - 2013-07-18 03:20 - 00000000 ____D () C:\Windows\system32\MRT
2015-01-13 00:54 - 2014-12-08 17:17 - 00000000 ____D () C:\Program Files (x86)\RivaTuner Statistics Server
2015-01-13 00:54 - 2010-09-23 21:11 - 00000000 ____D () C:\Windows\SysWOW64\directx
2015-01-12 23:23 - 2014-10-01 20:41 - 00035064 _____ () C:\Windows\system32\Drivers\TrueSight.sys
2015-01-07 18:45 - 2013-03-24 15:38 - 00000000 __SHD () C:\ProgramData\{D1D4879F-2279-49C9-AEBF-3B95C84EAA8F}
2015-01-07 18:45 - 2012-11-16 21:53 - 00000000 ____D () C:\Users\Ant\AppData\Roaming\HpUpdate
2015-01-07 18:45 - 2011-11-02 22:17 - 00000000 ____D () C:\Users\Ant\AppData\Local\Downloaded Installations
2015-01-07 18:44 - 2010-10-16 22:44 - 00000000 ____D () C:\Windows\Minidump
2015-01-07 18:19 - 2013-03-24 17:51 - 00000000 ____D () C:\Users\Ant\AppData\Roaming\TuneUp Software
2015-01-07 18:11 - 2013-03-24 15:38 - 00000000 ____D () C:\ProgramData\AVG
2015-01-07 18:07 - 2014-10-19 14:50 - 00000000 ____D () C:\Program Files (x86)\AVG
2015-01-06 22:09 - 2010-08-02 16:00 - 00000000 ____D () C:\Users\Ant\AppData\Roaming\Adobe
2015-01-06 22:04 - 2010-08-28 18:15 - 00000000 ____D () C:\ProgramData\regid.1986-12.com.adobe
2015-01-06 22:03 - 2010-08-28 18:12 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2015-01-05 04:03 - 2011-12-20 14:51 - 00000000 ____D () C:\Program Files (x86)\Origin
2015-01-05 01:13 - 2010-08-28 19:11 - 00000000 ____D () C:\Program Files\Adobe
2015-01-05 00:19 - 2010-08-28 18:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe
2015-01-04 23:26 - 2014-01-12 21:11 - 00147525 _____ () C:\Users\Ant\Documents\mxfilerelatedcache.mxc2
2015-01-04 22:44 - 2010-10-20 16:57 - 00000000 ____D () C:\Users\Ant\AppData\Roaming\PACE Anti-Piracy
2015-01-04 22:44 - 2010-10-20 16:57 - 00000000 ____D () C:\ProgramData\PACE Anti-Piracy
2015-01-04 22:44 - 2009-07-13 21:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2015-01-04 21:32 - 2013-01-14 14:58 - 00000000 ____D () C:\Users\Ant\.gimp-2.8
2015-01-04 20:41 - 2011-02-10 14:16 - 00000000 ____D () C:\Users\Ant\AppData\Local\Windows Live
2014-12-31 13:12 - 2010-08-03 11:45 - 113365784 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-12-27 02:59 - 2012-12-08 13:02 - 00000000 ____D () C:\ProgramData\Orbit

==================== Files in the root of some directories =======
2009-11-17 12:15 - 2006-10-17 16:13 - 0338755 _____ () C:\Program Files (x86)\AVB SecureDisk User Manual.pdf
2009-11-17 12:15 - 2007-04-09 08:32 - 0828542 _____ (Macromedia, Inc.) C:\Program Files (x86)\free MP3 by eMusic.exe
2014-09-12 21:25 - 2014-09-12 21:25 - 0000000 _____ () C:\Program Files (x86)\Mozilla Firefoxwtu-secure-search.xml
2010-08-13 13:32 - 2009-12-22 21:19 - 0085084 _____ () C:\Program Files (x86)\storeItems.xml
2011-02-01 22:10 - 2012-01-19 17:11 - 0000132 _____ () C:\Users\Ant\AppData\Roaming\Adobe PNG Format CS5 Prefs
2012-11-16 22:15 - 2013-04-02 12:59 - 0000132 _____ () C:\Users\Ant\AppData\Roaming\Adobe PNG Format CS6 Prefs
2012-02-25 22:01 - 2012-02-25 22:01 - 0082522 _____ () C:\Users\Ant\AppData\Roaming\icarus-dxdiag.xml
2010-10-08 20:29 - 2012-02-08 16:50 - 0007859 _____ () C:\Users\Ant\AppData\Roaming\pcouffin.cat
2010-10-08 20:29 - 2012-02-08 16:50 - 0001167 _____ () C:\Users\Ant\AppData\Roaming\pcouffin.inf
2010-10-08 20:30 - 2012-02-08 16:50 - 0000055 _____ () C:\Users\Ant\AppData\Roaming\pcouffin.log
2010-10-08 20:29 - 2012-02-08 16:50 - 0082816 _____ (VSO Software) C:\Users\Ant\AppData\Roaming\pcouffin.sys
2015-01-03 21:41 - 2015-01-03 23:28 - 0001456 _____ () C:\Users\Ant\AppData\Local\Adobe Save for Web 13.0 Prefs
2014-09-26 21:03 - 2014-09-26 21:03 - 0000843 _____ () C:\Users\Ant\AppData\Local\recently-used.xbel
2013-04-10 19:26 - 2013-04-10 19:26 - 0007605 _____ () C:\Users\Ant\AppData\Local\Resmon.ResmonCfg
2012-11-16 21:49 - 2012-11-16 21:49 - 0000057 _____ () C:\ProgramData\Ament.ini
2010-12-18 20:40 - 2010-12-18 20:40 - 0000056 _____ () C:\ProgramData\ezsidmv.dat
2013-07-20 00:32 - 2013-07-29 14:54 - 0007209 _____ () C:\ProgramData\hpzinstall.log

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2010-10-17 12:35

==================== End Of Log ============================

Link to post
Share on other sites
Naathim

Naathim

Posted
Posted

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.