Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Connected to net but cant not dl win updates connect to autolog and ma

Started by waynegr , Aug 21 2011 06:53 PM

  • This topic is locked This topic is locked

#1
waynegr
Posted 21 August 2011 - 06:53 PM

waynegr

    Member

  • Member
  • PipPipPip
  • 194 posts
Hi all, and thx for your time and help in advance.

I started DL free antivirus Avira, internet connection seemed to stop, before this, and without uninstalling, too which I have done now, I was on pay Kaspersky, but thought it was just cos I was DLing the program, it DLed, but still could not connect, so I got rid of it, but still could not connect, then seen internet explorer 64 in my programs, that connected, and its faster than the other time. But now my internet connection is only working at 90% in my network connections, its says on my local area connection, that on IPV4 and IPV6 connectivity, NOT connected, and in my network bridge says IPV4 connectivity internet, and IPV6 connectivity limited.

Could you please help with this problem ??? Just tried my other internet explorer on programs, and this would not work, it seems to try to connect, but then disappears, but with I hit internet explorer 64, that connects. So is there a 32 bit and 64 bit internet explorer ??? I have hit on a different but faster connection, but it will not let me do certain things, [b]as I can not dl windows updates, can not DL anything. Can not DL anything like Windows Reg check, can not update my Ad-whare, or Spybot, can not sign into auto log on the NFS games, launch my game NFS world, its a full online game, if I now go to the Forza site, it tells me I need Silverlight, but when I go to dl it, my system tells me I have it.

Also here is another problem which I never had before, tried to reload a game Hot Pursuit, NFS, did not like at first, thus took it off, and a error came up; error loading winstock library 2ws23l dll. But then it went on to load the game, but this time it did not ask me for the serial number. Then after it loaded, when I double click it says application manager failed to load. I have check for DLing files in the internet settings, and truied turning off Firewall and Anti virus, am now on free anti virus avast.

Wayne
  • 0

Advertisements

#2
Dakeyras
Posted 24 August 2011 - 03:03 AM

Dakeyras

    Anti-Malware Mammoth

  • Expert
  • 9,772 posts
Please Click here!, and follow the recommendations in the guide.

Someone will be along to tell you what steps to take after you post the contents of the scan results.
  • 0

#3
waynegr
Posted 26 August 2011 - 11:20 AM

waynegr

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 194 posts
OTL logfile created on: 26/08/2011 18:11:29 - Run 2
OTL by OldTimer - Version 3.2.26.5 Folder = C:\Users\FLIPP\Downloads
64bit-Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy

4.00 Gb Total Physical Memory | 2.31 Gb Available Physical Memory | 57.84% Memory free
8.20 Gb Paging File | 6.38 Gb Available in Paging File | 77.79% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 917.06 Gb Total Space | 642.66 Gb Free Space | 70.08% Space Free | Partition Type: NTFS
Drive D: | 14.46 Gb Total Space | 1.98 Gb Free Space | 13.73% Space Free | Partition Type: NTFS
Drive E: | 6.75 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: UDF

Computer Name: FLIPP-PC | User Name: FLIPP | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\FLIPP\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
PRC - C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
PRC - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
PRC - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe (ArcSoft Inc.)
PRC - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac (ArcSoft Inc.)
PRC - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.)
PRC - C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
PRC - C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
PRC - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)
PRC - C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe (CyberLink)
PRC - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Hewlett-Packard\HP Easy Backup\HPBtnSrv.exe ()
PRC - C:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe (CyberLink Corp.)
PRC - C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION)
PRC - C:\hp\support\hpsysdrv.exe (Hewlett-Packard Company)


========== Modules (No Company Name) ==========

MOD - C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMediaLibrary.dll ()


========== Win32 Services (SafeList) ==========

SRV:64bit: - (avast! Antivirus) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
SRV:64bit: - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (Lavasoft Ad-Aware Service) -- C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft Limited)
SRV - (nvUpdatusService) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (NVIDIA Corporation)
SRV - (Stereo Service) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (ACDaemon) -- C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.)
SRV - (Steam Client Service) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (FLEXnet Licensing Service) -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Acresso Software Inc.)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (SBSDWSCService) -- C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)
SRV - (IAANTMON) Intel® -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation)
SRV - (HPBtnSrv) -- C:\Program Files (x86)\Hewlett-Packard\HP Easy Backup\HPBtnSrv.exe ()
SRV - (ezSharedSvc) -- C:\Windows\SysWOW64\ezsvc7.dll (EasyBits Sofware AS)


========== Driver Services (SafeList) ==========

DRV:64bit: - (avipbb) -- C:\Windows\SysNative\DRIVERS\avipbb.sys (Avira GmbH)
DRV:64bit: - (avgntflt) -- C:\Windows\SysNative\DRIVERS\avgntflt.sys (Avira GmbH)
DRV:64bit: - (aswSnx) -- C:\Windows\SysNative\drivers\aswSnx.sys (AVAST Software)
DRV:64bit: - (aswSP) -- C:\Windows\SysNative\drivers\aswSP.sys (AVAST Software)
DRV:64bit: - (aswTdi) -- C:\Windows\SysNative\drivers\aswTdi.sys (AVAST Software)
DRV:64bit: - (aswRdr) -- C:\Windows\SysNative\drivers\aswRdr.sys (AVAST Software)
DRV:64bit: - (aswMonFlt) -- C:\Windows\SysNative\drivers\aswMonFlt.sys (AVAST Software)
DRV:64bit: - (aswFsBlk) -- C:\Windows\SysNative\drivers\aswFsBlk.sys (AVAST Software)
DRV:64bit: - (NVHDA) -- C:\Windows\SysNative\drivers\nvhda64v.sys (NVIDIA Corporation)
DRV:64bit: - (Lbd) -- C:\Windows\SysNative\DRIVERS\Lbd.sys (Lavasoft AB)
DRV:64bit: - (WpdUsb) -- C:\Windows\SysNative\DRIVERS\wpdusb.sys (Microsoft Corporation)
DRV:64bit: - (HCW85BDA) -- C:\Windows\SysNative\drivers\HCW85BDA.sys (Hauppauge Computer Works)
DRV:64bit: - (RTL8169) -- C:\Windows\SysNative\DRIVERS\Rtlh64.sys (Realtek Corporation )
DRV:64bit: - (netr28x) -- C:\Windows\SysNative\DRIVERS\netr28x.sys (Ralink Technology, Corp.)
DRV:64bit: - (iaStor) -- C:\Windows\SysNative\drivers\iastor.sys (Intel Corporation)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (PxHlpa64) -- C:\Windows\SysNative\Drivers\PxHlpa64.sys (Sonic Solutions)
DRV:64bit: - (xnacc) -- C:\Windows\SysNative\DRIVERS\xnacc.sys (Microsoft Corporation)
DRV - (Lavasoft Kernexplorer) -- C:\Program Files (x86)\Lavasoft\Ad-Aware\kernexplorer64.sys ()
DRV - (MxlW2k) -- C:\Windows\SysWow64\drivers\MxlW2k.sys (MusicMatch, Inc.)
DRV - ({55662437-DA8C-40c0-AADA-2C816A897A49}) -- c:\Program Files (x86)\Hewlett-Packard\Media\DVD\000.fcl (Cyberlink Corp.)
DRV - (Secdrv) -- C:\Windows\SysWOW64\drivers\SECDRV.SYS ()


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.h...avilion&pf=cndt
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.h...avilion&pf=cndt
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.h...avilion&pf=cndt
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.h...avilion&pf=cndt

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = Preserve
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_0_1.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation)Laurence Shahlaei 400kg deadlift
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.450: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=1.0.3.448: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\FLIPP\AppData\Local\Google\Update\1.3.21.67\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\FLIPP\AppData\Local\Google\Update\1.3.21.67\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\FLIPP\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files\AVAST Software\Avast\WebRep\FF [2011/08/11 13:56:20 | 000,000,000 | ---D | M]


O1 HOSTS File: ([2011/04/17 18:05:32 | 000,432,311 | R--- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 www.1-2005-search.com
O1 - Hosts: 14882 more lines...
O2:64bit: - BHO: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3:64bit: - HKLM\..\Toolbar: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (MediaBar) - {ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F} - File not found
O4:64bit: - HKLM..\Run: [IAAnotif] C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [SmartMenu] C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe (Hewlett-Packard)
O4:64bit: - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKLM..\Run: [ArcSoft Connection Service] C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe (ArcSoft Inc.)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [avgnt] File not found
O4 - HKLM..\Run: [CLMLServer for HP TouchSmart] c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe (CyberLink)
O4 - HKLM..\Run: [DVDAgent] c:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe (CyberLink Corp.)
O4 - HKLM..\Run: [EEventManager] C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION)
O4 - HKLM..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe (Hewlett-Packard Company)
O4 - HKLM..\Run: [KBD] C:\Program Files (x86)\Hewlett-Packard\KBD\KbdStub.exe (Microsoft)
O4 - HKLM..\Run: [OsdMaestro] c:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD64.exe (OsdMaestro)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O4 - HKLM..\Run: [UpdatePDIRShortCut] c:\Program Files (x86)\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdatePSTShortCut] c:\Program Files (x86)\CyberLink\CyberLink DVD Suite Deluxe\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKCU..\Run: [4Y3Y0C3AVF7W1E5VDDUCAEJ] File not found
O4 - HKCU..\Run: [EPSON SX600FW Series] File not found
O4 - HKCU..\Run: [EPSON SX600FW Series (Copy 1)] File not found
O4 - HKCU..\Run: [InstallShieldInstallShield] File not found
O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideFastUserSwitching = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLogoff = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoClose = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableLockWorkstation = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableChangePassword = 0
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000007 - File not found
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 - File not found
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_27)
O16 - DPF: {CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_27)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_27)
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} http://www.nvidia.co...sreqlab_nvd.cab (System Requirements Lab Class)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset...lineScanner.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.ad...Plus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\SysWOW64\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\FLIPP\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O24 - Desktop BackupWallPaper: C:\Users\FLIPP\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011/01/27 17:06:10 | 000,464,144 | R--- | M] (Electronic Arts) - E:\AutoRun.exe -- [ UDF ]
O32 - AutoRun File - [2011/03/08 15:33:55 | 000,000,000 | R--D | M] - E:\Autorun -- [ UDF ]
O32 - AutoRun File - [2011/03/08 11:33:03 | 034,599,936 | R--- | M] () - E:\autorun.dat -- [ UDF ]
O32 - AutoRun File - [2011/03/08 15:33:54 | 000,000,147 | R--- | M] () - E:\autorun.inf -- [ UDF ]
O33 - MountPoints2\{42ee88da-e157-11dd-be7e-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{42ee88da-e157-11dd-be7e-806e6f6e6963}\Shell\AutoRun\command - "" = E:\AutoRun.exe -- [2011/01/27 17:06:10 | 000,464,144 | R--- | M] (Electronic Arts)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (lsdelete) - File not found
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011/08/26 01:18:30 | 000,000,000 | ---D | C] -- C:\Program Files\Java
[2011/08/26 01:18:12 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2011/08/24 13:45:20 | 000,000,000 | ---D | C] -- C:\f12f1591da052aec4117
[2011/08/21 17:34:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
[2011/08/21 17:34:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Silverlight
[2011/08/19 23:56:15 | 000,000,000 | ---D | C] -- C:\Users\FLIPP\AppData\Local\Mozilla
[2011/08/19 19:20:22 | 000,000,000 | ---D | C] -- C:\Users\FLIPP\AppData\Local\Deployment
[2011/08/19 19:20:22 | 000,000,000 | ---D | C] -- C:\Users\FLIPP\AppData\Local\Apps
[2011/08/11 13:56:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Free Antivirus
[2011/08/11 13:56:41 | 000,022,360 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswFsBlk.sys
[2011/08/11 13:56:40 | 000,288,088 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys
[2011/08/11 13:56:36 | 000,045,400 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswTdi.sys
[2011/08/11 13:56:36 | 000,031,064 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr.sys
[2011/08/11 13:56:35 | 000,600,920 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys
[2011/08/11 13:56:33 | 000,064,856 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
[2011/08/11 13:56:16 | 000,040,112 | ---- | C] (AVAST Software) -- C:\Windows\avastSS.scr
[2011/08/11 13:56:15 | 000,199,304 | ---- | C] (AVAST Software) -- C:\Windows\SysWow64\aswBoot.exe
[2011/08/11 13:56:04 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software
[2011/08/10 13:43:04 | 000,000,000 | -H-D | C] -- C:\ProgramData\Common Files
[2011/08/10 13:42:35 | 000,000,000 | ---D | C] -- C:\ProgramData\MFAData
[2011/08/10 01:07:08 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Macromed
[2011/08/09 22:03:33 | 000,000,000 | ---D | C] -- C:\Users\FLIPP\Documents\OneNote Notebooks
[2011/08/09 19:42:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira
[2011/08/08 21:25:18 | 000,116,568 | ---- | C] (Avira GmbH) -- C:\Windows\SysNative\drivers\avipbb.sys
[2011/08/08 21:25:18 | 000,083,120 | ---- | C] (Avira GmbH) -- C:\Windows\SysNative\drivers\avgntflt.sys
[18 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/08/26 17:36:15 | 000,003,616 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011/08/26 17:36:15 | 000,003,616 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011/08/26 17:36:11 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011/08/26 13:25:00 | 000,000,908 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2204173278-169951079-703970126-1000UA1cc5e9cb2f8364c.job
[2011/08/26 12:47:34 | 000,002,635 | ---- | M] () -- C:\Users\FLIPP\Application Data\Microsoft\Internet Explorer\Quick Launch\Microsoft Office Word 2007 (2).lnk
[2011/08/25 19:25:00 | 000,000,856 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2204173278-169951079-703970126-1000Core1cc5e9cb2df08fc.job
[2011/08/25 12:03:21 | 000,715,772 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2011/08/25 12:03:21 | 000,599,940 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2011/08/25 12:03:21 | 000,105,816 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2011/08/19 19:25:00 | 000,002,014 | ---- | M] () -- C:\Users\Public\Desktop\Need For Speed World.lnk
[2011/08/19 02:42:21 | 000,000,064 | ---- | M] () -- C:\Windows\SysWow64\rp_stats.dat
[2011/08/19 02:42:21 | 000,000,044 | ---- | M] () -- C:\Windows\SysWow64\rp_rules.dat
[2011/08/14 21:07:34 | 000,144,144 | ---- | M] () -- C:\Users\FLIPP\Desktop\GetSystemInfo_FLIPP-PC_FLIPP_2011_08_14_21_06_21.zip
[2011/08/12 23:27:08 | 000,000,322 | ---- | M] () -- C:\Users\FLIPP\Desktop\Building Muscle Mass A Quick Look at Muscular Growth and Hypertrophy AmpedTraining.com Matthew Perryman, CSCS.url
[2011/08/11 13:56:42 | 000,001,787 | ---- | M] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2011/08/11 13:56:33 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt
[2011/08/09 22:34:48 | 000,000,951 | ---- | M] () -- C:\Users\FLIPP\Application Data\Microsoft\Internet Explorer\Quick Launch\Internet Explorer (64-bit).lnk
[2011/08/09 22:03:33 | 000,001,103 | ---- | M] () -- C:\Users\FLIPP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk
[2011/08/09 19:36:59 | 000,327,680 | ---- | M] () -- C:\Windows\SysNative\Ikeext.etl
[2011/08/03 02:18:19 | 000,140,288 | ---- | M] () -- C:\Users\FLIPP\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/08/03 02:10:13 | 3073,871,496 | ---- | M] () -- C:\Users\FLIPP\Desktop\shift2u 2011-08-03 02-04-21-61.avi
[18 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/08/19 19:20:39 | 000,000,908 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2204173278-169951079-703970126-1000UA1cc5e9cb2f8364c.job
[2011/08/19 19:20:39 | 000,000,856 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2204173278-169951079-703970126-1000Core1cc5e9cb2df08fc.job
[2011/08/14 21:06:48 | 000,144,144 | ---- | C] () -- C:\Users\FLIPP\Desktop\GetSystemInfo_FLIPP-PC_FLIPP_2011_08_14_21_06_21.zip
[2011/08/12 23:27:08 | 000,000,322 | ---- | C] () -- C:\Users\FLIPP\Desktop\Building Muscle Mass A Quick Look at Muscular Growth and Hypertrophy AmpedTraining.com Matthew Perryman, CSCS.url
[2011/08/11 13:56:42 | 000,001,787 | ---- | C] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2011/08/09 22:34:48 | 000,000,951 | ---- | C] () -- C:\Users\FLIPP\Application Data\Microsoft\Internet Explorer\Quick Launch\Internet Explorer (64-bit).lnk
[2011/08/09 22:22:45 | 000,000,951 | ---- | C] () -- C:\Users\FLIPP\Desktop\Internet Explorer (64-bit).lnk
[2011/08/09 22:03:33 | 000,001,103 | ---- | C] () -- C:\Users\FLIPP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk
[2011/08/09 19:04:15 | 000,327,680 | ---- | C] () -- C:\Windows\SysNative\Ikeext.etl
[2011/08/03 02:23:11 | 3073,871,496 | ---- | C] () -- C:\Users\FLIPP\Desktop\shift2u 2011-08-03 02-04-21-61.avi
[2011/05/02 22:28:13 | 000,000,064 | ---- | C] () -- C:\Windows\SysWow64\rp_stats.dat
[2011/05/02 22:28:13 | 000,000,044 | ---- | C] () -- C:\Windows\SysWow64\rp_rules.dat
[2011/04/26 19:16:50 | 000,000,192 | ---- | C] () -- C:\ProgramData\video
[2011/04/21 12:39:04 | 000,000,258 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2011/04/09 18:55:28 | 000,179,261 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat
[2011/03/09 02:12:01 | 000,000,036 | ---- | C] () -- C:\Users\FLIPP\AppData\Local\housecall.guid.cache
[2011/02/27 23:03:48 | 000,822,636 | ---- | C] () -- C:\Users\FLIPP\AppData\Local\tmpIMG008.0
[2011/02/27 23:03:48 | 000,589,257 | ---- | C] () -- C:\Users\FLIPP\AppData\Local\tmpIMG008.JPG
[2011/02/18 15:26:49 | 000,000,732 | ---- | C] () -- C:\Users\FLIPP\AppData\Local\d3d9caps64.dat
[2010/06/04 00:26:18 | 000,819,200 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2010/06/04 00:26:18 | 000,180,224 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
[2010/03/10 14:44:01 | 000,066,872 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2010/03/10 14:43:51 | 000,183,112 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2010/02/28 16:17:48 | 003,284,480 | ---- | C] () -- C:\Windows\SysWow64\x264vfw.dll
[2009/12/25 19:37:42 | 000,070,575 | ---- | C] () -- C:\ProgramData\nvModes.001
[2009/12/25 19:27:08 | 000,070,575 | ---- | C] () -- C:\ProgramData\nvModes.dat
[2009/11/11 02:01:29 | 000,111,932 | ---- | C] () -- C:\Windows\SysWow64\EPPICPrinterDB.dat
[2009/11/11 02:01:29 | 000,031,053 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern131.dat
[2009/11/11 02:01:29 | 000,027,417 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern121.dat
[2009/11/11 02:01:29 | 000,026,154 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern1.dat
[2009/11/11 02:01:29 | 000,024,903 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern3.dat
[2009/11/11 02:01:29 | 000,021,390 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern5.dat
[2009/11/11 02:01:29 | 000,020,148 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern2.dat
[2009/11/11 02:01:29 | 000,011,811 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern4.dat
[2009/11/11 02:01:29 | 000,004,943 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern6.dat
[2009/11/11 02:01:29 | 000,001,146 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_DU.dat
[2009/11/11 02:01:29 | 000,001,139 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_PT.dat
[2009/11/11 02:01:29 | 000,001,139 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_BP.dat
[2009/11/11 02:01:29 | 000,001,136 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_ES.dat
[2009/11/11 02:01:29 | 000,001,129 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_FR.dat
[2009/11/11 02:01:29 | 000,001,129 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_CF.dat
[2009/11/11 02:01:29 | 000,001,120 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_IT.dat
[2009/11/11 02:01:29 | 000,001,107 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_GE.dat
[2009/11/11 02:01:29 | 000,001,104 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_EN.dat
[2009/11/11 02:01:29 | 000,000,097 | ---- | C] () -- C:\Windows\SysWow64\PICSDK.ini
[2009/11/10 21:52:31 | 000,000,025 | ---- | C] () -- C:\Windows\CDER300Euro.ini
[2009/11/10 14:25:52 | 000,000,000 | ---- | C] () -- C:\Windows\pcfriend.INI
[2009/09/24 12:28:53 | 000,117,248 | ---- | C] () -- C:\Windows\SysWow64\EhStorAuthn.dll
[2009/09/24 12:28:32 | 000,107,612 | ---- | C] () -- C:\Windows\SysWow64\StructuredQuerySchema.bin
[2009/09/24 12:28:14 | 000,368,640 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009/06/19 18:22:48 | 000,009,160 | ---- | C] () -- C:\Users\FLIPP\AppData\Local\d3d9caps.dat
[2009/05/22 22:05:44 | 000,000,056 | -H-- | C] () -- C:\Windows\SysWow64\ezsidmv.dat
[2009/04/08 19:45:11 | 000,140,288 | ---- | C] () -- C:\Users\FLIPP\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/01/07 00:17:13 | 000,018,904 | ---- | C] () -- C:\Windows\SysWow64\StructuredQuerySchemaTrivial.bin
[2009/01/06 17:18:44 | 000,008,572 | ---- | C] () -- C:\Windows\SysWow64\ezdigsgn.dat
[2009/01/06 16:40:11 | 000,327,680 | ---- | C] () -- C:\Windows\SysWow64\pythoncom25.dll
[2009/01/06 16:40:11 | 000,102,400 | ---- | C] () -- C:\Windows\SysWow64\pywintypes25.dll
[2008/01/21 03:50:05 | 000,060,124 | ---- | C] () -- C:\Windows\SysWow64\tcpmon.ini
[2006/11/02 16:37:05 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2006/11/02 13:37:14 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2006/11/02 13:24:17 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2006/11/02 13:18:17 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
[2006/11/02 10:47:54 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2002/03/17 01:00:00 | 000,007,420 | ---- | C] () -- C:\Windows\UA000071.DLL
[2000/08/29 03:09:26 | 000,011,616 | R--- | C] () -- C:\Windows\SysWow64\drivers\SECDRV.SYS

========== LOP Check ==========

[2009/09/02 00:12:03 | 000,000,000 | ---D | M] -- C:\Users\FLIPP\AppData\Roaming\Auslogics
[2011/05/23 14:23:29 | 000,000,000 | ---D | M] -- C:\Users\FLIPP\AppData\Roaming\bizarre creations
[2009/12/29 16:05:41 | 000,000,000 | ---D | M] -- C:\Users\FLIPP\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2011/02/27 22:20:35 | 000,000,000 | ---D | M] -- C:\Users\FLIPP\AppData\Roaming\Epson
[2009/04/23 22:49:00 | 000,000,000 | ---D | M] -- C:\Users\FLIPP\AppData\Roaming\FloodLightGames
[2010/05/07 22:12:56 | 000,000,000 | ---D | M] -- C:\Users\FLIPP\AppData\Roaming\Gadu-Gadu 10
[2009/12/11 02:18:19 | 000,000,000 | ---D | M] -- C:\Users\FLIPP\AppData\Roaming\Imagic700N
[2010/05/28 18:29:50 | 000,000,000 | ---D | M] -- C:\Users\FLIPP\AppData\Roaming\ipla
[2010/03/10 14:39:17 | 000,000,000 | ---D | M] -- C:\Users\FLIPP\AppData\Roaming\Leadertech
[2009/10/22 20:25:16 | 000,000,000 | ---D | M] -- C:\Users\FLIPP\AppData\Roaming\Multi File Downloader
[2009/10/21 01:00:25 | 000,000,000 | ---D | M] -- C:\Users\FLIPP\AppData\Roaming\muvee Technologies
[2010/04/30 13:55:06 | 000,000,000 | ---D | M] -- C:\Users\FLIPP\AppData\Roaming\Need for Speed World
[2010/03/20 00:41:34 | 000,000,000 | ---D | M] -- C:\Users\FLIPP\AppData\Roaming\Need for Speed World Online
[2009/11/02 21:51:03 | 000,000,000 | ---D | M] -- C:\Users\FLIPP\AppData\Roaming\No Company Name
[2009/04/12 15:46:29 | 000,000,000 | ---D | M] -- C:\Users\FLIPP\AppData\Roaming\Opera
[2011/04/24 18:17:42 | 000,000,000 | ---D | M] -- C:\Users\FLIPP\AppData\Roaming\Qeytaz
[2011/01/29 14:39:11 | 000,000,000 | ---D | M] -- C:\Users\FLIPP\AppData\Roaming\Siytcu
[2011/04/21 21:03:31 | 000,000,000 | ---D | M] -- C:\Users\FLIPP\AppData\Roaming\Sony
[2010/01/16 16:11:54 | 000,000,000 | ---D | M] -- C:\Users\FLIPP\AppData\Roaming\WinBatch
[2011/06/13 20:04:01 | 000,000,356 | ---- | M] () -- C:\Windows\Tasks\RegInOut Scheduled Scan - FLIPP.job
[2011/08/26 14:15:56 | 000,032,646 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2010/12/16 13:27:45 | 000,000,434 | -H-- | M] () -- C:\Windows\Tasks\User_Feed_Synchronization-{2630C28E-E88E-49C7-9770-69E193BCAF2E}.job

========== Purity Check ==========



========== Files - Unicode (All) ==========
[2011/08/12 23:24:34 | 000,000,647 | ---- | M] ()(C:\Users\FLIPP\Desktop\Tension-time index, fatigue, and energetics in isolated rat diaphragm a new experimental model--???????--??????--?????.url) -- C:\Users\FLIPP\Desktop\Tension-time index, fatigue, and energetics in isolated rat diaphragm a new experimental model--《应用生理学杂志》--医学期刊频道--首席医学网.url
[2011/08/12 23:24:34 | 000,000,647 | ---- | C] ()(C:\Users\FLIPP\Desktop\Tension-time index, fatigue, and energetics in isolated rat diaphragm a new experimental model--???????--??????--?????.url) -- C:\Users\FLIPP\Desktop\Tension-time index, fatigue, and energetics in isolated rat diaphragm a new experimental model--《应用生理学杂志》--医学期刊频道--首席医学网.url

========== Alternate Data Streams ==========

@Alternate Data Stream - 2873 bytes -> C:\Users\FLIPP\Documents\FW_ Animated Map of Europe During World War II.eml:OECustomProperty
@Alternate Data Stream - 16 bytes -> C:\Users\FLIPP\Documents\Shareaza Downloads:Shareaza.GUID
@Alternate Data Stream - 135 bytes -> C:\ProgramData\Temp:26F6D10D

< End of report >


Wayne
  • 0

#4
Dakeyras
Posted 26 August 2011 - 12:46 PM

Dakeyras

    Anti-Malware Mammoth

  • Expert
  • 9,772 posts
Hi. :)

Could you post the OTL Extras log also please, it should be on the Desktop.

Also please move the executable for OTL to the Desktop, it is currently residing here:-

C:\Users\FLIPP\Downloads\OTL.exe
  • 0

#5
waynegr
Posted 26 August 2011 - 01:46 PM

waynegr

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 194 posts
Hi there and thx for your help and time.

Also all my desktop internet icons will not work, or if I put a new one on. Also the link that I had that you had posted a reply to my thread, by my e-mail, that link or any other link will not work, it seems to try and find it for 10 seconds then disappears. Its like the old connection {it could be internet 32, I dont know that much about it} tries to connect but cant and disappears, but this internet 64, can connect, and faster, but cant see or do everything. Not sure that will help, but thought best I say. Also I get getting logged out of all sites, even when I click to stayed logged in.


Could not see or find in a search the extra olt anywhere, nothing on desktop, and did a new scan ??? Found this, but dont think you meant this.

~~~~~~~~~odY``TfbNniivE??^^`xxHIVh\pOSXllZoRSPuomaq\\PXtyjjuj^W\qquekkonpbK5s\XXk[unuaSeRWbKfmqTmXYpVgt`aS_]c aoX]prY_\etnjYajvgU[mxmdW^cskUcqquu\QecopYksotVPfd opsYdwouNNXcösZoghydmeUOPPel^^gvvlttbg_fcikllfurklKVhlvmdlqinWWUd] svkcctwtkpXQQcXtoZnpppotXM`XXÿvw_yrrvlsrTNm[ ʧbhhwmwipkjtRDX]ɯ \QQW\cbq_UUhefx`NbsffW[kkfiämpl^qtvvqdV[sacƵuulghnwuuvaUkfcjhhn ohwwsiiPjd_phnnlptrrseTjjhdkairruvmcWdcažKeY]^ZZTpWTqYYgj`UanVXXe_sno\O_mGRbbPpĎnbW\iu[]n`ugmbpjlljdbshi mmm`mqppseiifmhckoggzpsqqkmggkappgkwvvqsmlilec]fSRZmmeepW]½UUSoqqTiiteZ[l_finrZYfxqaVVlZvr]qnSbqidd kmbZbqcdèkZnrmpffqZZZmq^fjemdbnp^^bqdtpqd\][Pf ^` ZZZdZ`T\ioowgpqxlrrhhvuosjpl`jjjichviioe`fdgkgqoiaagzullpqqwnjlttqiluqluuxqscdrr_mlggYRngZWj g_qxseeRMhleuonafmffkmmmlip__oxxytiaiirisiqmljejnsmmhryrryccdimtqrnnggnovpnir{xswrieejovlssvtrkknkujfjobejquqqfYZg^mdfaa_pi lmrmq]ZZebsuqtmjfjhlemwwm_amml oiprrsddfiqim{insjcamooldoosdamtpl ophuecgyrrgkpoohhkxsrmuxxsxrlkequupsuntnnxkikkuvqorvrkiqirtyswzhvvvpgplrrrtuuuwqksnnzzxtm`lhhYga^gjjdudx`i_mxwpeqkaaoociskkpjeirerrwwllohugswntw{nwppoqhtqyywwummojtxmypvvooskkqoxxqzrrlgsp}qwuqporwzsyvvvmlputxxwvqqqqyyx||vzxtnnppwwywxxpoonwzwv{qqnmoxxxyxzuzrmnns|vzyxxzvyvmnq{tzxww{skpryyyu{vxttnqr|txw{u}rllstv{wrwvvsossvxvrzssuvswwvt{vyytvrsu{yt|tvprurwz|zrtutvrxxywyt||yypstqxv||zytwup{||y}ywyyvttuuux{y||vtutqt{z|xxzzyywvvvwzxxy|vuvsspv{yzyyu{}{yyssszwutwwkovpqslfz|zpssw{yyjj{vvyvbr}sooVdxtttombntrrvs{rsjqywwyy}wvac{w{{{xwhivw{xvlffw|}sssc^vuvzzwvwskzpy|triYhursjklepihgxyslmoxomslm~qa]lwplc]lztsqlrjfnnoxvyxxn {vumvxjruwxvykk^hnyj]SKs pjiiUMpqs_VbåXeI4Jfl]<8EEU[K<bbRGYYda\fmbbbhXW_X^SammzUNjY\llijhgg]]]blgycUUqznsSKgfo_doar_`nkkx8UngssE/_[oIN\ufF^u SSVdo^>>[hk[TTadrRUstidvpqqeP`vtwjfhiu`dpl|vpouxkk^^WkgngdnFGugbnjtljjdbkeehg`lmooooljgf]gw`hepgdgYWxtebowl^[__Zujihhowlj[T{{ocbppsmeaZtkeelwjemmaZsnnb_hvoej _Y\fiOOWmglnetebbkliOSmYohlpge]esccgjOhyzj[[PSe]a qfqkmykkgfxphhnnnxhhpbdikjc`nn jj^_kxsillq^hrpplckjhnekAtggjSJ PV VDDifgMOYfqZZLfdaiiXlsne_\AUroxxRa_xebbtV^f dgqpyuxk]^xlsmessigudbxr`evflyyhiV[n³aodbhRRb^NNrFI^`kRSkmm_n e\RR_]pj`_g[Ulabb[Spl^dodVbjdrtdd]Zf]]t_i p]Wjlhiqe\\dmbtuih`ifzeems`W\utpicg\ZpphOesn mm^gwntgSO^h]pZZ_hwrg`f__j\fg`lZct\\lnkasiijwaVboqhhhmpmpd[nnc\khdzvvq`bzzmwxqgoh]dkfgtYQfnddnmKSikdtecd``_hfa yt[[_nupccdethdtsfcmnhztbdgyyk]ak qqssiigffgpszp_\fxj\]mro`fc^npquiXpq^V^_mg[apnmdfpefq\Xvlbajimtj^nlahicgmfanuuoeighinnigsrehgddfqoggdwqllffggolikookggbewwjaqolhlZ`pksfdjfkpp`csyeeochgaggsorceenzjjgcossngemkknddnurrsiefpkkgcovfdkwjeddlvppdkxfgfnYZhrf^TSrpahrlcaZZgl\nnn_Rkl[cc`Vgrtcappaetgjsxo\txxxxeeqiotuuuetuohqpm vwvknwibookumlvrmaopjx{skxttofpnjyyxxpmvqlcpkmwyrr{twoohmijzttuyuuvtknnm|xwwwywwnkoil{tyxwx|tmolmxv{ts{roqklxwwxvvyxmsnmyvwv|sqwxprqnzvyv{tuzrqmlv{v{{rsyx{tqpjjtzx{sswxtommvwvru}|wmnoxy{xsxyz{nnkrwyzz{xxx||yjjjqx|z{{rrwz|jmrvvzyz{xwww{xmouvzzyyvxw}mqpxxx{yvv|wxpppuvyvvuyw|rqrryx{vvzyxrqtwy~uux{{votwyy{vx{||xssqwv{{}}wxx~{ynrpvzwuuuwwvx{xs{|urvvrtov}{{{rsuzppojptyvsnq{{zoomp|xstwwwzwwstvzzyvvv~y|yvwzz|{zwx|ttss{{wvuww||yxys| floslmpqq{ppi_U_|yww}}|zxqrkjjx|{||y|{yqtg_owyyw|vwx}}{p`c|ttttxyyvaam~zyoqt~xtttn_fqoqrrttvejks``cjlarmaul[llhWXdtbccifmriRNUmjqlstn nZKUkppgeqqusVUWdutwwxup lsryaTRmqmutg_\kzrrsqorsZichSLZ\QNjcu`dQQopl]Rofn p_ZkMM^mmmqZmgZtks__Rduwgjiionwsebddhvpfcpiirricelz{rgffpfmocagrnqqYWmprffabfsqssrsdd Z\lffnexxvY`slugT\luaewxgkfvbZYWrkkmlp]kmkd\_mlehqlcbntwiZfhxxvqfouZ]lrrukSaaolxOQnfKFRRWgU`ipXX\rTnuu_^ej\RVVrzciiX`qgi[ezbaajjmrrnkgghpwh`eeemjlbeejopjumjcco_ennfshlvloiihmbbbkwNQQ^kZSLo==7IOf\zmҤN X[XciLNrSZhJS[Ÿj[\TbYZ^^NnKLY^ǿqgc[Wzzbhgelejdfqrmnnnqm`fdbtllryzuoj iggijonp|y{rqqlmpg\S[qonrkttabilhh^^ffe`lhlxjfff^\redii`hgrrwnpt jfeeeafjvkppzm]ekkhe\fbcxsyjgy`[[acwkm ggtmljfhffetj[mdetsk`drmVErbb]]kip` _U[_`]qnpltnnrjIQi^iilzpffcizklrrS[svoqu^^beZhijjjqfhrpaapq{yzyacc[^ojjtjrs^WWUZQLaii[Xiakceg^iaaU`u[jjidjubaaiga]qmmmvfmxmmqqxulge`qderuvd__gqc^nmmjrrourkklwrclmp}hjorrsniltshkk ^]t¢aY^pllhs iYU^Ėifg]kff]Yc]ZUYYfZdaaaeYrUaausutkpvwrrtsovpliqsszrlnhffqrkrjffZ\rffoiik\\dtqa]fmdtwmxspeeeydtsqwfqotliemuztpmljfmpqolgbrnnqkrwwbcuptmnsxtnxuwulijtmuoroqtupf`ertrtkjjpksr{rojkoqtttqvUfmaggkhmqnnitmqSTdbvxnl`bbikj^jbmnptnyobwmoiiokkuqqtjrtronuubkqmu{wwvryynnwmllmmnusxvxypst{vtfelswwxyprnsrzjkuptunnwtzzjnqorzxx{oozwrnmpptstxwystuvvmimuwx|sqryyvwxjmvq~zvnssy|w|rqnpuxx{npysplmmkvxxuuqxxuvulojsyypwt{posv{wkiin{uovttuwllsuuvnlywxqppljqzvyyuyxxxsrmswzsu}us}vv|xqmtqszvvwtxqzzz{zwonrsyvvtqxyyysporpqszxzzzwzxyzvvorwysxxrwwx}{opsxuyxztuutv{zyomvvswtwytxzzxprtxvtvyxxx{us{urmpppovrmhmkjuijgbkllc^eowwtotnu{wreXcnvognpsfcqpve`dn{ojtrvtwzfikrleoo{ttqmsmyrrllpo|uqqr|zswsra_n ovnsv|yzzrspvyojiihyrrxrvrr|uuomy}nrkktzywvvvysvxtvvuxzzmmqo||xzyvyrxxsruwvwtroimmlphdmbbUwtkMPZ RQIIWWaowo[AA>Xus__WUpvnnlRHMhrRP_ZieTXcjaGPd gaXXksXX{vk`_ippuUPekdgginpttwyydV`qvwvq8LZ]hV66S_a XLD\fqUQiWXdʧ]Vgm`YQU`Isjka ^kha`syaYellmnurpauuzrsigeebhzrmjfsyqhifdlsssuvqqtt{slqkee]YlidnseohnkST\sXWWpqunkswff`^lq_^nwyxhehllz`cci}qqlsx\Ylzrcdnejvecirn[[ukknttlkonnn]]ijw|lqqdUt@/H ndKDdkYYjdMNT̯[[ph`vrwsyzrvoxPIccdTcxwjjlfiavYQuwiUZssa_didk^U ooqmwY^dfV\osXNLmqmzkkkec^jj_%%;YT@@CNdiqFH_p<77Ǚ_ABBq8, APPkd_=2`N;=nvgXkpbkarxlnabb[GZƨdZ\lszuxhfrlLPɨskYXjY\\g]dt[`vubXcFG=8@fՖa OW\]eec]ZUUvvkagfnpnwmesbbjbbess`POgge sXR[jjiw]Uss]`rskgXXXΨkdbbbglcllbccitpblr^kkddsgv`XXM`v^YYYoi[_NOOblhfwqdjh^fft?D^ɘekkcccaac]hgemh__f\aojkffibe_¼lssjYVehbk_^_xokrPS _ckZY`^ekccip]PU=\esjc kf^nlqa]\\NS¾qqbdaajmqdVV]`Zj{iccsujqaKQQouddoodk]`bblppettzkswojkt\YYoqommftggrh___iettkfsnjjlrJIoaafgf]_`cgfMMBSnXX^sof\\\]jnMFab_pqsssdnoobmndnvgkabgdotnkl^VfaqcW]wge{xlhhxbhrr]_XXurjnliowvmmijd`nrrmmwzuaZk[[av^^abhrnggjjnqoqndbbtmqqrjiqqipnleipolopjdkumoppt{tffj_axffh\TTeoccyoll_glXb]g `rYXhfyhjuuUTg_nqmZokj^_gissjobjssybZvpqroo}zphhxk`kwykfgokfbfllo|gg`djosvqqzppkxunnnvx|rloyxsshqvwqtnnmuvcavvijqfcmsjspffsuuucau nmytttumvpuwnsurpx{yykhrxqnxxxqxjj}whddwviirjhnqyysfip{w|yoktmuqmuxyufgpvq{{{tns{{tqypptvmk{zqhsw{nnsskkkz{teikttzvykiwqsnnwpqxssttlt}wtzxomssvmiqnsss{zxzvswoliiiujjttv{vu}vvuuwt|xtttx||sptwwqtzppvxwxlly{xptx}wwssz|xswy|rtqq|mkqr|{wxoq||zummw{{wxwmiszvhhebq utsqlmyuppru|gfnsz||zwuvvqyphhx{yyxy{{{txlkz|yyu}vzzzxutoq}uqv|zuuuyxvytzyxppmmwlmhhqz}{w{{}zmcddionekrr}wpjjmsrzqeegtsoprrywtkkpmtfbfrzwwxvsuvvrjjekuorzv~~}zyyjjvv\Vhwpoo]]spqqe[m[[27hwlnHH@OX^WWQ OKSufiiUQfPAMwop[YlaOOij]h UR`taVQmrd]cflruwiWToyll]occosseRTomdjjKgkeAFMAVhqg[YK\kkXXkSTddgcncE]baaGFsʭXllgcCZr\\X\ttvyQ^tl]Uoeerjzord__rcYe ivvkvqkj]uiW_toxopomgfukWZqdqsfc[EYPPMjorqtquvheegMF_iiop^cqkppXPcivgkjmgm UK[_ eapmfio [S^^pptrppeh]U[dkmzporlss `PZYepuvlnk`qkT^XttbOOS_CDT cJYHHMOgTVbUh[sKHH SBUgSjhks[WT?FFm_ifqebapiDC^^_obcc_] MF^em]n\\_nNL^f jjXno\fûMaaBEjhɞYaU\<mr_`LJJdȚemo^juQPbBee\hpl\[d[[HfYgxfdY\TY_jjvuieV\\]]nroqqvohWQ[]g ujowrmpx`QYZduqxsunitthRZcjuultssrviiR^\RbODnrfnnkYkSD=̕qgX_mddfB;ehq[lg_cWflZQJȯssf_i lcb QFguumhccYddr_MZsq_aiiip[Nej_gobddvpUTbd_tkgsqqjhXWrcVfffabMbr`LRdnb_\ZZfhRJd`gmlluxqqmiw`VfrnhkwvtgLNkkqaboompi[ol[[ggwf\gttkysaZ\c qkhkQmmS`m[\\ ^^`sqsmR@UUa pqppncb\lU^nng^rurtiYW\wpjnlxi\\i_`jdbnwusjdd]jywgrrrub`efjjl lfiixvxs_]eyqsxrweegdjirr^_j `mPPTQwtsstjmciahhcmre`pppuguV]]ppobjlkl^mcuZXhxmrr]Ybu^cmk^bdp_ciqjf]dac[[^kqdYnuuhf[cplfvvd]bowpcscgckoul]xxvva`domoanepgjjckeexadgmhhusgpikic^xxmt]ggqT_hZgT\rvv`dkU keccwrv]Zxclliictqilleotunorrrviigjovttpntvfuddmpwjqqtszoescpppstuvnppwqgudokpylqkmobsioskjtlkrrdgkyssylwuzpkikkrttnnvuxtoroaii{yvmuvvvilhvzzvynwtzttkpenuvmvwulmmfsvyzyyotznjqmsvzurwwnnqkswywstw{rroqoqu{{wssysoooqpvuwxtypnsrlxstqtttywimnluxwurwwpqtjswvvuvyzmppjxxwwwttyyonvkprytwzzy{uovrqwuyxxxooxoq{{qwwtvyzwnrssozuzuuwtqwspzzwwxxwvvxpnooxvwr|wwzuqsonwv{xzwx{yxppqqquvwww{{ztstx{tsnnnfcWNNwqmc`f wnmeae|uunmhgdmwopjty{jlobgkxwuqjmeqytpnqiouunrprrqolxuxvuwoqs{uxvwvlhjj{|ojkggyqqyyjkuwddcMHruskdbff^xjrqqqkopvshhpyzp pfflz{lWdswbddX\ysqkmndaaztpvywwsjg~zpxove`{xutv`Ru{uooeetonfsq_dY]dannnbqfZdHOnfbfiTtphkalhWWV^`dShfq_EYfrll RG_riEH_Yiǯ]i[aufG]]moe_RbmspST`ooReúpl[nkkSas\RmTTms]jphhRVC_ns]]iidLS`bcqnbbguvfdjoobd{wxjnoWYvdgyymlutub]xqyrrnkhilggonwiilnukv[V``l]gdfuujsq\^maThmlssssq|dfZkkhbdeetouilvym^oooidfrdhttqb`hsvvqjk\^w[Lgqpprtkqhflfdetjlzzplt{dVerptsmilljd\^ ggg{tgrY\[[pnn||wncmq^ioiammhxhTddY[cdpqqxOPoowmme`at n`qrnrrZfcmjtadomfpqq]Owbbhntmp a_gohhvippoyj`eE]c̱\PUeJbbrLQqSdc__n[SLiYZZWi`]c_dWLLgap[[[oe_bkJQmXVsttlfdY] xdmn|hddlUUw^dv{{pnee^_lihy|nni__ wnmnsgbapkpe^indmYYQVweeoohY]vr^^bVyrqqwcffgXQpuvkietssl_``tovxzhjn__Wqswqjigtovl```crmu{iiui`pe]tnlipqg\\IHƝmllobf_^NE`s{VVVRdnpqhlUYtnpurlcdnnmlnjlyokmxURqqpowoosg]_ukolrrmlvsklseddxuleQjgbTXfjOmahnbd^Winacgun[iiqtghcovzmnnhheq mkhbwzcdvopp ngxppqw{nomlmqqnxvlvbb]ukonkkklvurfddkinpsywwjknccfutiitk``_IYngqp`bddcnodiiXadkkSW`ikjlf]jtiavoganjmm\tj^hplstlsqhhwlhhhpllitphqld]ohprjsjsiobhlrnukfqiiqmen[jnknjlnrrllk`lxxwjipoopvvjq^oeppqppqpphl\phlifuuwstiYlprnvvuuiikeYhnkuyottvd\ldnfqrU`ge\Vumelfq\df_]ipejrjpp]e[cdxgrhqfh___crnuupp`oW^eessuriqf``zktustl`ub]irvtt|wzxolsggcn{oruupxocrtg_kkqsrysv{vvotjipvvmnmnjeprruvmuurpplpkz{rrmlstihhrtvurrptvsoqlxx{yqlkrpphlmvrqsxyvuurrmuxnkprw|llklpnuuw{zurunxplxtww{zlnlxlluxxxtrsrutnrqyymqltylrzzwvwusvtqzurtyuuzyvsnpuprvzvwtsttoxuuttwxv}yrpkkuuuuzwtysurtyxvxw{}s{xqnpuss|x||xxwsuxvtx}y|uxyqrurpvzz{zwvssyqqy{{|yxxxnkwptt{|xyyxuyxtytz{tvxuzvqyyzv{vltyy|wszyyvynvtx{vsx{xx}|strsyzuuvyxvztvyyso{uxxxyx{|vvzyttwu|w{yvyxuy|xqxyu{wyyxxyyxs{wq{uwxyyxxt{vvxtzz|{vuuuzuzyrv}y{xwxwzyxxzwuwwzz{vvuxwvuuwwyxxyxyzxxwwxttu}ooquvpp{yztuhjwv}ywzttqrgnskdddngupxunqq[ZrhgpomxtY[ovolz\]jxsjjxbclyyuurogfkyyz|uvurkioxx{qrvtnhmzzppupzngo|rrnqqxoek{vmoqvoem}vhjrqvrfmyijnmupglzzggoputilzz~zhgontrln|zgeoptumozz{henpstmpz{|gemqqsuqrrwy|hgkpststyy}jgkrstutwy|likquuuutuxy|njkkqtttvvuvy{pklrssuswuwwx{qjkqrvtyuvyzsskmppyytytvxztjjlqqxs{{uvxyvmnrrp zt{wwxxzummqrvyu}yxxyyvpptstzw|zxxyvooortv{yy}{xzxytrqqttt{yzzyxyvrprtu|y||x{xxytrptst|{{{x{xzwwrqtvw||z{}y{z{wtrvuw~|||zzzxtruvx}z{}{|||{xtswwx~}~}|}zzzytsuuy}{}|}}{}zytuvvyy||}|||zzuutuz|~}|zzuvwwy}|}{|zzzwvvvz||~||yuuwwy||}}|zzwwxwz}~|~~||{zvwyxy|}}{zzzxwxvy}~|}}}~|zxwyxyy}||}}~|{zyxxvy}~}|}}|zyxxwy{}~}{}}|{zyyywy|}}}}|}|{yxzxxy{}~}|}}}|{zyzxx|||}~|}}|{zyzxy|}}}|~}||{yyyxx}}||}}||zyzyyy{}|}}~}||{zzxxx{}}}}}||zzzyz{}}}}|||{{{zyz{~}}}~~}|zzzzzz|~}}}~||{z{zz{~~}}~}}||{{zz|~~}}~||||{{{z|~~


Wayne
  • 0

#6
Dakeyras
Posted 26 August 2011 - 02:18 PM

Dakeyras

    Anti-Malware Mammoth

  • Expert
  • 9,772 posts
Hi. :)

thx for your help and time

You're welcome and thanks for the update also...lets see what we can do for now OK.

Temp' Disable Windows Defender:

This is so it will not hinder the Malware Removal process.

  • Launch Windows Defender via Start(Vista Orb), Control Panel, Windows Defender and go to Tools >> Options.
  • There will be a list of configuration options.
  • Scroll down to the end of the list to Administrator options.
  • Deselect the Use Windows Defender box and press the Save button.
  • Now you will receive a notification saying that Windows Defender is turned off.
  • Click on Save then Close on the Notification that appears.
A graphical tutorial explaining the above can be viewed here.

You may re-enable this when I give the all clear, though personally I would leave it disabled as it is not a particularly effective application and unfortunately it cannot be uninstalled because it is a integral part of the Vista Operating System.

Next:

Now please go to Start >> Control Panel >> Programs and Features and remove the following (if present):

Ad-Aware
Spybot - Search & Destroy

To do so click once on each of the above to highlight then click on Uninstall/Change and follow the prompts.

Backup the Registry:

Modifying the Registry can create unforeseen problems, so it always wise to create a backup before doing so.

  • Please go here and download ERUNT.
  • ERUNT (Emergency Recovery Utility NT) is a free program that allows you to keep a complete backup of your registry and restore it when needed.
  • Right-click on erunt-setup.exe and select Run as Administrator to Install ERUNT by following the prompts.
  • Use the default install settings but say No to the portion that asks you to add ERUNT to the Start-Up folder.
  • Start ERUNT either by double clicking on the desktop icon or choosing to start the program at the end of the setup process.
  • Choose a location for the backup. Note: the default location is C:\WINDOWS\ERDNT which is acceptable.
  • Make sure that at least the first two check boxes are selected.
  • Click on OK
  • Then click on YES to create the folder.
Note: If it is necessary to restore the registry, open the backup folder and start ERDNT.exe

Custom OTL Script:

  • Right-click OTL.exe and select Run as Administrator to start the program.
  • Copy the lines from the codebox to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):
:OTL
O3 - HKLM\..\Toolbar: (MediaBar) - {ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F} - File not found
O4 - HKLM..\Run: [avgnt] File not found
O4 - HKCU..\Run: [4Y3Y0C3AVF7W1E5VDDUCAEJ] File not found
O4 - HKCU..\Run: [EPSON SX600FW Series] File not found
O4 - HKCU..\Run: [EPSON SX600FW Series (Copy 1)] File not found
O4 - HKCU..\Run: [InstallShieldInstallShield] File not found
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.ad...Plus/1.6/gp.cab (Reg Error: Key error.)
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found
[18 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
@Alternate Data Stream - 135 bytes -> C:\ProgramData\Temp:26F6D10D
 
:Files
ipconfig /flushdns /c

:Commands
[Purity]
[ResetHosts]
[EmptyFlash]
[EmptyTemp]
[CreateRestorePoint]
[Reboot]
  • Return to OTL, right-click in the Custom Scans/Fixes window (under the cyan bar) and choose Paste.
  • Then click the red Run Fix button.
  • Let the program run unhindered.
  • If OTL asks to reboot your computer, allow it to do so. The report should appear in Notepad after the reboot.
Note: The logfile can also be located C: >> _OTL >> MovedFiles >> DD/DD/DD TT/TT.txt <-- denotes date/time log created.

Next:

Please download Malwarebytes' Anti-Malware to your desktop.

  • Right-click mbam-setup.exe and select Run as Administrator then follow the prompts to install the program.
Note: The feel trial offered for the Protection Module is optional. Though I advise activate this when we've finished, if you so wish.
  • At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select Perform quick scan, then click Scan.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Be sure that everything is checked, and click Remove Selected.
  • When completed, a log will open in Notepad. Please post that log in your next reply.
The log can also be found here:

  • Launch Malwarebytes' Anti-Malware
  • Click on the Logs radio tab.
Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer, please do so immediately. Failure to reboot will prevent MBAM from removing all the malware.

When completed the above, please post back the following in the order asked for:

  • How is your computer performing now, any further symptoms and or problems encountered?
  • OTL Log from the Custom Script.
  • Malwarebytes Anti-Malware Log.

  • 0

#7
waynegr
Posted 26 August 2011 - 03:42 PM

waynegr

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 194 posts
Did what you asked. Never thought you would say get rid of Ad and Spy. Turned defender off, and glad you said to. Have I a virus ??? Just thought I was missing softwear somewhere. Here are the two logs I think you asked for.

All processes killed
Error: Unable to interpret <:OTLO3 - HKLM\..\Toolbar: (MediaBar) - {ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F} - File not foundO4 - HKLM..\Run: [avgnt] File not foundO4 - HKCU..\Run: [4Y3Y0C3AVF7W1E5VDDUCAEJ] File not foundO4 - HKCU..\Run: [EPSON SX600FW Series] File not foundO4 - HKCU..\Run: [EPSON SX600FW Series (Copy 1)] File not foundO4 - HKCU..\Run: [InstallShieldInstallShield] File not foundO16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.ad...Plus/1.6/gp.cab (Reg Error: Key error.)O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not foundO18:64bit: - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found[18 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ][1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]@Alternate Data Stream - 135 bytes -> C:\ProgramData\Temp:26F6D10D :Filesipconfig /flushdns /c:Commands[Purity][ResetHosts][EmptyFlash][EmptyTemp][CreateRestorePoint][Reboot]> in the current context!

OTL by OldTimer - Version 3.2.26.5 log created on 08262011_223228

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...

Malwarebytes' Anti-Malware 1.51.1.1800
www.malwarebytes.org

Database version: 7035

Windows 6.0.6002 Service Pack 2
Internet Explorer 9.0.8112.16421

26/08/2011 22:41:57
mbam-log-2011-08-26 (22-41-57).txt

Scan type: Quick scan
Objects scanned: 181073
Time elapsed: 3 minute(s), 13 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 1
Registry Data Items Infected: 0
Folders Infected: 1
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\4Y3Y0C3AVF7W1E5VDDUCAEJ (Trojan.SpyEyes) -> Value: 4Y3Y0C3AVF7W1E5VDDUCAEJ -> Quarantined and deleted successfully.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
c:\Recycle.Bin (Trojan.Spyeyes) -> Quarantined and deleted successfully.

Files Infected:
c:\Recycle.Bin\2ddf24fb1b6ff46 (Trojan.Spyeyes) -> Quarantined and deleted successfully.

Wayne
  • 0

#8
waynegr
Posted 26 August 2011 - 04:01 PM

waynegr

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 194 posts
Hi there,

All the problems still seem to be there, cant dl win updates, google earth says I am not connected, I can not launch the free online game nfs world, not of my desktop links for the internet work, just created another one just to see if a new one would work but no, the other internet explorer in programs, that does not say internet explorer 64, it just say internet explorer, seems to try and connect, but then disappears, and keep getting log out of all web sites. No it all seems the same sorry.

Wayne
  • 0

#9
waynegr
Posted 26 August 2011 - 04:15 PM

waynegr

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 194 posts
Also tried to reinstall the new NFS Hot Pursuit, that I uninstalled and then tried to reinstall just when this problem started, and got this massage again; exception eidstackinitalization failed 001137cd error on loading winstock liberty 2wss2332dll. I then went on with the loaded without asking me for the serial number, loads but it will not play.

Wayne
  • 0

#10
waynegr
Posted 26 August 2011 - 05:09 PM

waynegr

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 194 posts
Just tried to launch NFS Hot Pursuit, and it said Activation Manager stopped working.

roblem signature:
Problem Event Name: APPCRASH
Application Name: activation.exe
Application Version: 2.0.1.160
Application Timestamp: 00000000
Fault Module Name: kernel32.dll
Fault Module Version: 6.0.6002.18449
Fault Module Timestamp: 4da47a32
Exception Code: 0eedfade
Exception Offset: 0001c83b
OS Version: 6.0.6002.2.2.0.768.3
Locale ID: 2057
Additional Information 1: 3f93
Additional Information 2: fadf46fa4aed62d5d6e30305c39bbdf3
Additional Information 3: d92d
Additional Information 4: f2c68df56837d128ff9c6a589caf166a


Wayne
  • 0

Advertisements

#11
waynegr
Posted 26 August 2011 - 07:02 PM

waynegr

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 194 posts
Uninstalled Google Earth, then tried to install it again, but could not, bed time here; will look in first thing tomorrow.

Wayne
  • 0

#12
Dakeyras
Posted 27 August 2011 - 05:54 AM

Dakeyras

    Anti-Malware Mammoth

  • Expert
  • 9,772 posts
Hi. :)

Never thought you would say get rid of Ad and Spy.

Ad-ware was active in system memory thus causing a security conflict plus it is not particularly effective at all these days. Spybot - Search & Destroy, specifically the active TeaTimer would have hindered the Malware Removal process, you may reinstall this when I give the all clear if you so wish.

OK no more attempting to do absolutely anything to your machine unless I advise so please...Please take note of the below:

  • I will start working on your Malware issues, this may or may not, solve other issues you have with your machine.
  • The fixes are specific to your problem and should only be used for this issue on this machine!
  • The process is not instant. Please continue to review my answers until I tell you your machine is clear. Absence of symptoms does not mean that everything is clear.
  • If you don't know, stop and ask! Don't keep going on.
  • Please reply to this thread. Do not start a new topic.
  • Refrain from running self fixes as this will hinder the malware removal process.
  • It may prove beneficial if you print of the following instructions or save them to notepad as I post them.
  • Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.
Custom OTL Script:

  • Right-click OTL.exe and select Run as Administrator to start the program.
  • Copy the lines from the quote-box(do not copy the word quote) to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):

:OTL
O3 - HKLM\..\Toolbar: (MediaBar) - {ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F} - File not found
O4 - HKLM..\Run: [avgnt] File not foundO4 - HKCU..\Run: [4Y3Y0C3AVF7W1E5VDDUCAEJ] File not found
O4 - HKCU..\Run: [EPSON SX600FW Series] File not found
O4 - HKCU..\Run: [EPSON SX600FW Series (Copy 1)] File not found
O4 - HKCU..\Run: [InstallShieldInstallShield] File not found
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.ad...Plus/1.6/gp.cab (Reg Error: Key error.)
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found
[18 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
@Alternate Data Stream - 135 bytes -> C:\ProgramData\Temp:26F6D10D

:Files
ipconfig /flushdns /c:

:Commands
[Purity]
[ResetHosts]
[EmptyFlash]
[EmptyTemp]
[CreateRestorePoint
[Reboot]

  • Return to OTL, right-click in the Custom Scans/Fixes window (under the cyan bar) and choose Paste.
  • Then click the red Run Fix button.
  • Let the program run unhindered.
  • If OTL asks to reboot your computer, allow it to do so. The report should appear in Notepad after the reboot.
Note: The logfile can also be located C: >> _OTL >> MovedFiles >> DD/DD/DD TT/TT.txt <-- denotes date/time log created.

Download/Run ComboFix:

Please visit this webpage for download links, and instructions for running the tool:

http://www.bleepingc...to-use-combofix

* Ensure you have disabled all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs <-- Click on this link.

Please include the C:\ComboFix.txt in your next reply for further review.

Note: If ComboFix detects Rootkit activitity and asks to reboot the system, please allow this to be done.

A word of warning: Neither I nor sUBs are responsible for any damage you may have caused your machine by running ComboFix on your own.
This tool is not a toy and not for everyday use. ComboFix Should Not be used unless requested by a forum helper

Next:

Click on Start(Vista Orb) >> Run.. >> then copy/paste the following:-

C:\Qoobox\Add-Remove Programs.txt

A text file should open. Post the contents of that file in your next reply.

When completed the above, please post back the following in the order asked for:

  • How is your computer performing now, any further symptoms and or problems encountered?
  • OTL Log from the Custom Script.
  • ComboFix Log.
  • Add-Remove Programs.txt.

  • 0

#13
waynegr
Posted 27 August 2011 - 07:55 AM

waynegr

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 194 posts
Hi done what you asked.

All processes killed
========== OTL ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F}\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\avgnt deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\EPSON SX600FW Series deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\EPSON SX600FW Series (Copy 1) deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\InstallShieldInstallShield deleted successfully.
Starting removal of ActiveX control {E2883E8F-472F-4FB0-9522-AC9BF37916A7}
C:\Windows\Downloaded Program Files\gp.inf not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ms-help\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{314111c7-a502-11d2-bbca-00c04f8ec294}\ not found.
File {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ms-itss\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0A9007C0-4076-11D3-8789-0000F8105754}\ not found.
File {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found not found.
C:\Windows\SysWow64\tmp531.tmp deleted successfully.
C:\Windows\SysWow64\tmp580.tmp deleted successfully.
C:\Windows\SysWow64\tmp5ACF.tmp deleted successfully.
C:\Windows\SysWow64\tmp5AF0.tmp deleted successfully.
C:\Windows\SysWow64\tmp6A37.tmp deleted successfully.
C:\Windows\SysWow64\tmp6A67.tmp deleted successfully.
C:\Windows\SysWow64\tmp7CB1.tmp deleted successfully.
C:\Windows\SysWow64\tmp7CC1.tmp deleted successfully.
C:\Windows\SysWow64\tmp84E.tmp deleted successfully.
C:\Windows\SysWow64\tmp8CC.tmp deleted successfully.
C:\Windows\SysWow64\tmpC294.tmp deleted successfully.
C:\Windows\SysWow64\tmpC2A4.tmp deleted successfully.
C:\Windows\SysWow64\tmpC68C.tmp deleted successfully.
C:\Windows\SysWow64\tmpC6AC.tmp deleted successfully.
C:\Windows\SysWow64\tmpCAC4.tmp deleted successfully.
C:\Windows\SysWow64\tmpCAC5.tmp deleted successfully.
C:\Windows\SysWow64\tmpE0FC.tmp deleted successfully.
C:\Windows\SysWow64\tmpE10D.tmp deleted successfully.
C:\Windows\msdownld.tmp folder deleted successfully.
ADS C:\ProgramData\Temp:26F6D10D deleted successfully.
========== FILES ==========
Invalid Switch: c:
File\Folder Commands not found.
File\Folder [Purity] not found.
File\Folder [ResetHosts] not found.
File\Folder [EmptyFlash] not found.
File\Folder [EmptyTemp] not found.
File\Folder [CreateRestorePoint not found.
File\Folder [Reboot] not found.

OTL by OldTimer - Version 3.2.26.5 log created on 08272011_142327

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...

Did the com bo fix scan, it fixed some errors, then asked me to buy.

Cant see any log ??? But will reboot now.

Copy that in run, but it said its not available, it could be on a hard drive or network, check make sure the disc is installed right, and or that you are connected to the internet, and try again, if you still cant find it, it may have been moved.

Comp does seem far faster, I thought it was slower because all the programs I had on, thats why I got rid of NFS Hot Pursuit and a few other things.

Wayne
  • 0

#14
waynegr
Posted 27 August 2011 - 08:03 AM

waynegr

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 194 posts
Seems the problems are still here after a reboot, can not see find any ComboFix Log. Not sure what you mean by Add-Remove Programs.txt.

Back in three hours from now, have to go to work.

Wayne
  • 0

#15
Dakeyras
Posted 27 August 2011 - 10:44 AM

Dakeyras

    Anti-Malware Mammoth

  • Expert
  • 9,772 posts
Hi, :)

Did the com bo fix scan, it fixed some errors, then asked me to buy.

That most certainly should not occurred.

OK lets get a fresh set of logs so I can better asses the overall situation as follows....we will also try a reset for the 32 bit version of IE as that may help also at this juncture.

Follow the instructions in this article:-

Reset Internet Explorer 9 settings

Scan with TDSSKiller:

Please download TDSSKiller.zip and extract (unzip) it to your Desktop.

  • Right-click on TDSSKiller.exe and select Run as Administrator to launch it.
  • Click on Start Scan, the scan will run.
  • When the scan has finished, if it finds anything please click on the drop down arrow next to Cure and select Skip
  • Now click on Report to open the log file created by TDSSKiller in your root directory C:\
  • To find the log go to Start > Computer > C:
  • Post the contents of that log in your next reply please.
Note: Do not have TDSSKiller remove anything if found at this point in time!

Re-scan with OTL:

  • Right-click on OTL.exe and select Run as Administrator to start OTL.
  • Ensure Include 64bit Scans is selected.
  • Under Output, ensure that Minimal Output is selected.
  • Under Extra Registry section, select Use SafeList.
  • Click the Scan All Users checkbox.
  • Click on Run Scan at the top left hand corner.
  • When done, two Notepad files will open.
    • OTL.txt <-- Will be opened
    • Extra.txt <-- Will be minimized
  • Please post the contents of these 2 Notepad files in your next reply.
When completed the above, please post back the following in the order asked for:

  • How is your computer performing now, any further symptoms and or problems encountered?
  • TDSSKiller Log.
  • Both OTL logs. <-- Post them individually please, IE: one Log per post/reply.

  • 0
Back to Virus, Spyware, Malware Removal · Next Unread Topic →




Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Geeks to Go Community
  2. → Security
  3. → Virus, Spyware, Malware Removal

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP