need help pls ... have no idea what is this..

cassidytan · January 25, 2015

esset found a couple thread and quarantine... can someone help me rechecking what is this .. computer and internet connection run so slow.. please...

Naathim · January 25, 2015

Hello

Help us help you. Please go through the steps here and post the logs for my review:

https://forums.malwarebytes.org/index.php?/topic/9573-im-infected-what-do-i-do-now/#entry46166

cassidytan · January 26, 2015

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 24-01-2015 01

Ran by 1 (administrator) on 1-PC on 26-01-2015 19:42:42

Running from C:\Users\1\Desktop\New folder

Loaded Profiles: 1 (Available profiles: 1 & polda only)

Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)

Internet Explorer Version 11 (Default browser: Chrome)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

(Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe

(Spotflux) C:\Program Files (x86)\Spotflux\services\SpotfluxConnectionManager.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Safer Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Intel Corporation) C:\Windows\System32\igfxEM.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe

(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe

(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATII3E.EXE

(EnTech Taiwan) C:\Program Files (x86)\Dell\Dell Display Manager\ddm.exe

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe

(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe

(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe

(Research In Motion Limited) C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Research In Motion Limited) C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe

() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe

() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe

(Intel Corporation) C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe

(Intel Corporation) C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe

() C:\Program Files (x86)\TagScanner\Tagscan.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Research In Motion Limited) C:\Program Files (x86)\Common Files\Research In Motion\RIMDeviceManager\RIMDeviceManager.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [igfxTray] => C:\Windows\system32\igfxtray.exe [457616 2014-10-03] ()

HKLM\...\Run: [HotKeysCmds] => "C:\Windows\system32\hkcmd.exe"

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [1796056 2014-08-19] (NVIDIA Corporation)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [557768 2014-10-14] (Adobe Systems Incorporated)

HKLM\...\Run: [Persistence] => "C:\Windows\system32\igfxpers.exe"

HKLM\...\Run: [iAStorIcon] => C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-07] (Intel Corporation)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13662936 2013-10-24] (Realtek Semiconductor)

HKLM\...\Run: [installerLauncher] => "C:\Program Files\Common Files\Bitdefender\SetupInformation\{6F57816A-791A-4159-A75F-CFD0C7EA4FBF}\setuplauncher.exe" /run:"C:\Program Files\Common Files\Bitdefender\SetupInformation\{6F57816A-791A-41 (the data entry has 36 more characters).

HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1331288 2014-08-22] (Microsoft Corporation)

HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [5595336 2014-10-01] (ESET)

HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)

HKLM-x32\...\Run: [] => [X]

HKLM-x32\...\Run: [uSB3MON] => C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-04-26] (Intel Corporation)

HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2694320 2014-10-15] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [RIMBBLaunchAgent.exe] => C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe [267792 2013-01-17] (Research In Motion Limited)

HKLM-x32\...\Run: [Razer Synapse] => "C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe"

HKLM-x32\...\Run: [sunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [508800 2014-12-17] (Oracle Corporation)

HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [448856 2014-11-17] (DivX, LLC)

HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()

HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)

Winlogon\Notify\igfxcui: igfxdev.dll [X]

HKU\S-1-5-21-2950901286-4018632002-2551131573-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [6501656 2014-10-30] (Piriform Ltd)

HKU\S-1-5-21-2950901286-4018632002-2551131573-1000\...\Run: [CCleaner] => C:\Program Files\CCleaner\CCleaner64.exe [6501656 2014-10-30] (Piriform Ltd)

HKU\S-1-5-21-2950901286-4018632002-2551131573-1000\...\Run: [spybotSD TeaTimer] => C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe [2260480 2009-03-05] (Safer-Networking Ltd.)

HKU\S-1-5-21-2950901286-4018632002-2551131573-1000\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [43816 2014-10-17] (Apple Inc.)

HKU\S-1-5-21-2950901286-4018632002-2551131573-1000\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [43816 2014-11-21] (Apple Inc.)

HKU\S-1-5-21-2950901286-4018632002-2551131573-1000\...\Run: [EPLTarget\P0000000000000001] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATII3E.EXE [283232 2012-02-28] (SEIKO EPSON CORPORATION)

HKU\S-1-5-21-2950901286-4018632002-2551131573-1000\...\Policies\system: [LogonHoursAction] 2

HKU\S-1-5-21-2950901286-4018632002-2551131573-1000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\BdBkpFolder ()

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Dell Display Manager.lnk

ShortcutTarget: Dell Display Manager.lnk -> C:\Program Files (x86)\Dell\Dell Display Manager\ddm.exe (EnTech Taiwan)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install LastPass IE RunOnce.lnk

ShortcutTarget: Install LastPass IE RunOnce.lnk -> C:\Program Files (x86)\Common Files\lpuninstall.exe ()

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk

ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia)

ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll ()

ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll ()

ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll ()

GroupPolicyUsers\S-1-5-21-2950901286-4018632002-2551131573-1006\User: Group Policy on Chrome detected <======= ATTENTION

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

HKU\S-1-5-21-2950901286-4018632002-2551131573-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKU\S-1-5-21-2950901286-4018632002-2551131573-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://id.yahoo.com?fr=fp-comodo

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKU\S-1-5-21-2950901286-4018632002-2551131573-1000 -> {8EEAC88A-079B-4b2c-80C1-7836F79EB40A} URL = http://id.search.yahoo.com/search?p={searchTerms}&fr=chr-comodo

BHO: Java Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation)

BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: No Name -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> No File

BHO: LastPass Vault -> {95D9ECF5-2A4D-4550-BE49-70D42F71296E} -> C:\Program Files (x86)\LastPass\LPToolbar_x64.dll (LastPass)

BHO: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: E-Web Print -> {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} -> C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll (SEIKO EPSON CORPORATION)

BHO-x32: Spybot-S&D IE Protection -> {53707962-6F74-2D53-2644-206D7942484F} -> C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)

BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: LastPass Vault -> {95D9ECF5-2A4D-4550-BE49-70D42F71296E} -> C:\Program Files (x86)\LastPass\LPToolbar.dll (LastPass)

Toolbar: HKLM - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll (LastPass)

Toolbar: HKLM-x32 - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar.dll (LastPass)

Toolbar: HKLM-x32 - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll (SEIKO EPSON CORPORATION)

Toolbar: HKU\S-1-5-21-2950901286-4018632002-2551131573-1000 -> No Name - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - No File

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:

========

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_287.dll ()

FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @lastpass.com/NPLastPass -> C:\Program Files (x86)\LastPass\nplastpass64.dll (LastPass)

FF Plugin: @microsoft.com/GENUINE -> disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: adobe.com/AdobeAAMDetect_x86_64 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_287.dll ()

FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin-x32: @lastpass.com/NPLastPass -> C:\Program Files (x86)\LastPass\nplastpass64.dll (LastPass)

FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF Plugin-x32: @RIM.com/WebSLLauncher,version=1.0 -> C:\Program Files (x86)\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll ()

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)

FF HKLM-x32\...\Firefox\Extensions: [bdwteff@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\antispam32\bdwteff

FF HKLM-x32\...\Firefox\Extensions: [e-webprint@epson.com] - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on

FF Extension: E-Web Print - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on [2015-01-17]

Chrome:

=======

CHR Profile: C:\Users\1\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Slides) - C:\Users\1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-11-15]

CHR Extension: (Google Docs) - C:\Users\1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-11-15]

CHR Extension: (Google Drive) - C:\Users\1\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-11-15]

CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\1\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-11-15]

CHR Extension: (WOT) - C:\Users\1\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2014-12-12]

CHR Extension: (YouTube) - C:\Users\1\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-11-15]

CHR Extension: (Adblock Plus) - C:\Users\1\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-12-12]

CHR Extension: (Google Search) - C:\Users\1\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-11-15]

CHR Extension: (Tampermonkey) - C:\Users\1\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2014-12-25]

CHR Extension: (Google Sheets) - C:\Users\1\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-11-15]

CHR Extension: (LastPass: Free Password Manager) - C:\Users\1\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2014-12-30]

CHR Extension: (Google Wallet) - C:\Users\1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-11-15]

CHR Extension: (Gmail) - C:\Users\1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-11-15]

CHR HKLM\...\Chrome\Extension: [hdokiejnpimakedhajhdlcegeplioahd] - No Path

CHR HKLM-x32\...\Chrome\Extension: [hdokiejnpimakedhajhdlcegeplioahd] - No Path

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()

R3 Blackberry Device Manager; C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe [577536 2013-01-18] (Research In Motion Limited) [File not signed]

R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [1349576 2014-10-01] (ESET)

R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation)

R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [329104 2014-10-03] (Intel Corporation)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)

R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2014-08-22] (Microsoft Corporation)

S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [368624 2014-08-22] (Microsoft Corporation)

R2 SBSDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)

R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1363160 2014-11-28] (Secunia)

S2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [765144 2014-11-28] (Secunia)

R2 SpotfluxConnectionManager; C:\Program Files (x86)\Spotflux\services\SpotfluxConnectionManager.exe [104960 2015-01-12] (Spotflux) [File not signed]

S4 TlntSvr; C:\Windows\System32\tlntsvr.exe [81920 2009-07-14] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [22240 2013-10-28] ()

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [243440 2014-08-18] (ESET)

R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [241368 2014-08-18] (ESET)

R0 edevmon; C:\Windows\SysWOW64\DRIVERS\edevmon.sys [241368 2014-08-18] (ESET)

R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [169280 2014-08-18] (ESET)

R2 epfwwfpr; C:\Windows\System32\DRIVERS\epfwwfpr.sys [158968 2014-09-18] (ESET)

R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-08-07] (Intel Corporation)

R1 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [93400 2014-11-21] (Malwarebytes Corporation)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-01-26] (Malwarebytes Corporation)

R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-11-21] (Malwarebytes Corporation)

R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [269008 2014-07-17] (Microsoft Corporation)

R1 netfilter2; C:\Windows\System32\drivers\netfilter2.sys [48896 2015-01-12] (Windows ® Win 7 DDK provider)

S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [125584 2014-07-17] (Microsoft Corporation)

R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-08-20] (NVIDIA Corporation)

R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2014-11-28] (Secunia)

S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [78336 2013-01-03] (Research In Motion Limited)

R3 RimVSerPort; C:\Windows\System32\DRIVERS\RimSerial_AMD64.sys [44544 2012-12-10] (Research in Motion Ltd)

S3 tapSF0901; C:\Windows\System32\DRIVERS\tapSF0901.sys [39104 2015-01-12] (Spotflux, Inc.)

S1 UsbCharger; C:\Windows\System32\DRIVERS\UsbCharger.sys [22240 2013-10-24] ()

S3 usbrndis6; C:\Windows\System32\DRIVERS\usb80236.sys [19968 2013-02-12] (Microsoft Corporation)

S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-26 19:42 - 2015-01-26 19:42 - 00000000 ____D () C:\Users\1\Desktop\New folder

2015-01-25 22:52 - 2015-01-25 22:52 - 00000978 _____ () C:\Users\1\Desktop\TagScanner.lnk

2015-01-25 22:52 - 2015-01-25 22:52 - 00000000 ____D () C:\Users\1\AppData\Roaming\TagScanner

2015-01-25 22:52 - 2015-01-25 22:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TagScanner

2015-01-25 22:52 - 2015-01-25 22:52 - 00000000 ____D () C:\Program Files (x86)\TagScanner

2015-01-25 18:47 - 2015-01-26 19:41 - 00076411 _____ () C:\Windows\WindowsUpdate.log

2015-01-25 18:19 - 2015-01-25 18:19 - 00001805 _____ () C:\Users\Public\Desktop\QuickTime Player.lnk

2015-01-25 18:19 - 2015-01-25 18:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime

2015-01-25 18:19 - 2015-01-25 18:19 - 00000000 ____D () C:\Program Files (x86)\QuickTime

2015-01-25 10:43 - 2015-01-25 18:32 - 00002692 _____ () C:\Users\1\Desktop\best trance 2014 title.txt

2015-01-25 10:23 - 2015-01-25 10:23 - 00000000 ____D () C:\Program Files (x86)\ESET

2015-01-25 10:02 - 2015-01-26 19:42 - 00000000 ___DC () C:\FRST

2015-01-25 09:53 - 2015-01-25 09:59 - 00000000 ___DC () C:\AdwCleaner

2015-01-25 09:50 - 2014-12-28 15:01 - 01707939 _____ (Thisisu) C:\Users\1\Desktop\JRT_NEW.exe

2015-01-24 12:55 - 2015-01-24 12:55 - 00001571 _____ () C:\Users\1\Desktop\DivX Movies.lnk

2015-01-24 12:55 - 2015-01-24 12:55 - 00001026 _____ () C:\Users\Public\Desktop\DivX Player.lnk

2015-01-24 12:55 - 2015-01-24 12:55 - 00000000 ____D () C:\Users\1\AppData\Roaming\DivX

2015-01-24 12:54 - 2015-01-24 12:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX

2015-01-24 12:54 - 2015-01-24 12:54 - 00000000 ___DC () C:\Program Files\DivX

2015-01-24 12:41 - 2015-01-24 12:55 - 00000000 ____D () C:\Program Files (x86)\DivX

2015-01-24 12:38 - 2015-01-24 12:55 - 00000000 ____D () C:\ProgramData\DivX

2015-01-24 11:00 - 2015-01-26 19:23 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-01-24 11:00 - 2015-01-24 11:00 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2015-01-24 11:00 - 2015-01-24 11:00 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2015-01-24 11:00 - 2015-01-24 11:00 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2015-01-24 11:00 - 2015-01-24 11:00 - 00000000 ____D () C:\Windows\system32\Macromed

2015-01-24 10:56 - 2015-01-24 10:56 - 00000000 ____D () C:\Windows\SysWOW64\Macromed

2015-01-24 10:03 - 2015-01-24 10:03 - 00001121 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MusicBrainz Picard.lnk

2015-01-24 10:03 - 2015-01-24 10:03 - 00000000 ____D () C:\Users\1\AppData\Roaming\MusicBrainz

2015-01-24 10:03 - 2015-01-24 10:03 - 00000000 ____D () C:\Users\1\AppData\Local\MusicBrainz

2015-01-24 10:02 - 2015-01-24 10:02 - 00000000 ____D () C:\Program Files (x86)\MusicBrainz Picard

2015-01-24 09:35 - 2015-01-24 09:35 - 00001053 _____ () C:\Users\1\Desktop\Tag&Rename.lnk

2015-01-24 09:35 - 2015-01-24 09:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tag&Rename

2015-01-24 09:35 - 2015-01-24 09:35 - 00000000 ____D () C:\Program Files (x86)\TagRename

2015-01-24 09:16 - 2015-01-24 09:16 - 00132277 _____ () C:\Users\1\Downloads\mp3rename.zip

2015-01-24 09:16 - 2015-01-24 09:16 - 00000000 ____D () C:\Users\1\Downloads\mp3rename

2015-01-23 10:47 - 2015-01-23 10:47 - 00000000 ____D () C:\Users\1\AppData\Local\Macroplant_LLC

2015-01-23 10:34 - 2015-01-23 10:34 - 00000983 _____ () C:\Users\Public\Desktop\iExplorer.lnk

2015-01-23 10:34 - 2015-01-23 10:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iExplorer

2015-01-23 10:34 - 2015-01-23 10:34 - 00000000 ____D () C:\Program Files (x86)\iExplorer

2015-01-23 09:34 - 2015-01-24 13:13 - 00000000 ____D () C:\Users\1\Downloads\Naruto

2015-01-23 09:28 - 2015-01-23 09:28 - 00000000 ____D () C:\Users\1\Downloads\ww docs

2015-01-23 09:26 - 2015-01-24 12:38 - 00000000 ____D () C:\Users\1\Downloads\software

2015-01-23 09:26 - 2015-01-23 09:42 - 00000000 ____D () C:\Users\1\Downloads\Games

2015-01-23 09:24 - 2015-01-23 09:37 - 00000000 ____D () C:\Users\1\Downloads\mp4 - new

2015-01-22 18:08 - 2015-01-23 09:39 - 00000000 ____D () C:\Users\1\Downloads\22012015

2015-01-22 18:01 - 2015-01-24 09:34 - 00000000 ____D () C:\Users\1\AppData\Roaming\Mp3tag

2015-01-22 17:33 - 2015-01-23 19:10 - 00000000 ____D () C:\Users\1\Downloads\vaping

2015-01-22 16:17 - 2015-01-22 16:17 - 00000943 _____ () C:\Users\Public\Desktop\Mp3tag.lnk

2015-01-22 16:17 - 2015-01-22 16:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mp3tag

2015-01-22 16:17 - 2015-01-22 16:17 - 00000000 ____D () C:\Program Files (x86)\Mp3tag

2015-01-17 16:57 - 2015-01-17 16:57 - 00000000 ____D () C:\Users\1\AppData\Local\ESET

2015-01-17 16:56 - 2015-01-23 23:38 - 00000000 ____D () C:\Users\1\AppData\Roaming\BitTorrent

2015-01-17 16:56 - 2015-01-17 16:56 - 00000829 _____ () C:\Users\1\Desktop\BitTorrent.lnk

2015-01-17 16:56 - 2015-01-17 16:56 - 00000809 _____ () C:\Users\1\AppData\Roaming\Microsoft\Windows\Start Menu\BitTorrent.lnk

2015-01-17 16:47 - 2015-01-17 16:47 - 00001999 _____ () C:\Users\Public\Desktop\Spotflux.lnk

2015-01-17 16:47 - 2015-01-17 16:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spotflux

2015-01-17 16:47 - 2015-01-12 23:23 - 00048896 _____ (Windows ® Win 7 DDK provider) C:\Windows\system32\Drivers\netfilter2.sys

2015-01-17 16:46 - 2015-01-17 16:47 - 00000000 ____D () C:\ProgramData\spotflux

2015-01-17 16:46 - 2015-01-17 16:47 - 00000000 ____D () C:\Program Files (x86)\Spotflux

2015-01-17 12:08 - 2015-01-17 12:08 - 00000000 ___DC () C:\Program Files\ESET

2015-01-17 12:08 - 2015-01-17 12:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET

2015-01-17 12:08 - 2015-01-17 12:08 - 00000000 ____D () C:\ProgramData\ESET

2015-01-17 11:30 - 2007-04-10 01:06 - 00010752 _____ (SEIKO EPSON CORP.) C:\Windows\system32\E_GCINST.DLL

2015-01-17 11:29 - 2011-03-14 03:03 - 00083968 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\E_YD4BI3E.DLL

2015-01-16 19:34 - 2015-01-16 19:34 - 00000000 ____D () C:\Users\1\AppData\Roaming\TuneUp Software

2015-01-16 19:34 - 2015-01-16 19:34 - 00000000 ____D () C:\Users\1\AppData\Local\TuneUp Software

2015-01-16 19:33 - 2015-01-16 19:37 - 00000000 ____D () C:\ProgramData\TuneUp Software

2015-01-16 19:33 - 2015-01-16 19:33 - 00000000 __SHD () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}

2015-01-16 19:26 - 2015-01-16 19:26 - 00000000 ____D () C:\Users\1\AppData\Roaming\Temp

2015-01-16 19:06 - 2015-01-16 19:30 - 00003362 _____ () C:\Windows\System32\Tasks\RunAsStdUser Task for VeohWebPlayer

2015-01-16 19:06 - 2015-01-16 19:06 - 00000000 ____D () C:\Program Files (x86)\Veoh Networks

2015-01-15 11:45 - 2015-01-15 11:45 - 00001504 _____ () C:\Users\polda only\Desktop\FlashGet downloads.lnk

2015-01-15 11:45 - 2015-01-15 11:45 - 00001494 _____ () C:\Users\1\Desktop\FlashGet downloads.lnk

2015-01-15 11:30 - 2015-01-15 11:34 - 00000000 ____D () C:\Program Files (x86)\clashofgods

2015-01-15 10:54 - 2015-01-15 10:54 - 00000000 ____D () C:\Users\1\G-bits

2015-01-15 10:51 - 2015-01-15 10:51 - 00001031 _____ () C:\Users\Public\Desktop\Clash of Gods.lnk

2015-01-15 10:51 - 2015-01-15 10:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Clash of Gods

2015-01-15 10:38 - 2015-01-15 19:15 - 00000000 ____D () C:\Program Files (x86)\Clash of Gods

2015-01-15 00:19 - 2015-01-22 16:12 - 00002219 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

2015-01-15 00:19 - 2015-01-15 00:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome

2015-01-15 00:09 - 2015-01-26 19:14 - 00000888 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-01-15 00:09 - 2015-01-26 00:14 - 00000884 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-01-15 00:09 - 2015-01-15 00:09 - 00003884 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2015-01-15 00:09 - 2015-01-15 00:09 - 00003632 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2015-01-14 23:05 - 2015-01-14 23:05 - 00000000 ____D () C:\Users\1\AppData\Local\Deployment

2015-01-14 23:05 - 2015-01-14 23:05 - 00000000 ____D () C:\Users\1\AppData\Local\Apps\2.0

2015-01-14 18:44 - 2014-12-19 10:06 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll

2015-01-14 18:44 - 2014-12-19 08:46 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys

2015-01-14 18:44 - 2014-12-12 12:35 - 05553592 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-01-14 18:44 - 2014-12-12 12:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2015-01-14 18:44 - 2014-12-12 12:31 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2015-01-14 18:44 - 2014-12-12 12:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2015-01-14 18:44 - 2014-12-12 12:11 - 03971512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2015-01-14 18:44 - 2014-12-12 12:11 - 03916728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2015-01-14 18:44 - 2014-12-12 12:07 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

2015-01-14 18:44 - 2014-12-12 00:47 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe

2015-01-14 18:44 - 2014-12-06 11:17 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll

2015-01-14 18:44 - 2014-12-06 11:17 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\tlntsess.exe

2015-01-14 18:44 - 2014-12-06 10:50 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll

2015-01-14 18:44 - 2014-12-06 10:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll

2015-01-14 00:01 - 2015-01-14 00:34 - 00000000 ____D () C:\Users\1\itools

2015-01-13 23:57 - 2015-01-13 23:57 - 00000000 ____D () C:\Users\1\Documents\iTools

2015-01-13 23:56 - 2015-01-22 00:55 - 00000000 ____D () C:\Users\1\Desktop\itools

2015-01-13 00:55 - 2015-01-14 10:27 - 00000000 ____D () C:\Users\1\Documents\project movie keisha

2015-01-12 23:23 - 2015-01-12 23:23 - 00039104 _____ (Spotflux, Inc.) C:\Windows\system32\Drivers\tapSF0901.sys

2015-01-07 10:58 - 2015-01-17 11:26 - 00000000 ____D () C:\Users\1\Desktop\Orderan JAnuari

2015-01-06 07:42 - 2015-01-06 07:43 - 00000000 ___HD () C:\Users\1\Documents\.4sh

2015-01-05 16:14 - 2015-01-05 16:14 - 00000000 ____D () C:\Users\1\AppData\Roaming\Macromedia

2015-01-05 15:41 - 2015-01-19 06:32 - 00001072 _____ () C:\Users\1\Desktop\Adobe Photoshop CC 2014.lnk

2015-01-05 15:41 - 2015-01-05 15:41 - 00000000 ____D () C:\Users\1\AppData\Roaming\PDAppFlex

2014-12-30 21:03 - 2014-12-30 21:03 - 00001200 _____ () C:\Users\Public\Desktop\My LastPass Vault.lnk

2014-12-30 21:03 - 2014-12-30 21:03 - 00000000 ____D () C:\Users\1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LastPass

2014-12-30 21:03 - 2014-12-30 21:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LastPass

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-26 18:52 - 2014-11-11 23:25 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2015-01-26 10:47 - 2009-07-14 12:32 - 00000000 ____D () C:\Windows\system32\FxsTmp

2015-01-25 22:14 - 2009-07-14 10:20 - 00000000 ____D () C:\Windows\system32\NDF

2015-01-25 18:52 - 2009-07-14 11:45 - 00020672 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-01-25 18:52 - 2009-07-14 11:45 - 00020672 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-01-25 18:46 - 2014-11-14 15:24 - 00000000 ____D () C:\Users\1\AppData\Local\Adobe

2015-01-25 18:45 - 2014-11-11 22:25 - 00000000 ____D () C:\ProgramData\NVIDIA

2015-01-25 18:45 - 2009-07-14 12:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2015-01-25 12:18 - 2009-07-14 12:13 - 00784286 _____ () C:\Windows\system32\PerfStringBackup.INI

2015-01-25 10:15 - 2014-12-05 10:08 - 00000000 ____D () C:\Users\1\Desktop\psychotic

2015-01-24 14:05 - 2014-11-11 23:14 - 00000000 ____D () C:\Users\1\AppData\Local\CrashDumps

2015-01-24 10:56 - 2014-11-18 11:15 - 00000000 ____D () C:\Program Files (x86)\iTunes

2015-01-23 09:42 - 2014-11-16 22:45 - 00000000 ____D () C:\Users\1\Downloads\e1200 v2

2015-01-22 19:21 - 2014-11-11 17:23 - 00000000 ____D () C:\Users\1

2015-01-22 18:00 - 2014-11-15 08:43 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll

2015-01-22 18:00 - 2014-11-15 08:42 - 00000000 ___DC () C:\Program Files\Java

2015-01-22 10:58 - 2014-11-18 10:44 - 00000000 ____D () C:\Users\1\AppData\Roaming\Apple Computer

2015-01-22 00:54 - 2014-11-20 15:34 - 00000000 ____D () C:\Users\1\AppData\Local\Apple Inc

2015-01-22 00:54 - 2014-11-18 10:42 - 00000000 ____D () C:\Users\1\AppData\Local\Apple

2015-01-19 00:38 - 2014-11-22 07:30 - 00000000 ____D () C:\ProgramData\Razer

2015-01-19 00:38 - 2014-11-22 07:30 - 00000000 ____D () C:\Program Files (x86)\Razer

2015-01-19 00:37 - 2014-11-24 17:10 - 00000000 ____D () C:\Users\1\AppData\Local\Razer

2015-01-17 23:23 - 2014-11-14 15:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON

2015-01-17 22:12 - 2014-11-20 16:28 - 00000000 ___DC () C:\FFOutput

2015-01-17 11:34 - 2014-11-14 15:41 - 00000000 ____D () C:\Program Files (x86)\Epson Software

2015-01-17 07:22 - 2014-11-14 15:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epson Software

2015-01-16 04:00 - 2014-11-12 00:06 - 00000000 ____D () C:\Program Files (x86)\Steam

2015-01-15 23:56 - 2014-11-11 18:13 - 00000000 ____D () C:\Users\1\AppData\Local\Google

2015-01-15 23:54 - 2014-12-02 07:12 - 00000000 ____D () C:\Users\1\AppData\Roaming\FlashgetSetup

2015-01-15 23:54 - 2014-12-02 07:12 - 00000000 ____D () C:\Users\1\AppData\Roaming\FlashGetBHO

2015-01-15 23:42 - 2014-12-02 07:16 - 00009095 _____ () C:\Windows\SysWOW64\secushr.dat

2015-01-15 11:44 - 2014-12-02 07:12 - 00000000 ____D () C:\Users\1\AppData\Roaming\BITS

2015-01-15 00:19 - 2014-11-11 18:13 - 00000000 ____D () C:\Program Files (x86)\Google

2015-01-14 23:14 - 2014-11-11 18:16 - 00768152 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2015-01-14 22:41 - 2014-11-12 01:39 - 00000000 ____D () C:\Windows\system32\MRT

2015-01-14 22:38 - 2014-11-12 01:39 - 113365784 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2015-01-13 11:44 - 2014-11-20 10:17 - 00000385 _____ () C:\Users\1\AppData\Roaming\Rim.DesktopHelper.Exception.log

2015-01-13 11:44 - 2014-11-20 10:17 - 00000385 _____ () C:\Users\1\AppData\Roaming\Rim.Desktop.Exception.log

2015-01-13 11:28 - 2014-12-03 11:30 - 00022640 _____ () C:\Users\1\Documents\My Movie.wlmp

2015-01-12 23:50 - 2014-12-03 10:44 - 00000000 ____D () C:\Users\1\AppData\Local\Windows Live

2015-01-05 21:32 - 2014-11-14 21:06 - 00000000 ____D () C:\ProgramData\regid.1986-12.com.adobe

2015-01-05 19:24 - 2014-11-14 17:56 - 00000000 ___DC () C:\Program Files\Common Files\Adobe

2015-01-05 19:23 - 2014-11-14 15:53 - 00000000 ____D () C:\Program Files (x86)\Adobe

2015-01-05 19:22 - 2014-11-14 18:00 - 00000000 ___DC () C:\Program Files\Adobe

2014-12-31 18:14 - 2010-11-21 10:27 - 00298120 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

2014-12-30 21:04 - 2014-12-13 05:16 - 00000000 ____D () C:\Program Files (x86)\LastPass

==================== Files in the root of some directories =======

2014-12-30 21:04 - 2014-12-30 21:04 - 14147584 _____ () C:\Program Files (x86)\Common Files\lpuninstall.exe

2014-11-20 10:17 - 2015-01-13 11:44 - 0000385 _____ () C:\Users\1\AppData\Roaming\Rim.Desktop.Exception.log

2014-11-20 10:02 - 2014-11-20 10:02 - 0001153 _____ () C:\Users\1\AppData\Roaming\Rim.Desktop.HttpServerSetup.log

2014-11-20 10:17 - 2015-01-13 11:44 - 0000385 _____ () C:\Users\1\AppData\Roaming\Rim.DesktopHelper.Exception.log

2015-01-22 01:01 - 2015-01-22 01:01 - 0040115 _____ () C:\Users\1\AppData\Roaming\UserTile.png

2014-11-16 00:50 - 2014-11-30 23:25 - 0036352 _____ () C:\Users\1\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2014-12-12 19:25 - 2014-12-12 19:25 - 0266397 _____ () C:\ProgramData\1418386789.bdinstall.bin

Some content of TEMP:

====================

C:\Users\1\AppData\Local\Temp\Quarantine.exe

C:\Users\1\AppData\Local\Temp\sqlite3.dll

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-01-24 00:40

==================== End Of Log ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 24-01-2015 01

Ran by 1 at 2015-01-26 19:43:30

Running from C:\Users\1\Desktop\New folder

Boot Mode: Normal

==========================================================

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Microsoft Security Essentials (Disabled - Up to date) {4F35CFC4-45A3-FC37-EF17-759A02E39AB1}

AV: ESET NOD32 Antivirus 8.0 (Enabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}

AS: Microsoft Security Essentials (Disabled - Up to date) {F4542E20-6399-F3B9-D5A7-4EE87964D00C}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: ESET NOD32 Antivirus 8.0 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 2.8.1.451 - Adobe Systems Incorporated)

Adobe Flash Player 16 NPAPI (HKLM-x32\...\{D901557E-8AF2-4F66-BE3C-B8C816397BD5}) (Version: 16.0.0.287 - Adobe Systems Incorporated)

Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

BitTorrent (HKU\S-1-5-21-2950901286-4018632002-2551131573-1000\...\BitTorrent) (Version: 7.9.2.37954 - BitTorrent Inc.)

BlackBerry Desktop Software 7.1 (HKLM-x32\...\BlackBerry_Desktop) (Version: 7.1.0.41 - Research In Motion Ltd.)

BlackBerry Desktop Software 7.1 (x32 Version: 7.1.0.41 - Research In Motion Ltd.) Hidden

Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)

CCleaner (HKLM\...\CCleaner) (Version: 4.19 - Piriform)

Cisco Connect (HKLM-x32\...\Cisco Connect) (Version: 1.4.12263.1 - Cisco Consumer Products LLC)

Clash of Gods version 1.01 (HKLM-x32\...\{482B45E0-95CA-48BB-B095-E1D5C22BAB77}_is1) (Version: 1.01 - Qeon Interactive)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

Dell Display Manager (HKLM-x32\...\{AC50C05D-9D57-40F5-B2EF-AC402F14312B}_is1) (Version: - EnTech Taiwan)

DivX Setup (HKLM-x32\...\DivX Setup) (Version: 2.7.0.31 - DivX, LLC)

Dota 2 (HKLM-x32\...\Steam App 570) (Version: - Valve)

Epson Easy Photo Print 2 (HKLM-x32\...\{674E262F-72EA-41C1-AF16-9727311A4553}) (Version: 2.4.1.0 - SEIKO EPSON CORPORATION)

Epson E-Web Print (HKLM-x32\...\{682A3328-9621-4BAD-91FA-873A076610C4}) (Version: 1.21.0000 - SEIKO EPSON CORPORATION)

EPSON L110 Series Printer Uninstall (HKLM\...\EPSON L110 Series) (Version: - SEIKO EPSON Corporation)

EPSON L300 Series Printer Uninstall (HKLM\...\EPSON L300 Series) (Version: - SEIKO EPSON Corporation)

ESET NOD32 Antivirus (HKLM\...\{7F39EB28-B9B7-41B8-8564-DB33284A010D}) (Version: 8.0.304.0 - ESET, spol s r. o.)

ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )

FileASSASSIN (HKLM-x32\...\FileASSASSIN) (Version: 1.06 - Malwarebytes)

FormatFactory 3.3.5.0 (HKLM-x32\...\FormatFactory) (Version: 3.3.5.0 - Format Factory)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 40.0.2214.91 - Google Inc.)

Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden

iCloud (HKLM\...\{309768A4-A2BB-4930-A5A2-8169678C9B4C}) (Version: 4.0.6.28 - Apple Inc.)

iExplorer 3.6.5.0 (HKLM-x32\...\{7FD8B0C1-CDDA-4B4D-A577-B2E3570EA3A3}_is1) (Version: - Macroplant LLC)

Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3960 - Intel Corporation)

Intel® Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.0.1016 - Intel Corporation)

iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.)

Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)

LastPass (Hapus saja) (HKLM-x32\...\LastPass) (Version: - LastPass)

Malwarebytes Anti-Malware version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)

Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)

Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.6.305.0 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{402ED4A1-8F5B-387A-8688-997ABF58B8F2}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Mp3tag v2.66 (HKLM-x32\...\Mp3tag) (Version: v2.66 - Florian Heidenreich)

MusicBrainz Picard (HKLM-x32\...\MusicBrainz Picard) (Version: 1.3.2 - MusicBrainz)

NVIDIA 3D Vision Controller Driver 326.01 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 326.01 - NVIDIA Corporation)

NVIDIA 3D Vision Driver 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 340.52 - NVIDIA Corporation)

NVIDIA Graphics Driver 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 340.52 - NVIDIA Corporation)

NVIDIA HD Audio Driver 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)

NVIDIA Update 10.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 10.4.0 - NVIDIA Corporation)

NVIDIA Virtual Audio 1.2.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.5 - NVIDIA Corporation)

ON_OFF Charge 2 B13.1028.1 (HKLM-x32\...\InstallShield_{6B4ED6F7-BB88-4945-B0C6-01410E1BAC3A}) (Version: 1.00.0000 - GIGABYTE)

ON_OFF Charge 2 B13.1028.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden

QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)

Razer Synapse 2.0 (HKLM-x32\...\{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}) (Version: 1.18.18.23036 - Razer Inc.)

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.65.1025.2012 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7076 - Realtek Semiconductor Corp.)

Secunia PSI (3.0.0.10004) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.10004 - Secunia)

Software Updater (HKLM-x32\...\{FA7EE274-7370-43B7-9A45-A39B17CCCDC5}) (Version: 4.3.3 - SEIKO EPSON CORPORATION)

Spotflux (HKLM-x32\...\Spotflux) (Version: 3.1.2 - Spotflux) <==== ATTENTION!

Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1) (Version: 1.6.2 - Safer Networking Limited)

Swordsman Online (HKLM-x32\...\Swordsman Online 1.0.0) (Version: 1.0.0 - Perfect Game)

Tag&Rename 3.8.5 (HKLM-x32\...\Tag&Rename_is1) (Version: 3.8.5 - Softpointer Inc)

TagScanner 5.1.661 (HKLM-x32\...\TagScanner_is1) (Version: - Sergey Serkov)

VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)

WinRAR 5.11 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-2950901286-4018632002-2551131573-1000_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\1\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll No File

CustomCLSID: HKU\S-1-5-21-2950901286-4018632002-2551131573-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\1\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll No File

==================== Restore Points =========================

24-01-2015 09:11:34 Windows Update

25-01-2015 19:00:13 Windows Backup

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 09:34 - 2014-11-26 10:17 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {0EBA6E18-CCCA-43B1-9162-8CC8743D4E8E} - System32\Tasks\{C2CCDABC-907F-40BE-A622-8E7F7712258D} => pcalua.exe -a "C:\Program Files (x86)\Common Files\Bitdefender\setupinformation\setuplauncher.exe" -d "C:\Program Files (x86)\Common Files\Bitdefender\setupinformation"

Task: {445E0D0D-7324-41B5-9E4C-C5055AE8158F} - System32\Tasks\{BC88C845-F8C2-4403-9EFA-80998AF77332} => pcalua.exe -a C:\Users\1\Downloads\Install_CopyTransControlCenter.exe -d C:\Users\1\Downloads

Task: {5BCD8E1F-77AE-41FA-9529-AB96ABC73C7A} - System32\Tasks\AdobeAAMUpdater-1.0-1-PC-1 => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2014-10-14] (Adobe Systems Incorporated)

Task: {60FD4C92-2073-4E71-878C-448A850295B9} - System32\Tasks\RunAsStdUser Task for VeohWebPlayer => C:\Program Files (x86)\Veoh Networks\VeohWebPlayer\veohwebplayer.exe

Task: {66E80760-1CF2-440F-B667-FE64AB49FC26} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {713FE722-8A68-4255-BCFB-F0FC0122021B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-01-15] (Google Inc.)

Task: {7D1C11A3-FF17-488B-8BAF-07ECF78D8B29} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-01-24] (Adobe Systems Incorporated)

Task: {B48B903E-F060-4F40-9332-F6C54C04B33E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-01-15] (Google Inc.)

Task: {CF0C3220-AD3A-489C-BF20-AA4ABDCAA08A} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-10-30] (Piriform Ltd)

Task: {F463718A-328C-4B06-80AF-65F45AFC8BC7} - System32\Tasks\{ECD50EF7-7F56-4682-827F-0C7763B2340D} => pcalua.exe -a "C:\Program Files (x86)\Xilisoft\iPhone Contacts Backup\Uninstall.exe"

Task: {F950A615-B8A1-4BE8-9594-84E3F5697AAD} - System32\Tasks\Apple Diagnostics => C:\Program Files (x86)\Common Files\Apple\Internet Services\EReporter.exe [2014-12-01] (Apple Inc.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2014-11-11 22:24 - 2014-07-03 01:55 - 00116568 ____C () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2014-09-26 14:41 - 2014-09-26 14:41 - 01021088 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll

2014-01-10 12:26 - 2014-01-10 12:26 - 01861968 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

2014-09-26 14:40 - 2014-09-26 14:40 - 06237856 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe

2015-01-22 16:12 - 2015-01-21 10:41 - 10864456 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.91\pdf.dll

2015-01-25 22:52 - 2015-01-19 14:02 - 03478016 _____ () C:\Program Files (x86)\TagScanner\Tagscan.exe

2014-10-11 13:06 - 2014-10-11 13:06 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll

2014-10-11 13:05 - 2014-10-11 13:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll

2015-01-12 23:23 - 2015-01-12 23:23 - 00032256 _____ () C:\Program Files (x86)\Spotflux\services\SpotfluxFilterLib.dll

2014-09-28 21:01 - 2014-09-28 21:01 - 36730032 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CEF\libcef.dll

2014-01-10 12:28 - 2014-01-10 12:28 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\16798034.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\33000422.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\16798034.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\33000422.sys => ""="Driver"

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

========================= Accounts: ==========================

1 (S-1-5-21-2950901286-4018632002-2551131573-1000 - Administrator - Enabled) => C:\Users\1

Administrator (S-1-5-21-2950901286-4018632002-2551131573-500 - Administrator - Disabled)

Guest (S-1-5-21-2950901286-4018632002-2551131573-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-2950901286-4018632002-2551131573-1004 - Limited - Enabled)

polda only (S-1-5-21-2950901286-4018632002-2551131573-1006 - Limited - Enabled) => C:\Users\polda only

==================== Faulty Device Manager Devices =============

Name: Microsoft ISATAP Adapter

Description: Microsoft ISATAP Adapter

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: tunnel

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Microsoft ISATAP Adapter #2

Description: Microsoft ISATAP Adapter

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: tunnel

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Teredo Tunneling Pseudo-Interface

Description: Microsoft Teredo Tunneling Adapter

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: tunnel

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Spotflux Virtual Network Device Driver

Description: Spotflux Virtual Network Device Driver

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Spotflux, Inc.

Service: tapSF0901

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

==================== Event log errors: =========================

Application errors:

==================

Error: (01/26/2015 00:43:52 AM) (Source: SideBySide) (EventID: 63) (User: )

Description: Activation context generation failed for "assemblyIdentity1".Error in manifest or policy file "assemblyIdentity2" on line assemblyIdentity3.

The value "*" of attribute "language" in element "assemblyIdentity" is invalid.

Error: (01/26/2015 00:43:07 AM) (Source: SideBySide) (EventID: 80) (User: )

Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

A component version required by the application conflicts with another component version already active.

Conflicting components are:.

Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (01/26/2015 00:42:54 AM) (Source: SideBySide) (EventID: 80) (User: )

Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" on line C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.

A component version required by the application conflicts with another component version already active.

Conflicting components are:.

Component 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Component 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (01/25/2015 06:45:47 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/25/2015 06:34:33 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/25/2015 10:23:40 AM) (Source: SideBySide) (EventID: 80) (User: )

Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

A component version required by the application conflicts with another component version already active.

Conflicting components are:.

Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (01/25/2015 10:23:38 AM) (Source: SideBySide) (EventID: 80) (User: )

Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

A component version required by the application conflicts with another component version already active.

Conflicting components are:.

Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (01/25/2015 10:23:38 AM) (Source: SideBySide) (EventID: 80) (User: )

Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

A component version required by the application conflicts with another component version already active.

Conflicting components are:.

Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (01/25/2015 10:00:11 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/25/2015 09:47:15 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

System errors:

=============

Error: (01/25/2015 06:45:50 PM) (Source: Service Control Manager) (EventID: 7026) (User: )

Description: The following boot-start or system-start driver(s) failed to load:

UsbCharger

Error: (01/25/2015 06:34:37 PM) (Source: Service Control Manager) (EventID: 7026) (User: )

Description: The following boot-start or system-start driver(s) failed to load:

UsbCharger

Error: (01/25/2015 10:00:12 AM) (Source: Service Control Manager) (EventID: 7026) (User: )

Description: The following boot-start or system-start driver(s) failed to load:

UsbCharger

Error: (01/25/2015 09:47:19 AM) (Source: Service Control Manager) (EventID: 7026) (User: )

Description: The following boot-start or system-start driver(s) failed to load:

UsbCharger

Error: (01/25/2015 09:37:36 AM) (Source: Service Control Manager) (EventID: 7026) (User: )

Description: The following boot-start or system-start driver(s) failed to load:

UsbCharger

Error: (01/24/2015 02:14:18 PM) (Source: Service Control Manager) (EventID: 7026) (User: )

Description: The following boot-start or system-start driver(s) failed to load:

UsbCharger

Error: (01/24/2015 10:05:06 AM) (Source: cdrom) (EventID: 7) (User: )

Description: The device, \Device\CdRom0, has a bad block.

Error: (01/24/2015 10:04:59 AM) (Source: cdrom) (EventID: 7) (User: )

Description: The device, \Device\CdRom0, has a bad block.

Error: (01/24/2015 10:04:56 AM) (Source: cdrom) (EventID: 7) (User: )

Description: The device, \Device\CdRom0, has a bad block.

Error: (01/24/2015 10:03:49 AM) (Source: cdrom) (EventID: 7) (User: )

Description: The device, \Device\CdRom0, has a bad block.

Microsoft Office Sessions:

=========================

Error: (01/26/2015 00:43:52 AM) (Source: SideBySide) (EventID: 63) (User: )

Description: assemblyIdentitylanguage*c:\program files (x86)\spybot - search & destroy\DelZip179.dllc:\program files (x86)\spybot - search & destroy\DelZip179.dll8

Error: (01/26/2015 00:43:07 AM) (Source: SideBySide) (EventID: 80) (User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\program files (x86)\ESET\eset online scanner\ESETSmartInstaller.exe

Error: (01/26/2015 00:42:54 AM) (Source: SideBySide) (EventID: 80) (User: )

Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestc:\program files (x86)\Adobe\adobe creative cloud\Utils\Creative Cloud Uninstaller.exe

Error: (01/25/2015 06:45:47 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/25/2015 06:34:33 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/25/2015 10:23:40 AM) (Source: SideBySide) (EventID: 80) (User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\1\Desktop\psychotic\esetsmartinstaller_enu.exe