unisales extension in google, running crazy farbar included

jfzoom · February 21, 2015

Hey guys, Im having problems with this "unisales" extension in google chrome. Malware doesnt seem to pick it up, and its getting worse, Ive seen people post this before but heres my farbar recovery notes

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 18-02-2015 01

Ran by sl4m at 2015-02-21 03:43:49

Running from E:\Users\SL4M

Boot Mode: Normal

==========================================================

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)

7-Zip 9.22beta (HKLM-x32\...\7-Zip) (Version: - )

8BitMMO (HKLM-x32\...\Steam App 250420) (Version: - Archive Entertainment)

A Story About My Uncle (HKLM-x32\...\Steam App 278360) (Version: - Gone North Games)

Adobe Digital Editions 3.0 (HKLM-x32\...\Adobe Digital Editions 3.0) (Version: 3.0.1 - Adobe Systems Incorporated)

Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)

Advanced System Protector (HKLM-x32\...\00212D92-C5D8-4ff4-AE50-B20F0F85C40A_Systweak_Ad~B9F029BF_is1) (Version: 2.1.1000.12594 - Systweak Software) <==== ATTENTION

Alien: Isolation (HKLM-x32\...\Steam App 214490) (Version: - Creative Assembly)

Amazon Kindle (HKU\S-1-5-21-3453346665-2812312322-410619398-1001\...\Amazon Kindle) (Version: - Amazon)

Another World (HKLM-x32\...\Steam App 233550) (Version: - Eric Chahi)

ArcheAge (HKLM-x32\...\Steam App 304030) (Version: - XLGAMES)

Baldur's Gate II: Enhanced Edition (HKLM-x32\...\Steam App 257350) (Version: - Beamdog)

Baldur's Gate: Enhanced Edition (HKLM-x32\...\Steam App 228280) (Version: - Beamdog)

Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)

bit Dungeon II (HKLM-x32\...\Steam App 331440) (Version: - KintoGames)

BitRaider Web Client (HKLM-x32\...\BitRaider Web Client) (Version: 1.1.9.9 - BitRaider, LLC)

BitTorrent (HKU\S-1-5-21-3453346665-2812312322-410619398-1001\...\BitTorrent) (Version: 7.9.0.30659 - BitTorrent Inc.)

Blitz Media Player - a modern video player (HKLM-x32\...\Blitz Media Player) (Version: 1.0 - Jenkat Media, Inc)

BlueStacks App Player (HKLM-x32\...\BlueStacks App Player) (Version: 0.9.4.4078 - BlueStack Systems, Inc.)

BlueStacks Notification Center (HKLM-x32\...\{152E0B21-19D5-4772-9EF8-8E76074B0C0A}) (Version: 0.9.4.4078 - BlueStack Systems, Inc.)

Breath of Death VII (HKLM-x32\...\Steam App 107300) (Version: - Zeboyd Games)

Broken Age (HKLM-x32\...\Steam App 232790) (Version: - Double Fine Productions)

Call of Cthulhu: The Wasted Land (HKLM-x32\...\Steam App 251390) (Version: - Red Wasp Design Ltd)

Castlevania: Lords of Shadow - Ultimate Edition (HKLM-x32\...\Steam App 234080) (Version: - MercurySteam - Climax Studios)

Castlevania: Lords of Shadow 2 Demo (HKLM-x32\...\Steam App 273130) (Version: - MercurySteam)

Chasm (HKLM-x32\...\Steam App 312200) (Version: - Discord Games, Inc.)

City of Steam: Arkadia (HKLM-x32\...\Steam App 266070) (Version: - Mechanist Games)

Crawl (HKLM-x32\...\Steam App 293780) (Version: - Powerhoof)

Cthulhu Saves the World (HKLM-x32\...\Steam App 107310) (Version: - Zeboyd Games)

Curse Client (HKU\S-1-5-21-3453346665-2812312322-410619398-1001\...\101a9f93b8f0bb6f) (Version: 5.1.1.820 - Curse)

DARK SOULS™ II (HKLM-x32\...\Steam App 236430) (Version: - FromSoftware, Inc)

Darkest Dungeon (HKLM-x32\...\Steam App 262060) (Version: - Red Hook Studios)

Darwinia (HKLM-x32\...\Steam App 1500) (Version: - Introversion Software)

Dawngate (HKLM-x32\...\{1330926C-251C-414E-A681-F8CEF84899BC}) (Version: 182.23.92.0 - Electronic Arts, Inc.)

DEFCON (HKLM-x32\...\Steam App 1520) (Version: - Introversion Software)

Delver (HKLM-x32\...\Steam App 249630) (Version: - Priority Interrupt)

Diablo III (HKLM-x32\...\Diablo III) (Version: - Blizzard Entertainment)

Diablo III Beta (HKLM-x32\...\Diablo III Beta) (Version: - Blizzard Entertainment)

Diehard Dungeon (HKLM-x32\...\Steam App 277870) (Version: - Tricktale)

Dishonored (HKLM-x32\...\Steam App 205100) (Version: 1.0 - Bethesda Softworks)

Dota 2 (HKLM-x32\...\Steam App 570) (Version: - Valve)

Dragon Age: Origins - Ultimate Edition (HKLM-x32\...\Steam App 47810) (Version: - BioWare)

Dragon Nest (HKLM-x32\...\Steam App 11610) (Version: - Eyedentity Games Inc.)

Eldritch (HKLM-x32\...\Steam App 252630) (Version: - Minor Key Games)

Epigenesis (HKLM-x32\...\Steam App 244590) (Version: - Dead Shark Triplepunch)

EVE Online (remove only) (HKLM-x32\...\EVE) (Version: - CCP Games Ltd.)

EverQuest Next Landmark (HKU\S-1-5-21-3453346665-2812312322-410619398-1001\...\SOE-EverQuest Next Landmark) (Version: 1.0.3.183 - Sony Online Entertainment)

EZDownloader (HKLM-x32\...\{0F44DC3A-6E62-4961-A14B-95323C512F9B}_is1) (Version: 1.0 - EZDownloader) <==== ATTENTION

Fallen Earth (HKLM-x32\...\Steam App 113420) (Version: - Reloaded Productions)

Fallout 2 (HKLM-x32\...\GOGPACKFALLOUT2_is1) (Version: 2.0.0.12 - GOG.com)

Fallout Mod Manager 0.13.21 (HKLM-x32\...\Generic Mod Manager_is1) (Version: - Q, Timeslip)

Fallout: New Vegas (HKLM-x32\...\Steam App 22380) (Version: - Obsidian Entertainment)

FileASSASSIN (HKLM-x32\...\FileASSASSIN) (Version: 1.06 - Malwarebytes)

FINAL FANTASY XIV - A Realm Reborn (HKLM-x32\...\{2B41E132-07DF-4925-A3D3-F2D1765CCDFE}) (Version: 1.0.0000 - SQUARE ENIX CO., LTD.)

Firefall (HKLM-x32\...\Steam App 227700) (Version: - Red 5 Studios)

Fraps (HKLM-x32\...\Fraps) (Version: - )

GOG.com Downloader version 3.6.0 (HKLM-x32\...\{456A5815-604D-4D72-94DF-346D2B978A59}_is1) (Version: 3.6.0 - GOG.com)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 40.0.2214.115 - Google Inc.)

Google Talk Plugin (HKLM-x32\...\{0C5C1177-94C5-3EFB-A8BE-3F6AF1AF887F}) (Version: 5.38.6.0 - Google)

Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden

Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden

Hack 'n' Slash (HKLM-x32\...\Steam App 246070) (Version: - Double Fine Productions)

Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment)

Heroine's Quest: The Herald of Ragnarok (HKLM-x32\...\Steam App 283880) (Version: - Crystal Shard)

Hoopla (HKLM-x32\...\{2B7BDADB-EC8C-4C54-B5DD-CE45A016D3A7}) (Version: - Exent Technologies Ltd) <==== ATTENTION

How to Survive (HKLM-x32\...\Steam App 250400) (Version: - )

Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.0.10.1372 - Intel Corporation)

Intel® Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.0.0.1083 - Intel Corporation)

Intel® Update Manager (HKLM-x32\...\{12914061-EB9B-4AE7-AC7E-0B8A607C7DF4}) (Version: 2.3.1338 - Intel Corporation)

Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)

Killer is Dead (HKLM-x32\...\Steam App 261110) (Version: - KADOKAWA GAMES / GRASSHOPPER MANUFACTURE)

Knights of Pen and Paper +1 (HKLM-x32\...\Steam App 231740) (Version: - Behold Studios)

Lichdom: Battlemage (HKLM-x32\...\Steam App 261760) (Version: - Xaviant)

LinkiDoo (HKLM\...\LinkiDoo) (Version: 2014.03.13.163811 - LinkiDoo) <==== ATTENTION

LISA (HKLM-x32\...\Steam App 335670) (Version: - Dingaling)

Magicka (HKLM-x32\...\Steam App 42910) (Version: - Arrowhead Game Studios)

Malwarebytes Anti-Exploit version 0.10.0.1000 (HKLM\...\Malwarebytes Anti-Exploit_is1) (Version: 0.10.0.1000 - Malwarebytes)

Malwarebytes Anti-Malware version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)

Mars: War Logs (HKLM-x32\...\Steam App 232750) (Version: - Spiders)

McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)

METAL GEAR RISING: REVENGEANCE (HKLM-x32\...\Steam App 235460) (Version: - PlatinumGames)

Metro: Last Light (HKLM-x32\...\Steam App 43160) (Version: - 4A Games)

Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)

Microsoft Office 365 - en-us (HKLM\...\O365HomePremRetail - en-us) (Version: 15.0.4675.1003 - Microsoft Corporation)

Microsoft OneDrive (HKU\S-1-5-21-3453346665-2812312322-410619398-1001\...\OneDriveSetup.exe) (Version: 17.3.1229.0918 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{D9C50188-12D5-4D3E-8F00-682346C2AA5F}) (Version: 1.20.146.0 - Microsoft)

Microsoft Xbox One Controller for Windows (HKLM\...\{DC2CB48C-FD96-48EB-A36A-7D995BB587EB}) (Version: 1.0.2 - Microsoft Corporation)

Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)

Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)

Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)

MikesBikes-Advanced (HKLM-x32\...\MikesBikes-Advanced) (Version: 6.80.00.22 - SmartSims International Ltd)

Mobogenie (HKLM-x32\...\Mobogenie) (Version: - Mobogenie.com) <==== ATTENTION

Mozilla Firefox 31.0 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 31.0 (x86 en-US)) (Version: 31.0 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)

Multiwinia (HKLM-x32\...\Steam App 1530) (Version: - Introversion Software)

Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.52.3 - Black Tree Gaming)

Nihilumbra (HKLM-x32\...\Steam App 252670) (Version: - Beautifun Games)

Nosgoth (HKLM-x32\...\Steam App 200110) (Version: 140519.84439 - Square Enix Ltd)

NVIDIA 3D Vision Controller Driver 340.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 340.50 - NVIDIA Corporation)

NVIDIA 3D Vision Driver 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 340.52 - NVIDIA Corporation)

NVIDIA GeForce Experience 2.1.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.5 - NVIDIA Corporation)

NVIDIA Graphics Driver 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 340.52 - NVIDIA Corporation)

NVIDIA HD Audio Driver 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)

NVIDIA PhysX System Software 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)

Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4675.1003 - Microsoft Corporation) Hidden

Office 15 Click-to-Run Licensing Component (Version: 15.0.4675.1003 - Microsoft Corporation) Hidden

Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4675.1003 - Microsoft Corporation) Hidden

OpenAL (HKLM-x32\...\OpenAL) (Version: - )

Papers, Please (HKLM-x32\...\Steam App 239030) (Version: - 3909)

Penny Arcade's On the Rain-Slick Precipice of Darkness 4 (HKLM-x32\...\Steam App 237570) (Version: - Zeboyd Games)

Pixel Piracy (HKLM-x32\...\Steam App 264140) (Version: - Vitali Kirpu)

Prison Architect (HKLM-x32\...\Steam App 233450) (Version: - Introversion Software)

QuickTime (HKLM-x32\...\{B67BAFBA-4C9F-48FA-9496-933E3B255044}) (Version: 7.74.80.86 - Apple Inc.)

Ragnarok Online 2 (HKLM-x32\...\Steam App 231060) (Version: - Gravity, Inc.)

Razer Synapse 2.0 (HKLM-x32\...\{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}) (Version: 1.16.6.18562 - Razer Inc.)

Realm of the Mad God (HKLM-x32\...\Steam App 200210) (Version: - Wild Shadow Studios)

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.7.1025.2012 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6914 - Realtek Semiconductor Corp.)

RegClean Pro (HKLM-x32\...\RegClean Pro_is1) (Version: 6.21 - Systweak Inc) <==== ATTENTION

Rogue Legacy (HKLM-x32\...\Steam App 241600) (Version: - Cellar Door Games)

RPG Maker VX Ace (HKLM-x32\...\Steam App 220700) (Version: - Enterbrain)

Septerra Core (HKLM-x32\...\Steam App 253940) (Version: - )

Shadowrun Returns (HKLM-x32\...\Steam App 234650) (Version: - Harebrained Schemes)

Shadowrun: Dragonfall - Director's Cut (HKLM-x32\...\Steam App 300550) (Version: - Harebrained Schemes)

SHIELD Streaming (Version: 3.1.3000 - NVIDIA Corporation) Hidden

SHIELD Wireless Controller Driver (Version: 16.18.9 - NVIDIA Corporation) Hidden

Sins of a Dark Age (HKLM-x32\...\Steam App 251970) (Version: - Ironclad Games)

Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)

Skype™ 6.18 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.18.106 - Skype Technologies S.A.)

Spacebase DF-9 (HKLM-x32\...\Steam App 246090) (Version: - Double Fine Productions)

Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.2.25 - Safer-Networking Ltd.)

Star Wars The Old Republic (HKLM-x32\...\swtor_swtor) (Version: 7.0.0.31 - Bioware/EA)

Star Wars: Knights of the Old Republic (HKLM-x32\...\Steam App 32370) (Version: - BioWare)

Star Wars: Knights of the Old Republic II (HKLM-x32\...\Steam App 208580) (Version: - Obsidian Entertainment)

Star Wars: The Old Republic (HKLM-x32\...\{3B11D799-48E0-48ED-BFD7-EA655676D8BB}) (Version: 1.00 - Electronic Arts, Inc.)

Starbound (HKLM-x32\...\Steam App 211820) (Version: - )

Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation)

Superbrothers: Sword & Sworcery EP (HKLM-x32\...\Steam App 204060) (Version: - Capybara)

Terraria (HKLM-x32\...\Steam App 105600) (Version: - Re-Logic)

The Bureau: XCOM Declassified (HKLM-x32\...\Steam App 65930) (Version: - 2K Marin)

The Elder Scrolls III: Morrowind (HKLM-x32\...\Steam App 22320) (Version: - Bethesda Game Studios®)

The Elder Scrolls Online Beta (HKLM-x32\...\The Elder Scrolls Online Beta_is1) (Version: 0.3.4 - )

The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version: - Bethesda Game Studios)

The Evil Within (HKLM-x32\...\Steam App 268050) (Version: - Tango Gameworks)

The Mighty Quest For Epic Loot (HKLM-x32\...\Steam App 239220) (Version: - Ubisoft Montreal)

The Realm Online (HKLM-x32\...\{A07594BF-67FD-4015-BD84-EE84269E931F}) (Version: 3.248 - Norseman Games)

The Stanley Parable (HKLM-x32\...\Steam App 221910) (Version: - Galactic Cafe)

Titan Quest (HKLM-x32\...\Steam App 4540) (Version: - Iron Lore Entertainment)

Transistor (HKLM-x32\...\Steam App 237930) (Version: - Supergiant Games)

Tropico 4 (HKLM-x32\...\Steam App 57690) (Version: - Haemimont Games)

Unepic (HKLM-x32\...\Steam App 233980) (Version: - Francisco Téllez de Meneses)

unisaleis (HKLM-x32\...\{4CEE92A3-9F0C-51AB-ADC0-34EC24AD7B7E}) (Version: - ) <==== ATTENTION

Uplink (HKLM-x32\...\Steam App 1510) (Version: - Introversion Software)

Valdis Story: Abyssal City (HKLM-x32\...\Steam App 252030) (Version: - )

ValueApps (HKU\S-1-5-21-3453346665-2812312322-410619398-1001\...\ValueApps) (Version: 1.4.0.3 - Conduit) <==== ATTENTION

Vuze (HKLM-x32\...\8461-7759-5462-8226) (Version: 5.3.0.0 - Azureus Software, Inc.)

Vuze Remote Toolbar v9.3 (HKLM-x32\...\{44C0EC7E-CF09-4569-B34B-0A9347D72596}) (Version: 9.3 - Spigot, Inc.) <==== ATTENTION

Wakfu (HKLM-x32\...\Steam App 215080) (Version: - Ankama)

Wasteland 2 (HKLM-x32\...\Steam App 240760) (Version: - inXile Entertainment)

WildStar (HKLM-x32\...\WildStar) (Version: - NCSOFT)

WildStarPTR (HKLM-x32\...\WildStarPTR) (Version: - NCSOFT)

World of Warcraft (HKLM-x32\...\World of Warcraft) (Version: - Blizzard Entertainment)

Xiph.Org Open Codecs 0.85.17777 (HKLM-x32\...\Open Codecs) (Version: 0.85.17777 - Xiph.Org)

Xpadder version 5.7 (HKLM-x32\...\{0DCE54A9-7256-4132-9D4E-1A64AE35E9B1}_is1) (Version: 5.7 - Xpadder, Inc.)

Ys II (HKLM-x32\...\Steam App 223870) (Version: - Nihon Falcom)

Zeno Clash (HKLM-x32\...\Steam App 22200) (Version: - ACE Team)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-3453346665-2812312322-410619398-1001_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\sl4m\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll No File

CustomCLSID: HKU\S-1-5-21-3453346665-2812312322-410619398-1001_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\sl4m\AppData\Local\Google\Update\1.3.23.9\psuser_64.dll No File

CustomCLSID: HKU\S-1-5-21-3453346665-2812312322-410619398-1001_Classes\CLSID\{412f6242-626b-4539-9f01-ff8a027ce827}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-3453346665-2812312322-410619398-1001_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\sl4m\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll No File

CustomCLSID: HKU\S-1-5-21-3453346665-2812312322-410619398-1001_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\sl4m\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll (Google Inc.)

CustomCLSID: HKU\S-1-5-21-3453346665-2812312322-410619398-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\sl4m\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll (Google Inc.)

CustomCLSID: HKU\S-1-5-21-3453346665-2812312322-410619398-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\sl4m\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\amd64\FileSyncApi64.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-3453346665-2812312322-410619398-1001_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\sl4m\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll No File

==================== Restore Points =========================

31-12-2014 04:24:33 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005

11-01-2015 04:44:54 Installed DirectX

07-02-2015 04:06:31 Installed DirectX

09-02-2015 10:38:56 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {04088C92-ABAB-410F-BBB8-5CFBD6272929} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3453346665-2812312322-410619398-1001Core => C:\Users\sl4m\AppData\Local\Google\Update\GoogleUpdate.exe [2014-02-09] (Google Inc.)

Task: {0FC96416-B445-4CEF-860C-1D3242A77DEE} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe

Task: {18F8DC67-E68D-4683-948A-D482594D7E26} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2014-11-04] (Microsoft Corporation)

Task: {1CC98273-E321-494E-89F1-825B2F848112} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2014-11-11] (Microsoft Corporation)

Task: {2EA2487A-09BF-4ACB-AE5A-B0B85F6FA3FE} - \Advanced System Protector_startup No Task File <==== ATTENTION

Task: {386BA6FA-1AEB-45EC-826A-CD5347FECCB8} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-03-11] (Google Inc.)

Task: {3E44A334-BD12-4C1A-A61B-29445F7F25D7} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel® Update Manager\bin\iumsvc.exe [2014-02-28] ()

Task: {462CAB36-46C9-4F28-A8A1-E229B16A7244} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe

Task: {4F4401A1-5D21-427A-A25A-ED03DDF31B10} - System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-3453346665-2812312322-410619398-1001 => %localappdata%\Microsoft\SkyDrive\SkyDrive.exe

Task: {574CB0FB-4A3A-4AED-B502-91EB31B4CB34} - System32\Tasks\GC_Scheduler => %LOCALAPPDATA%\GCC\Controller.exe <==== ATTENTION

Task: {59B81986-4449-4ACA-A223-7B04EA65E7E4} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-03-11] (Google Inc.)

Task: {63268F4B-AF25-4239-ACA9-704058EB0AE1} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel® Update Manager\bin\iumsvc.exe [2014-02-28] ()

Task: {7A659B35-EF61-41DC-AAD7-6484D3B054E2} - System32\Tasks\Microsoft Office 15 Sync Maintenance for DEEPW-sl4m DeepW => C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe [2014-11-04] (Microsoft Corporation)

Task: {7C5FDB4F-7C4F-4DE8-8B3A-BB0C80394825} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-01-14] (Microsoft Corporation)

Task: {8654AB70-28D0-41A4-B605-E3FC472A9BEF} - System32\Tasks\GC_Informer => %LOCALAPPDATA%\GCC\Controller.exe <==== ATTENTION

Task: {8F3C3F37-19A5-4B6C-86B6-F02C6DAE85D6} - \RegClean Pro No Task File <==== ATTENTION

Task: {B2D45313-99B8-4CB3-A8B8-8B4DB118FDD5} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3453346665-2812312322-410619398-1001UA => C:\Users\sl4m\AppData\Local\Google\Update\GoogleUpdate.exe [2014-02-09] (Google Inc.)

Task: {CBFFA42F-3211-4D67-9FED-5EDBDA93055E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-04] (Adobe Systems Incorporated)

Task: {EED92F05-22D4-4171-B671-6F2C24B38CD1} - System32\Tasks\Advanced System Protector => C:\Program Files (x86)\RegClean Pro\SystweakASP.exe <==== ATTENTION

Task: {F02AC8B4-C75F-4064-A96C-459FD20FCFAB} - System32\Tasks\Microsoft\Windows\Maintenance\UP_Scheduler => %LOCALAPPDATA%\GCC\Controller.exe <==== ATTENTION

Task: {FF81FBD5-2921-4B6A-953F-E1EC9D00C35E} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3453346665-2812312322-410619398-1001Core.job => C:\Users\sl4m\AppData\Local\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3453346665-2812312322-410619398-1001UA.job => C:\Users\sl4m\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) ==============

2014-03-10 17:16 - 2014-05-20 08:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll

2014-02-03 04:13 - 2014-07-02 13:55 - 00116568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2014-11-23 05:43 - 2014-09-23 08:36 - 08897696 _____ () C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\1033\GrooveIntlResource.dll

2014-03-19 08:28 - 2012-08-23 09:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll

2014-03-19 08:28 - 2013-05-16 09:55 - 00113496 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl

2014-03-19 08:28 - 2013-05-16 09:55 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl

2014-03-19 08:28 - 2013-05-16 09:55 - 00161112 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl

2014-03-19 08:28 - 2012-04-03 16:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll

2014-02-03 04:32 - 2013-05-16 19:06 - 01199576 _____ () C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\ACE.dll

2014-11-23 05:43 - 2014-11-23 05:43 - 00316576 _____ () C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\AppVIsvStream32.dll

2014-12-02 09:00 - 2014-11-11 13:47 - 00774656 _____ () E:\Steam\SDL2.dll

2015-02-10 17:12 - 2014-12-01 19:29 - 05002752 _____ () E:\Steam\v8.dll

2015-02-18 23:37 - 2015-02-18 18:51 - 02360000 _____ () E:\Steam\video.dll

2015-02-10 17:12 - 2014-12-01 19:29 - 01612800 _____ () E:\Steam\icui18n.dll

2015-02-10 17:12 - 2014-12-01 19:29 - 01210368 _____ () E:\Steam\icuuc.dll

2015-02-10 17:12 - 2014-12-01 16:31 - 02396672 _____ () E:\Steam\libavcodec-56.dll

2015-02-10 17:12 - 2014-12-01 16:31 - 00479744 _____ () E:\Steam\libavformat-56.dll

2015-02-10 17:12 - 2014-12-01 16:31 - 00332800 _____ () E:\Steam\libavresample-2.dll

2015-02-10 17:12 - 2014-12-01 16:31 - 00442880 _____ () E:\Steam\libavutil-54.dll

2015-02-10 17:12 - 2014-12-01 16:31 - 00485888 _____ () E:\Steam\libswscale-3.dll

2015-02-18 23:37 - 2015-02-18 18:51 - 00702656 _____ () E:\Steam\bin\chromehtml.DLL

2015-02-18 23:37 - 2015-01-27 20:30 - 34641288 _____ () E:\Steam\bin\libcef.dll

2015-02-18 23:37 - 2015-01-27 20:30 - 01709960 _____ () E:\Steam\bin\ffmpegsumo.dll

2015-02-19 16:39 - 2015-02-17 17:44 - 01117512 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.115\libglesv2.dll

2015-02-19 16:39 - 2015-02-17 17:44 - 00211272 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.115\libegl.dll

2015-02-19 16:39 - 2015-02-17 17:44 - 09171272 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.115\pdf.dll

2015-02-19 16:39 - 2015-02-17 17:44 - 14965064 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.115\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Users\sl4m\SkyDrive:ms-properties

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3453346665-2812312322-410619398-1001\Control Panel\Desktop\\Wallpaper ->

DNS Servers: 192.168.1.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3453346665-2812312322-410619398-1001\...\StartupApproved\StartupFolder: => "CurseClientStartup.ccip"

HKU\S-1-5-21-3453346665-2812312322-410619398-1001\...\StartupApproved\Run: => "BitTorrent"

==================== Accounts: =============================

Administrator (S-1-5-21-3453346665-2812312322-410619398-500 - Administrator - Disabled)

Guest (S-1-5-21-3453346665-2812312322-410619398-501 - Limited - Disabled)

sl4m (S-1-5-21-3453346665-2812312322-410619398-1001 - Administrator - Enabled) => C:\Users\sl4m

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:

==================

Error: (02/20/2015 03:04:25 AM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )

Description: The volume System Reserved was not optimized because an error was encountered: The parameter is incorrect. (0x80070057)

Error: (02/19/2015 03:48:19 AM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )

Description: The volume System Reserved was not optimized because an error was encountered: The parameter is incorrect. (0x80070057)

Error: (02/18/2015 01:51:08 AM) (Source: Application Hang) (EventID: 1002) (User: )

Description: The program Skype.exe version 6.18.0.106 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 5c88

Start Time: 01d0442ec37386ca

Termination Time: 4294967295

Application Path: C:\Program Files (x86)\Skype\Phone\Skype.exe

Report Id: 829074db-b73a-11e4-8282-b8975a6ac550

Faulting package full name:

Faulting package-relative application ID:

Error: (02/13/2015 04:58:06 AM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )

Description: The volume System Reserved was not optimized because an error was encountered: The parameter is incorrect. (0x80070057)

Error: (02/12/2015 05:21:53 AM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )

Description: The volume System Reserved was not optimized because an error was encountered: The parameter is incorrect. (0x80070057)

Error: (02/12/2015 05:00:45 AM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )

Description: The volume System Reserved was not optimized because an error was encountered: The parameter is incorrect. (0x80070057)

Error: (02/12/2015 04:40:24 AM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )

Description: The volume System Reserved was not optimized because an error was encountered: The parameter is incorrect. (0x80070057)

Error: (02/12/2015 04:26:31 AM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )

Description: The volume System Reserved was not optimized because an error was encountered: The parameter is incorrect. (0x80070057)

Error: (02/12/2015 03:38:49 AM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )

Description: The volume System Reserved was not optimized because an error was encountered: The parameter is incorrect. (0x80070057)

Error: (02/12/2015 03:09:56 AM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )

Description: The volume System Reserved was not optimized because an error was encountered: The parameter is incorrect. (0x80070057)

System errors:

=============

Error: (02/21/2015 03:32:53 AM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT AUTHORITY)

Description: There was an error while attempting to read the local hosts file.

Error: (02/21/2015 03:14:26 AM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT AUTHORITY)

Description: There was an error while attempting to read the local hosts file.

Error: (02/21/2015 01:47:56 AM) (Source: DCOM) (EventID: 10029) (User: NT AUTHORITY)

Description: {E60687F7-01A1-40AA-86AC-DB1CBF673334}wuauserv

Error: (02/21/2015 01:43:54 AM) (Source: DCOM) (EventID: 10029) (User: NT AUTHORITY)

Description: {E60687F7-01A1-40AA-86AC-DB1CBF673334}wuauserv

Error: (02/20/2015 11:27:30 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT AUTHORITY)

Description: There was an error while attempting to read the local hosts file.

Error: (02/20/2015 07:43:10 PM) (Source: DCOM) (EventID: 10029) (User: NT AUTHORITY)

Description: {E60687F7-01A1-40AA-86AC-DB1CBF673334}wuauserv

Error: (02/20/2015 07:39:09 PM) (Source: DCOM) (EventID: 10029) (User: NT AUTHORITY)

Description: {E60687F7-01A1-40AA-86AC-DB1CBF673334}wuauserv

Error: (02/20/2015 07:14:41 PM) (Source: DCOM) (EventID: 10029) (User: NT AUTHORITY)

Description: {E60687F7-01A1-40AA-86AC-DB1CBF673334}wuauserv

Error: (02/20/2015 07:10:40 PM) (Source: DCOM) (EventID: 10029) (User: NT AUTHORITY)

Description: {E60687F7-01A1-40AA-86AC-DB1CBF673334}wuauserv

Error: (02/20/2015 10:18:34 AM) (Source: DCOM) (EventID: 10029) (User: NT AUTHORITY)

Description: {E60687F7-01A1-40AA-86AC-DB1CBF673334}wuauserv

Microsoft Office Sessions:

=========================

Error: (02/20/2015 03:04:25 AM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )

Description: System ReservedThe parameter is incorrect. (0x80070057)

Error: (02/19/2015 03:48:19 AM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )

Description: System ReservedThe parameter is incorrect. (0x80070057)

Error: (02/18/2015 01:51:08 AM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Skype.exe6.18.0.1065c8801d0442ec37386ca4294967295C:\Program Files (x86)\Skype\Phone\Skype.exe829074db-b73a-11e4-8282-b8975a6ac550