Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

User cannot access Google [Closed]


  • This topic is locked This topic is locked

#1
Brandon Jones

Brandon Jones

    Member

  • Member
  • PipPip
  • 57 posts
I have a user that reported that she was not able to visit Google. Also our antivirus will not install. Below is the OTL scan. The computer is a member of a domain, and I am logged in as a user that has administrative rights.


OTL logfile created on: 10/24/2012 3:53:21 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = \\hawk\d\csdsupp\D7\3rd Party Tools
Enterprise Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.46 Gb Total Physical Memory | 2.73 Gb Available Physical Memory | 78.68% Memory free
6.93 Gb Paging File | 6.16 Gb Available in Paging File | 88.97% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 148.66 Gb Total Space | 117.72 Gb Free Space | 79.19% Space Free | Partition Type: NTFS

Computer Name: GDN13286 | User Name: brandonj | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012/10/05 16:57:15 | 000,602,112 | ---- | M] (OldTimer Tools) -- \\hawk\d\csdsupp\D7\3rd Party Tools\OTL.exe
PRC - [2012/09/11 02:51:17 | 000,302,160 | ---- | M] (Total Defense, Inc.) -- C:\Program Files\CA\TotalDefense\EndPointClient\EndpointProtection\ccschedulersvc.exe
PRC - [2011/02/25 01:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2010/11/20 08:17:47 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2010/11/20 08:17:31 | 000,173,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rdpclip.exe
PRC - [2010/04/07 08:57:42 | 000,099,896 | ---- | M] (HP) -- C:\Windows\System32\HPSIsvc.exe


========== Modules (No Company Name) ==========

MOD - [2011/03/17 01:11:16 | 004,297,568 | ---- | M] () -- C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
MOD - [2010/10/20 16:45:26 | 008,801,120 | ---- | M] () -- C:\Program Files\Microsoft Office\Office14\1033\GrooveIntlResource.dll


========== Services (SafeList) ==========

SRV - File not found [Auto | Stopped] -- C:\Program Files\CA\SharedComponents\TMEngine\UmxEngine.exe -- (UmxEngine)
SRV - File not found [Auto | Stopped] -- C:\Program Files\CA\SharedComponents\Agent\TDAgent.exe -- (TD Agent Service)
SRV - File not found [Auto | Stopped] -- C:\Program Files\CA\SharedComponents\AMS\win\x86\CAAMSvc.exe -- (CAAMSvc)
SRV - [2012/09/11 02:51:21 | 000,180,224 | ---- | M] (Total Defense, Inc.) [Auto | Stopped] -- C:\Program Files\CA\TotalDefense\EndPointClient\EndpointProtection\isafe.exe -- (isafe)
SRV - [2012/09/11 02:51:17 | 000,302,160 | ---- | M] (Total Defense, Inc.) [Auto | Running] -- C:\Program Files\CA\TotalDefense\EndPointClient\EndpointProtection\ccschedulersvc.exe -- (ccSchedulerSvc)
SRV - [2012/09/11 02:51:16 | 000,220,240 | ---- | M] (Total Defense, Inc.) [Auto | Stopped] -- C:\Program Files\CA\Entitlement\ccprovsp.exe -- (Total Defense Common Elevation Service)
SRV - [2011/12/08 14:09:13 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2011/06/12 12:15:00 | 031,125,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Office\Office14\GROOVE.EXE -- (Microsoft SharePoint Workspace Audit Service)
SRV - [2010/04/07 08:57:42 | 000,099,896 | ---- | M] (HP) [Auto | Running] -- C:\Windows\System32\HPSIsvc.exe -- (HPSIService)
SRV - [2009/07/13 21:16:15 | 000,016,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\StorSvc.dll -- (StorSvc)
SRV - [2009/07/13 21:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009/07/13 21:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2009/07/13 21:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\rdvgkmd.sys -- (VGPU)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\brandonj\AppData\Local\Temp\catchme.sys -- (catchme)
DRV - [2011/10/27 16:07:50 | 000,170,064 | ---- | M] (Total Defense) [File_System | Boot | Running] -- C:\Windows\System32\drivers\KmxAMRT.sys -- (KmxAMRT)
DRV - [2011/10/26 12:51:22 | 000,083,536 | ---- | M] (CA) [File_System | System | Running] -- C:\Windows\System32\drivers\KmxAgent.sys -- (KmxAgent)
DRV - [2011/09/06 22:03:36 | 000,331,344 | ---- | M] (CA) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\KmxCfg.sys -- (KmxCfg)
DRV - [2010/11/20 08:30:15 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus)
DRV - [2010/11/20 08:30:15 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
DRV - [2010/11/20 08:30:15 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc)
DRV - [2010/11/20 08:30:12 | 000,077,184 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Synth3dVsc.sys -- (Synth3dVsc)
DRV - [2010/11/20 06:24:41 | 000,112,640 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tsusbhub.sys -- (tsusbhub)
DRV - [2010/11/20 06:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010/11/20 06:24:40 | 000,027,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV - [2010/11/20 06:21:14 | 000,025,600 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\terminpt.sys -- (terminpt)
DRV - [2010/11/20 06:21:14 | 000,015,872 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV - [2010/11/20 05:14:49 | 000,062,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\dmvsc.sys -- (dmvsc)
DRV - [2010/11/20 05:14:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2010/11/20 05:14:41 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap)
DRV - [2010/03/05 19:40:57 | 000,017,408 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\mvusbews.sys -- (mvusbews)
DRV - [2009/12/30 11:21:18 | 000,027,192 | ---- | M] (VS Revo Group) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\revoflt.sys -- (Revoflt)
DRV - [2009/07/13 18:02:52 | 000,164,864 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\e1k6032.sys -- (e1kexpress)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.gdn.edu
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...Box&FORM=IE8SRC
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0


========== FireFox ==========

FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.1.10111.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2012/04/25 09:47:50 | 000,000,000 | ---D | M]


O1 HOSTS File: ([2012/10/24 15:42:26 | 000,000,098 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (SmartSelect Class) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKCU\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Main present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\PhishingFilter present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: Allow-LogonScript-NetbiosDisabled = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: MaxGPOScriptWait = 1800
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideFastUserSwitching = 1
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoViewContextMenu = 0
O8 - Extra context menu item: Append Link Target to Existing PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Append to Existing PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert Link Target to Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert to Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\System32\VetRedir.dll (Total Defense, Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\System32\VetRedir.dll (Total Defense, Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Windows\System32\VetRedir.dll (Total Defense, Inc.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_16)
O16 - DPF: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_06)
O16 - DPF: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_16)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_16)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 168.26.240.23 168.26.240.20
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = gdn.peachnet.edu
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{33F73D10-61D4-4B46-A4E7-5149ED46E466}: DhcpNameServer = 168.26.240.23 168.26.240.20
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/10 17:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2012/10/24 14:51:38 | 000,000,000 | ---D | C] -- C:\Users\brandonj\AppData\Roaming\Macromedia
[2012/10/24 14:43:20 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2012/10/24 14:43:19 | 000,000,000 | ---D | C] -- C:\Users\brandonj\AppData\Local\temp
[2012/10/24 14:32:09 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2012/10/24 14:32:09 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2012/10/24 14:32:09 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2012/10/24 14:31:55 | 000,000,000 | ---D | C] -- C:\Qoobox
[2012/10/24 14:31:44 | 000,000,000 | ---D | C] -- C:\Windows\erdnt
[2012/10/24 11:49:48 | 000,000,000 | ---D | C] -- C:\Users\brandonj\Desktop\RK_Quarantine
[2012/10/24 11:41:24 | 000,000,000 | ---D | C] -- C:\ProgramData\HitmanPro
[2012/10/23 18:00:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Total Defense for Business
[2012/10/23 17:33:21 | 000,000,000 | ---D | C] -- C:\Program Files\CA
[2012/10/23 17:16:00 | 000,027,192 | ---- | C] (VS Revo Group) -- C:\Windows\System32\drivers\revoflt.sys
[2012/10/23 17:16:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
[2012/10/23 17:15:59 | 000,000,000 | ---D | C] -- C:\Program Files\VS Revo Group
[2012/10/23 14:45:08 | 000,000,000 | ---D | C] -- C:\Users\brandonj\AppData\Roaming\Malwarebytes
[2012/10/23 14:44:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012/10/23 14:44:54 | 000,022,856 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2012/10/23 14:44:54 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2012/10/23 14:44:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2012/10/11 03:00:42 | 003,968,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2012/10/11 03:00:41 | 003,914,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
[2012/10/03 11:30:17 | 000,000,000 | ---D | C] -- \aimnetwork
[2012/09/27 03:00:32 | 000,245,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\OxpsConverter.exe
[2012/09/25 19:19:56 | 000,000,000 | ---D | C] -- C:\Users\brandonj\AppData\Local\Adobe
[2012/09/25 19:19:55 | 000,000,000 | ---D | C] -- C:\Users\brandonj\AppData\Roaming\Adobe
[2012/09/25 19:19:53 | 000,000,000 | ---D | C] -- C:\Users\brandonj\AppData\Roaming\Apple Computer
[2012/09/25 19:19:46 | 000,000,000 | R--D | C] -- C:\Users\brandonj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2012/09/25 19:19:46 | 000,000,000 | R--D | C] -- C:\Users\brandonj\Searches
[2012/09/25 19:19:46 | 000,000,000 | R--D | C] -- C:\Users\brandonj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2012/09/25 19:19:46 | 000,000,000 | -H-D | C] -- C:\Users\brandonj\Application Data\Microsoft\Internet Explorer\Quick Launch\User Pinned
[2012/09/25 19:19:37 | 000,000,000 | ---D | C] -- C:\Users\brandonj\AppData\Roaming\Identities
[2012/09/25 19:19:36 | 000,000,000 | R--D | C] -- C:\Users\brandonj\Contacts
[2012/09/25 19:17:26 | 000,000,000 | ---D | C] -- C:\Users\brandonj\AppData\Local\VirtualStore
[2012/09/25 19:17:22 | 000,000,000 | -HSD | C] -- C:\Users\brandonj\AppData\Local\Temporary Internet Files
[2012/09/25 19:17:22 | 000,000,000 | -HSD | C] -- C:\Users\brandonj\Templates
[2012/09/25 19:17:22 | 000,000,000 | -HSD | C] -- C:\Users\brandonj\Start Menu
[2012/09/25 19:17:22 | 000,000,000 | -HSD | C] -- C:\Users\brandonj\SendTo
[2012/09/25 19:17:22 | 000,000,000 | -HSD | C] -- C:\Users\brandonj\Recent
[2012/09/25 19:17:22 | 000,000,000 | -HSD | C] -- C:\Users\brandonj\PrintHood
[2012/09/25 19:17:22 | 000,000,000 | -HSD | C] -- C:\Users\brandonj\NetHood
[2012/09/25 19:17:22 | 000,000,000 | -HSD | C] -- C:\Users\brandonj\Documents\My Videos
[2012/09/25 19:17:22 | 000,000,000 | -HSD | C] -- C:\Users\brandonj\Documents\My Pictures
[2012/09/25 19:17:22 | 000,000,000 | -HSD | C] -- C:\Users\brandonj\Documents\My Music
[2012/09/25 19:17:22 | 000,000,000 | -HSD | C] -- C:\Users\brandonj\My Documents
[2012/09/25 19:17:22 | 000,000,000 | -HSD | C] -- C:\Users\brandonj\Local Settings
[2012/09/25 19:17:22 | 000,000,000 | -HSD | C] -- C:\Users\brandonj\AppData\Local\History
[2012/09/25 19:17:22 | 000,000,000 | -HSD | C] -- C:\Users\brandonj\Cookies
[2012/09/25 19:17:22 | 000,000,000 | -HSD | C] -- C:\Users\brandonj\Application Data
[2012/09/25 19:17:22 | 000,000,000 | -HSD | C] -- C:\Users\brandonj\AppData\Local\Application Data
[2012/09/25 19:17:21 | 000,000,000 | --SD | C] -- C:\Users\brandonj\AppData\Roaming\Microsoft
[2012/09/25 19:17:21 | 000,000,000 | R--D | C] -- C:\Users\brandonj\Videos
[2012/09/25 19:17:21 | 000,000,000 | R--D | C] -- C:\Users\brandonj\Saved Games
[2012/09/25 19:17:21 | 000,000,000 | R--D | C] -- C:\Users\brandonj\Pictures
[2012/09/25 19:17:21 | 000,000,000 | R--D | C] -- C:\Users\brandonj\Music
[2012/09/25 19:17:21 | 000,000,000 | R--D | C] -- C:\Users\brandonj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2012/09/25 19:17:21 | 000,000,000 | R--D | C] -- C:\Users\brandonj\Links
[2012/09/25 19:17:21 | 000,000,000 | R--D | C] -- C:\Users\brandonj\Favorites
[2012/09/25 19:17:21 | 000,000,000 | R--D | C] -- C:\Users\brandonj\Downloads
[2012/09/25 19:17:21 | 000,000,000 | R--D | C] -- C:\Users\brandonj\Documents
[2012/09/25 19:17:21 | 000,000,000 | R--D | C] -- C:\Users\brandonj\Desktop
[2012/09/25 19:17:21 | 000,000,000 | R--D | C] -- C:\Users\brandonj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2012/09/25 19:17:21 | 000,000,000 | -H-D | C] -- C:\Users\brandonj\AppData
[2012/09/25 19:17:21 | 000,000,000 | ---D | C] -- C:\Users\brandonj\AppData\Roaming\Turning Technologies
[2012/09/25 19:17:21 | 000,000,000 | ---D | C] -- C:\Users\brandonj\AppData\Local\Microsoft Help
[2012/09/25 19:17:21 | 000,000,000 | ---D | C] -- C:\Users\brandonj\AppData\Local\Microsoft
[2012/09/25 19:17:21 | 000,000,000 | ---D | C] -- C:\Users\brandonj\AppData\Roaming\Media Center Programs
[2012/09/25 03:00:36 | 001,638,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2012/09/25 03:00:36 | 000,627,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2012/09/25 03:00:36 | 000,132,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2012/09/25 03:00:36 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2012/09/25 03:00:35 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll

========== Files - Modified Within 30 Days ==========

[2012/10/24 15:54:50 | 000,012,272 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/10/24 15:54:50 | 000,012,272 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/10/24 15:51:44 | 000,660,068 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012/10/24 15:51:44 | 000,120,996 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012/10/24 15:49:45 | 000,538,941 | ---- | M] () -- C:\Users\brandonj\Desktop\AdwCleaner.exe
[2012/10/24 15:48:11 | 000,408,408 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2012/10/24 15:48:00 | 000,000,238 | ---- | M] () -- C:\Windows\tasks\Reboot Doit.job
[2012/10/24 15:47:59 | 000,000,272 | ---- | M] () -- C:\Windows\tasks\HS Audit GPO.job
[2012/10/24 15:47:56 | 000,000,228 | ---- | M] () -- C:\Windows\tasks\Reboot Check.job
[2012/10/24 15:47:53 | 000,000,428 | ---- | M] () -- C:\Windows\tasks\CATD r12 Update.job
[2012/10/24 15:47:34 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012/10/24 15:47:27 | 2789,941,248 | -HS- | M] () -- C:\hiberfil.sys
[2012/10/24 15:46:24 | 000,081,461 | ---- | M] () -- C:\Windows\System32\drivers\kmxcfg.u2k0
[2012/10/24 15:46:24 | 000,060,508 | ---- | M] () -- C:\Windows\System32\drivers\KmxAgent.asc
[2012/10/24 15:46:24 | 000,000,085 | ---- | M] () -- C:\Windows\System32\drivers\kmxcfg.u2k7
[2012/10/24 15:46:24 | 000,000,085 | ---- | M] () -- C:\Windows\System32\drivers\kmxcfg.u2k6
[2012/10/24 15:46:24 | 000,000,085 | ---- | M] () -- C:\Windows\System32\drivers\kmxcfg.u2k5
[2012/10/24 15:46:24 | 000,000,085 | ---- | M] () -- C:\Windows\System32\drivers\kmxcfg.u2k4
[2012/10/24 15:46:24 | 000,000,085 | ---- | M] () -- C:\Windows\System32\drivers\kmxcfg.u2k3
[2012/10/24 15:46:24 | 000,000,085 | ---- | M] () -- C:\Windows\System32\drivers\kmxcfg.u2k2
[2012/10/24 15:46:24 | 000,000,085 | ---- | M] () -- C:\Windows\System32\drivers\kmxcfg.u2k1
[2012/10/24 15:46:24 | 000,000,049 | ---- | M] () -- C:\Windows\System32\drivers\kmxzone.u2k7
[2012/10/24 15:46:24 | 000,000,049 | ---- | M] () -- C:\Windows\System32\drivers\kmxzone.u2k6
[2012/10/24 15:46:24 | 000,000,049 | ---- | M] () -- C:\Windows\System32\drivers\kmxzone.u2k5
[2012/10/24 15:46:24 | 000,000,049 | ---- | M] () -- C:\Windows\System32\drivers\kmxzone.u2k4
[2012/10/24 15:46:24 | 000,000,049 | ---- | M] () -- C:\Windows\System32\drivers\kmxzone.u2k3
[2012/10/24 15:46:24 | 000,000,049 | ---- | M] () -- C:\Windows\System32\drivers\kmxzone.u2k2
[2012/10/24 15:46:24 | 000,000,049 | ---- | M] () -- C:\Windows\System32\drivers\kmxzone.u2k1
[2012/10/24 15:46:24 | 000,000,049 | ---- | M] () -- C:\Windows\System32\drivers\kmxzone.u2k0
[2012/10/24 15:42:26 | 000,000,098 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts
[2012/10/23 18:00:50 | 000,009,110 | ---- | M] () -- C:\Windows\System32\wpkg.xml
[2012/10/23 17:32:40 | 000,026,798 | RHS- | M] () -- C:\ProgramData\ntuser.pol
[2012/10/23 17:16:01 | 000,001,234 | ---- | M] () -- C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
[2012/10/23 14:45:36 | 000,001,071 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012/10/23 14:41:25 | 000,001,411 | ---- | M] () -- C:\Users\brandonj\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2012/10/23 14:40:38 | 000,053,248 | ---- | M] () -- C:\Windows\System32\zlib.dll
[2012/09/29 19:54:26 | 000,022,856 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2012/09/25 19:17:24 | 000,029,084 | RHS- | M] () -- C:\Users\brandonj\ntuser.pol

========== Files Created - No Company Name ==========

[2012/10/24 15:50:53 | 000,538,941 | ---- | C] () -- C:\Users\brandonj\Desktop\AdwCleaner.exe
[2012/10/24 15:25:59 | 000,000,238 | ---- | C] () -- C:\Windows\tasks\Reboot Doit.job
[2012/10/24 15:25:58 | 000,000,272 | ---- | C] () -- C:\Windows\tasks\HS Audit GPO.job
[2012/10/24 15:25:56 | 000,000,228 | ---- | C] () -- C:\Windows\tasks\Reboot Check.job
[2012/10/24 15:25:55 | 000,000,428 | ---- | C] () -- C:\Windows\tasks\CATD r12 Update.job
[2012/10/24 14:32:09 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2012/10/24 14:32:09 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2012/10/24 14:32:09 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2012/10/24 14:32:09 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2012/10/24 14:32:09 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2012/10/23 17:31:52 | 000,081,461 | ---- | C] () -- C:\Windows\System32\drivers\kmxcfg.u2k0
[2012/10/23 17:31:52 | 000,000,085 | ---- | C] () -- C:\Windows\System32\drivers\kmxcfg.u2k7
[2012/10/23 17:31:52 | 000,000,085 | ---- | C] () -- C:\Windows\System32\drivers\kmxcfg.u2k6
[2012/10/23 17:31:52 | 000,000,085 | ---- | C] () -- C:\Windows\System32\drivers\kmxcfg.u2k5
[2012/10/23 17:31:52 | 000,000,085 | ---- | C] () -- C:\Windows\System32\drivers\kmxcfg.u2k4
[2012/10/23 17:31:52 | 000,000,085 | ---- | C] () -- C:\Windows\System32\drivers\kmxcfg.u2k3
[2012/10/23 17:31:52 | 000,000,085 | ---- | C] () -- C:\Windows\System32\drivers\kmxcfg.u2k2
[2012/10/23 17:31:52 | 000,000,085 | ---- | C] () -- C:\Windows\System32\drivers\kmxcfg.u2k1
[2012/10/23 17:16:01 | 000,001,234 | ---- | C] () -- C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
[2012/10/23 14:44:55 | 000,001,071 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012/10/23 14:41:25 | 000,001,411 | ---- | C] () -- C:\Users\brandonj\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2012/10/23 14:40:38 | 000,053,248 | ---- | C] () -- C:\Windows\System32\zlib.dll
[2012/10/15 05:06:47 | 000,001,547 | ---- | C] () -- C:\Users\Public\Desktop\ADP Self Service.lnk
[2012/09/25 19:19:47 | 000,001,417 | ---- | C] () -- C:\Users\brandonj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2012/09/25 19:17:24 | 000,029,084 | RHS- | C] () -- C:\Users\brandonj\ntuser.pol
[2012/09/25 19:17:21 | 000,000,290 | ---- | C] () -- C:\Users\brandonj\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
[2012/09/25 19:17:21 | 000,000,272 | ---- | C] () -- C:\Users\brandonj\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
[2012/09/25 17:26:25 | 001,872,368 | ---- | C] () -- C:\Windows\System32\gordon.scr
[2012/08/16 03:03:04 | 000,000,118 | ---- | C] () -- C:\Windows\System32\MRT.INI
[2012/07/09 11:32:37 | 000,000,000 | ---- | C] () -- C:\Windows\HPMProp.INI
[2012/06/01 06:07:07 | 000,327,680 | ---- | C] () -- C:\Windows\System32\AdministrativeUnlock.dll
[2012/04/25 09:37:04 | 001,511,424 | ---- | C] () -- C:\Windows\System32\HP1100SM.EXE
[2012/04/25 09:37:04 | 000,147,456 | ---- | C] () -- C:\Windows\System32\HP1100LM.DLL
[2012/04/25 09:36:47 | 000,284,160 | ---- | C] () -- C:\Windows\System32\mvhlewsi.dll
[2012/04/25 09:36:41 | 000,081,920 | ---- | C] () -- C:\Windows\System32\mvusbews.dll
[2012/04/25 09:36:40 | 000,047,104 | ---- | C] () -- C:\Windows\System32\HP1100SMs.dll
[2012/04/25 09:33:45 | 000,026,798 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2012/03/15 12:54:44 | 000,562,056 | ---- | C] () -- \1112.temp
[2012/03/08 12:12:42 | 000,277,504 | ---- | C] () -- C:\Windows\System32\MySetup.exe
[2011/12/08 15:07:21 | 000,080,896 | ---- | C] () -- C:\Windows\System32\RDVGHelper.exe
[2011/12/08 15:06:39 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe

========== ZeroAccess Check ==========

[2009/07/14 00:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012/06/09 00:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 08:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009/07/13 21:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== LOP Check ==========

[2012/05/10 03:08:43 | 000,000,000 | ---D | M] -- C:\Users\brandonj\AppData\Roaming\Turning Technologies

========== Purity Check ==========



< End of report >






  • 0

Advertisements


#2
Brandon Jones

Brandon Jones

    Member

  • Topic Starter
  • Member
  • PipPip
  • 57 posts
Please mark this closed. I am going to have to reimage the computer.
  • 0

#3
godawgs

godawgs

    Teacher

  • Retired Staff
  • 8,228 posts
Closed at the request of the original poster.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP