Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Scaling Idle Cpu Speed

Started by Snappz , Nov 15 2012 01:33 PM

  • Please log in to reply

#1
Snappz
Posted 15 November 2012 - 01:33 PM

Snappz

    New Member

  • Member
  • Pip
  • 2 posts
When my computer is idling the cpu performance speed is constantly scaling from as low as 3% to as high as 96%. My friend downloaded a program from youtube for a code generator and it has been causing me computer problems since. I ran a MBAM and it found 2 hijack registry errors I removed them but the problem persists. I downloaded CCLeaner to clean up some space and the registry, ran it a couple of time then my antivirus (AVG), suggested to download AVG tuneup to speed up my PC and I did, editing program access, minimizing background programs and optimizing performance over visualization.


OTL logfile created on: 11/15/2012 12:12:54 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\D820\Downloads
Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1.99 Gb Total Physical Memory | 0.84 Gb Available Physical Memory | 42.21% Memory free
3.98 Gb Paging File | 2.63 Gb Available in Paging File | 66.06% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 74.43 Gb Total Space | 32.69 Gb Free Space | 43.92% Space Free | Partition Type: NTFS

Computer Name: D820-PC | User Name: D820 | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012/11/15 12:11:21 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\D820\Downloads\OTL.exe
PRC - [2012/10/31 15:15:08 | 001,242,136 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
PRC - [2012/09/29 19:54:26 | 000,766,536 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
PRC - [2012/09/29 19:54:26 | 000,676,936 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2012/09/29 19:54:26 | 000,399,432 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
PRC - [2012/08/23 11:31:24 | 001,532,280 | ---- | M] (AVG) -- C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesService32.exe
PRC - [2012/08/23 11:31:24 | 001,222,008 | ---- | M] (AVG) -- C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesApp32.exe
PRC - [2012/08/13 03:24:48 | 005,167,736 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgidsagent.exe
PRC - [2012/08/07 03:39:46 | 004,370,552 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgui.exe
PRC - [2012/07/31 03:37:02 | 002,596,984 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgtray.exe
PRC - [2012/07/26 03:23:08 | 000,758,392 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgrsx.exe
PRC - [2012/06/13 03:48:50 | 002,321,560 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgfws.exe
PRC - [2012/06/13 03:48:24 | 001,255,544 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgnsx.exe
PRC - [2012/03/19 05:18:12 | 000,979,840 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgemcx.exe
PRC - [2012/02/14 04:53:38 | 000,193,288 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgwdsvc.exe
PRC - [2012/02/14 04:52:56 | 000,493,920 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgcfgex.exe
PRC - [2012/02/14 04:52:38 | 000,338,784 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgcsrvx.exe
PRC - [2012/02/13 23:38:50 | 000,416,584 | ---- | M] (Auslogics) -- C:\Program Files\AVG\AVG2012\PCTuneup\MicroScanner.exe
PRC - [2011/02/25 22:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009/07/13 18:14:42 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe


========== Modules (No Company Name) ==========

MOD - [2012/10/31 15:15:05 | 000,460,312 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\23.0.1271.64\ppgooglenaclpluginchrome.dll
MOD - [2012/10/31 15:15:04 | 012,455,448 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\23.0.1271.64\PepperFlash\pepflashplayer.dll
MOD - [2012/10/31 15:15:02 | 004,007,448 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\23.0.1271.64\pdf.dll
MOD - [2012/10/31 15:13:47 | 000,587,288 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\23.0.1271.64\libglesv2.dll
MOD - [2012/10/31 15:13:46 | 000,123,928 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\23.0.1271.64\libegl.dll
MOD - [2012/10/31 15:13:35 | 000,156,712 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\23.0.1271.64\avutil-51.dll
MOD - [2012/10/31 15:13:34 | 000,274,984 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\23.0.1271.64\avformat-54.dll
MOD - [2012/10/31 15:13:32 | 002,168,360 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\23.0.1271.64\avcodec-54.dll


========== Services (SafeList) ==========

SRV - [2012/11/13 13:10:25 | 000,711,112 | ---- | M] () [Auto | Stopped] -- C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\13.2.0\ToolbarUpdater.exe -- (vToolbarUpdater13.2.0)
SRV - [2012/09/29 19:54:26 | 000,676,936 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2012/09/29 19:54:26 | 000,399,432 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2012/08/23 11:31:24 | 001,532,280 | ---- | M] (AVG) [Auto | Running] -- C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesService32.exe -- (TuneUp.UtilitiesSvc)
SRV - [2012/08/13 03:24:48 | 005,167,736 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG2012\avgidsagent.exe -- (AVGIDSAgent)
SRV - [2012/07/27 13:51:26 | 000,063,960 | ---- | M] (Adobe Systems Incorporated) [Disabled | Stopped] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2012/06/13 03:48:50 | 002,321,560 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG2012\avgfws.exe -- (avgfws)
SRV - [2012/02/14 04:53:38 | 000,193,288 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG2012\avgwdsvc.exe -- (avgwd)
SRV - [2012/01/06 13:58:54 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2009/07/13 18:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009/07/13 18:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2009/07/13 18:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)


========== Driver Services (SafeList) ==========

DRV - [2012/11/13 13:10:25 | 000,026,984 | ---- | M] (AVG Technologies) [Kernel | System | Running] -- C:\Windows\System32\drivers\avgtpx86.sys -- (avgtp)
DRV - [2012/09/29 19:54:26 | 000,022,856 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2012/08/24 15:43:18 | 000,301,920 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\System32\drivers\avgtdix.sys -- (Avgtdix)
DRV - [2012/07/26 03:21:30 | 000,237,408 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\System32\drivers\avgldx86.sys -- (Avgldx86)
DRV - [2012/07/04 15:26:12 | 000,010,088 | ---- | M] (TuneUp Software) [Kernel | On_Demand | Running] -- C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver32.sys -- (TuneUpUtilitiesDrv)
DRV - [2012/04/19 04:50:26 | 000,024,896 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\avgidshx.sys -- (AVGIDSHX)
DRV - [2012/01/31 04:46:50 | 000,031,952 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\System32\drivers\avgrkx86.sys -- (Avgrkx86)
DRV - [2011/12/23 13:32:14 | 000,041,040 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\System32\drivers\avgmfx86.sys -- (Avgmfx86)
DRV - [2011/12/23 13:32:08 | 000,017,232 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\avgidsshimx.sys -- (AVGIDSShim)
DRV - [2011/12/23 13:32:06 | 000,024,144 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\avgidsfilterx.sys -- (AVGIDSFilter)
DRV - [2011/12/23 13:32:00 | 000,139,856 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\avgidsdriverx.sys -- (AVGIDSDriver)
DRV - [2011/11/25 00:26:04 | 000,013,440 | ---- | M] (June Fabrics Technology Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\pneteth.sys -- (pneteth)
DRV - [2011/05/23 01:03:28 | 000,047,968 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\System32\drivers\avgfwd6x.sys -- (Avgfwfd)
DRV - [2010/08/06 12:22:14 | 000,014,336 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lgandbus.sys -- (Andbus)
DRV - [2010/05/22 14:48:20 | 000,070,656 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ew_jubusenum.sys -- (huawei_enumerator)
DRV - [2010/04/30 16:52:06 | 000,206,336 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbnet.sys -- (ewusbnet)
DRV - [2010/03/25 10:08:38 | 000,105,984 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbmdm.sys -- (hwdatacard)
DRV - [2010/03/20 11:56:04 | 000,101,504 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ew_hwusbdev.sys -- (ew_hwusbdev)
DRV - [2010/01/25 06:11:32 | 000,019,968 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lgandgps.sys -- (AndGps)
DRV - [2010/01/25 06:11:30 | 000,020,864 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lganddiag.sys -- (AndDiag)
DRV - [2010/01/25 06:11:24 | 000,024,960 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lgandmodem.sys -- (ANDModem)
DRV - [2009/12/01 09:51:24 | 000,031,312 | ---- | M] (Google Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\androidusb.sys -- (androidusb)
DRV - [2009/09/09 17:19:16 | 000,069,664 | ---- | M] (O2Micro) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\oz776.sys -- (guardian2)
DRV - [2009/07/13 18:19:10 | 000,175,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus)
DRV - [2009/07/13 18:19:10 | 000,040,896 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
DRV - [2009/07/13 18:19:10 | 000,028,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc)
DRV - [2009/07/13 16:52:10 | 000,014,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\vwifimp.sys -- (vwifimp)
DRV - [2009/07/13 16:51:11 | 000,034,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2009/07/13 16:28:47 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap)
DRV - [2009/07/13 16:28:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = E5 F9 A0 33 FD D3 CC 01 [binary data]
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...Box&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://isearch.avg.c...pr&d=2012-11-13 13:10:42&v=13.2.0.4&sap=dsp&q={searchTerms}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local


========== FireFox ==========

FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\13.2.0\\npsitesafety.dll ()
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKLM\Software\MozillaPlugins\BYOND: C:\Program Files\BYOND\bin\npbyond.dll (BYOND)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Users\D820\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O3DPlugin: C:\Users\D820\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\D820\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\D820\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C:\Program Files\AVG\AVG2012\Firefox4\ [2012/09/27 09:45:49 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\avg@toolbar: C:\ProgramData\AVG Secure Search\FireFoxExt\13.2.0.4 [2012/11/13 13:11:00 | 000,000,000 | ---D | M]


========== Chrome ==========

CHR - homepage: http://www.google.com
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}&sugkey={google:suggestAPIKeyParameter}
CHR - homepage: http://www.google.com
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\23.0.1271.64\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\23.0.1271.64\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\23.0.1271.64\gcswf32.dll
CHR - plugin: Shockwave Flash (Disabled) = C:\Users\D820\AppData\Local\Google\Chrome\User Data\PepperFlash\11.2.31.144\pepflashplayer.dll
CHR - plugin: AVG Internet Security (Enabled) = C:\Users\D820\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla\12.0.0.1901_0\plugins/avgnpss.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll

O1 HOSTS File: ([2009/06/10 14:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG2012\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\13.2.0.4\AVG Secure Search_toolbar.dll ()
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\13.2.0.4\AVG Secure Search_toolbar.dll ()
O4 - HKLM..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG2012\avgtray.exe (AVG Technologies CZ, s.r.o.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 192.168.2.2
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4481D645-C09F-42E4-B099-A94EFB31E78F}: DhcpNameServer = 192.168.2.1 192.168.2.2
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C2FACC8B-3D4D-478A-813A-5E4DDC0E30E5}: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D47DBCFA-1904-4541-94AD-FDBEC2523FAE}: DhcpNameServer = 97.64.183.164 97.64.209.37
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG2012\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\13.2.0\ViProtocol.dll ()
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O27 - HKLM IFEO\AcroRd32.exe: Debugger - C:\Program Files\AVG\AVG PC TuneUp\TUAutoReactivator32.exe (AVG)
O27 - HKLM IFEO\excel.exe: Debugger - C:\Program Files\AVG\AVG PC TuneUp\TUAutoReactivator32.exe (AVG)
O27 - HKLM IFEO\infopath.exe: Debugger - C:\Program Files\AVG\AVG PC TuneUp\TUAutoReactivator32.exe (AVG)
O27 - HKLM IFEO\msaccess.exe: Debugger - C:\Program Files\AVG\AVG PC TuneUp\TUAutoReactivator32.exe (AVG)
O27 - HKLM IFEO\msoxmled.exe: Debugger - C:\Program Files\AVG\AVG PC TuneUp\TUAutoReactivator32.exe (AVG)
O27 - HKLM IFEO\mspub.exe: Debugger - C:\Program Files\AVG\AVG PC TuneUp\TUAutoReactivator32.exe (AVG)
O27 - HKLM IFEO\mstore.exe: Debugger - C:\Program Files\AVG\AVG PC TuneUp\TUAutoReactivator32.exe (AVG)
O27 - HKLM IFEO\outlook.exe: Debugger - C:\Program Files\AVG\AVG PC TuneUp\TUAutoReactivator32.exe (AVG)
O27 - HKLM IFEO\powerpnt.exe: Debugger - C:\Program Files\AVG\AVG PC TuneUp\TUAutoReactivator32.exe (AVG)
O27 - HKLM IFEO\roxio_central36.exe: Debugger - C:\Program Files\AVG\AVG PC TuneUp\TUAutoReactivator32.exe (AVG)
O27 - HKLM IFEO\taskmgr.exe: Debugger - C:\Program Files\AVG\AVG PC TuneUp\PMLauncher.exe (AVG)
O27 - HKLM IFEO\uninst.exe: Debugger - C:\Program Files\AVG\AVG PC TuneUp\TUAutoReactivator32.exe (AVG)
O27 - HKLM IFEO\winword.exe: Debugger - C:\Program Files\AVG\AVG PC TuneUp\TUAutoReactivator32.exe (AVG)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/10 14:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{3fd0e513-98c4-11e1-ac45-00164192f6a1}\Shell - "" = AutoRun
O33 - MountPoints2\{3fd0e513-98c4-11e1-ac45-00164192f6a1}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{3fd0e543-98c4-11e1-ac45-00164192f6a1}\Shell - "" = AutoRun
O33 - MountPoints2\{3fd0e543-98c4-11e1-ac45-00164192f6a1}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{9c3bcce8-297c-11e2-ae5f-00164192f6a1}\Shell - "" = autorun
O33 - MountPoints2\{9c3bcce8-297c-11e2-ae5f-00164192f6a1}\Shell\AutoRun\command - "" = E:\.\amvtransform.exe
O33 - MountPoints2\E\Shell - "" = autorun
O33 - MountPoints2\E\Shell\AutoRun\command - "" = E:\.\amvtransform.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG2012\avgrsx.exe /sync /restart)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2012/11/14 18:18:00 | 000,032,120 | ---- | C] (AVG) -- C:\Windows\System32\TURegOpt.exe
[2012/11/14 18:17:52 | 000,021,880 | ---- | C] (AVG) -- C:\Windows\System32\authuitu.dll
[2012/11/14 18:17:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp
[2012/11/14 18:16:49 | 000,000,000 | ---D | C] -- C:\Users\D820\AppData\Roaming\AVG
[2012/11/14 18:14:33 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG
[2012/11/14 18:14:25 | 000,000,000 | -HSD | C] -- C:\ProgramData\{D1D4879F-2279-49C9-AEBF-3B95C84EAA8F}
[2012/11/14 17:05:44 | 000,000,000 | ---D | C] -- C:\Windows\pss
[2012/11/14 13:25:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
[2012/11/14 13:25:14 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2012/11/13 13:11:11 | 000,000,000 | ---D | C] -- C:\Users\D820\AppData\Local\AVG Secure Search
[2012/11/13 13:10:59 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG Secure Search
[2012/11/13 13:10:40 | 000,026,984 | ---- | C] (AVG Technologies) -- C:\Windows\System32\drivers\avgtpx86.sys
[2012/11/13 13:10:36 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\AVG Secure Search
[2012/11/13 13:10:33 | 000,000,000 | ---D | C] -- C:\Program Files\AVG Secure Search
[2012/11/10 19:06:18 | 000,000,000 | ---D | C] -- C:\Users\D820\Documents\BYOND
[2012/11/10 19:04:59 | 000,000,000 | ---D | C] -- C:\Program Files\BYOND
[2012/11/10 19:04:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BYOND
[2012/11/08 14:31:58 | 000,000,000 | ---D | C] -- C:\Windows\Minidump
[2012/11/07 00:28:54 | 000,000,000 | ---D | C] -- C:\Windows\System32\SPReview
[2012/11/04 08:06:04 | 000,000,000 | ---D | C] -- C:\Users\D820\Desktop\New folder
[2012/11/03 11:34:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2012/11/03 11:32:19 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2012/11/03 11:32:17 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2012/11/03 11:32:17 | 000,000,000 | ---D | C] -- C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
[2012/11/03 08:30:27 | 000,000,000 | ---D | C] -- C:\Users\D820\AppData\Roaming\Mozilla
[2012/10/28 18:50:37 | 000,000,000 | ---D | C] -- C:\Windows\System32\appmgmt
[2012/10/19 04:14:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Alarm Clock
[2012/10/19 04:14:12 | 000,000,000 | ---D | C] -- C:\Program Files\Alarm Clock

========== Files - Modified Within 30 Days ==========

[2012/11/15 11:49:20 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012/11/15 11:30:03 | 000,000,904 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1273276732-2802885136-3562276161-1000UA.job
[2012/11/15 09:07:45 | 100,345,739 | ---- | M] () -- C:\Windows\System32\drivers\AVG\incavi.avm
[2012/11/15 03:30:03 | 000,000,852 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1273276732-2802885136-3562276161-1000Core.job
[2012/11/14 22:29:39 | 000,013,760 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/11/14 22:29:39 | 000,013,760 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/11/14 20:24:05 | 000,000,882 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012/11/14 20:24:05 | 000,000,878 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012/11/14 18:17:24 | 000,002,175 | ---- | M] () -- C:\Users\Public\Desktop\AVG 1-Click Maintenance.lnk
[2012/11/14 18:17:24 | 000,002,127 | ---- | M] () -- C:\Users\Public\Desktop\AVG PC TuneUp.lnk
[2012/11/14 15:20:10 | 000,001,314 | ---- | M] () -- C:\Users\D820\Desktop\cc_20121114_151958.reg
[2012/11/14 14:16:04 | 000,038,920 | ---- | M] () -- C:\Users\D820\Desktop\cc_20121114_141539.reg
[2012/11/14 13:25:22 | 000,000,969 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2012/11/13 13:22:47 | 000,629,730 | ---- | M] () -- C:\Windows\System32\drivers\AVG\iavifw.avm
[2012/11/13 13:10:25 | 000,026,984 | ---- | M] (AVG Technologies) -- C:\Windows\System32\drivers\avgtpx86.sys
[2012/11/11 23:50:48 | 000,146,265 | ---- | M] () -- C:\Windows\System32\drivers\AVG\iavichjg.avm
[2012/11/11 11:27:49 | 000,702,600 | ---- | M] () -- C:\Windows\System32\perfh00C.dat
[2012/11/11 11:27:49 | 000,699,362 | ---- | M] () -- C:\Windows\System32\perfh013.dat
[2012/11/11 11:27:49 | 000,697,278 | ---- | M] () -- C:\Windows\System32\perfh010.dat
[2012/11/11 11:27:49 | 000,684,128 | ---- | M] () -- C:\Windows\System32\perfh019.dat
[2012/11/11 11:27:49 | 000,652,006 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2012/11/11 11:27:49 | 000,640,350 | ---- | M] () -- C:\Windows\System32\perfh00E.dat
[2012/11/11 11:27:49 | 000,624,178 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012/11/11 11:27:49 | 000,618,372 | ---- | M] () -- C:\Windows\System32\perfh01F.dat
[2012/11/11 11:27:49 | 000,442,656 | ---- | M] () -- C:\Windows\System32\perfh001.dat
[2012/11/11 11:27:49 | 000,148,444 | ---- | M] () -- C:\Windows\System32\perfc00E.dat
[2012/11/11 11:27:49 | 000,133,074 | ---- | M] () -- C:\Windows\System32\perfc013.dat
[2012/11/11 11:27:49 | 000,132,650 | ---- | M] () -- C:\Windows\System32\perfc019.dat
[2012/11/11 11:27:49 | 000,130,274 | ---- | M] () -- C:\Windows\System32\perfc00C.dat
[2012/11/11 11:27:49 | 000,129,674 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2012/11/11 11:27:49 | 000,127,278 | ---- | M] () -- C:\Windows\System32\perfc010.dat
[2012/11/11 11:27:49 | 000,121,660 | ---- | M] () -- C:\Windows\System32\perfc01F.dat
[2012/11/11 11:27:49 | 000,106,522 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012/11/11 11:27:49 | 000,079,118 | ---- | M] () -- C:\Windows\System32\perfc001.dat
[2012/11/10 19:04:59 | 000,001,654 | ---- | M] () -- C:\Users\Public\Desktop\BYOND.lnk
[2012/11/09 13:22:26 | 000,002,324 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2012/11/03 15:56:42 | 000,001,071 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012/11/03 13:26:24 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2012/11/03 11:34:22 | 000,001,753 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
[2012/11/02 19:57:16 | 000,106,210 | ---- | M] () -- C:\Users\D820\Desktop\Mcllelan.xps
[2012/11/02 12:03:19 | 000,000,010 | ---- | M] () -- C:\Windows\popcinfo.dat
[2012/10/20 18:32:42 | 004,000,286 | ---- | M] () -- C:\Users\D820\Desktop\6_Foot_7_Foot-Lil_Wayne.mp3
[2012/10/18 23:01:18 | 000,104,984 | ---- | M] () -- C:\Users\D820\Desktop\Mcllean to add older wireless routers.xps

========== Files Created - No Company Name ==========

[2012/11/14 18:17:24 | 000,002,175 | ---- | C] () -- C:\Users\Public\Desktop\AVG 1-Click Maintenance.lnk
[2012/11/14 18:17:24 | 000,002,127 | ---- | C] () -- C:\Users\Public\Desktop\AVG PC TuneUp.lnk
[2012/11/14 18:17:21 | 000,002,139 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp.lnk
[2012/11/14 15:20:06 | 000,001,314 | ---- | C] () -- C:\Users\D820\Desktop\cc_20121114_151958.reg
[2012/11/14 14:15:55 | 000,038,920 | ---- | C] () -- C:\Users\D820\Desktop\cc_20121114_141539.reg
[2012/11/14 13:25:22 | 000,000,969 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2012/11/10 19:04:59 | 000,001,654 | ---- | C] () -- C:\Users\Public\Desktop\BYOND.lnk
[2012/11/04 08:07:24 | 004,000,286 | ---- | C] () -- C:\Users\D820\Desktop\6_Foot_7_Foot-Lil_Wayne.mp3
[2012/11/03 13:26:24 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2012/11/03 11:34:22 | 000,001,753 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
[2012/11/03 03:25:55 | 000,000,904 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1273276732-2802885136-3562276161-1000UA.job
[2012/11/03 03:25:54 | 000,000,852 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1273276732-2802885136-3562276161-1000Core.job
[2012/11/02 19:57:14 | 000,106,210 | ---- | C] () -- C:\Users\D820\Desktop\Mcllelan.xps
[2012/10/18 23:01:15 | 000,104,984 | ---- | C] () -- C:\Users\D820\Desktop\Mcllean to add older wireless routers.xps
[2012/02/22 23:00:01 | 000,000,010 | ---- | C] () -- C:\Windows\popcinfo.dat

========== ZeroAccess Check ==========

[2009/07/13 21:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012/06/08 21:46:56 | 012,868,608 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009/07/13 18:15:20 | 000,605,696 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009/07/13 18:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== LOP Check ==========

[2012/11/14 18:16:49 | 000,000,000 | ---D | M] -- C:\Users\D820\AppData\Roaming\AVG
[2012/01/06 16:46:10 | 000,000,000 | ---D | M] -- C:\Users\D820\AppData\Roaming\AVG2012
[2012/09/27 20:16:59 | 000,000,000 | ---D | M] -- C:\Users\D820\AppData\Roaming\LolClient
[2012/10/15 01:41:08 | 000,000,000 | ---D | M] -- C:\Users\D820\AppData\Roaming\Need for Speed World

========== Purity Check ==========



< End of report >
  • 0

Advertisements

#2
Snappz
Posted 15 November 2012 - 01:41 PM

Snappz

    New Member

  • Topic Starter
  • Member
  • Pip
  • 2 posts
Extras.txt

OTL Extras logfile created on: 11/15/2012 12:12:54 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\D820\Downloads
Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1.99 Gb Total Physical Memory | 0.84 Gb Available Physical Memory | 42.21% Memory free
3.98 Gb Paging File | 2.63 Gb Available in Paging File | 66.06% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 74.43 Gb Total Space | 32.69 Gb Free Space | 43.92% Space Free | Partition Type: NTFS

Computer Name: D820-PC | User Name: D820 | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{9AB7643B-3FE4-4CD0-A1BB-B76BFF64F3C3}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office12\outlook.exe |
"{9CB6C943-8675-4725-AD60-5276AA6196DD}" = lport=57191 | protocol=17 | dir=in | name=pando media booster |
"{ADE52E73-627C-4994-B3A1-4E4493775E1F}" = lport=57191 | protocol=6 | dir=in | name=pando media booster |
"{D919B0A5-2CFE-4BA5-98AA-6E97D4C030A2}" = lport=57191 | protocol=17 | dir=in | name=pando media booster |
"{DA1C3073-D040-47B3-AEA7-E7947413B933}" = lport=57191 | protocol=6 | dir=in | name=pando media booster |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{02EA1E82-D886-4B81-8F4A-3D55B2F652AC}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe |
"{1D3698D8-74AA-4AA4-A76C-CF9ACDAE7117}" = dir=in | app=c:\program files\cyberlink\powerdvd dx\powerdvd.exe |
"{1E491D31-44B5-4118-B0EA-02242EF71137}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{1E586B5F-07EA-45F0-AB7F-6885D5EBE662}" = protocol=17 | dir=in | app=c:\program files\avg\avg2012\avgdiagex.exe |
"{3F35F7BE-C643-4457-91B2-76DBCF91A2AA}" = dir=in | app=c:\program files\itunes\itunes.exe |
"{4028019D-2C86-4B79-8E60-EFD0F68EEFD3}" = protocol=17 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{4A7FBE9B-07C9-4B62-AA6B-48D9877D0B06}" = protocol=6 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{585D6BF3-73A2-424D-9E5E-7CB7F83F6FD7}" = dir=in | app=c:\program files\cyberlink\powerdvd dx\pdvddxsrv.exe |
"{6545EF1B-9A50-47E2-A5A0-1FD0B580CB06}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{6A2FADCA-9791-409C-9512-C13A2836963C}" = protocol=17 | dir=in | app=c:\program files\avg\avg2012\avgemcx.exe |
"{6AA00FA2-0258-4D8B-A66A-D5D42711FFD2}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{84109D52-EDE2-4E32-9D63-40E228B006CC}" = protocol=6 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{96D3565E-AF1C-4302-985D-3B2C5ADF10C5}" = protocol=6 | dir=in | app=c:\program files\avg\avg2012\avgemcx.exe |
"{B0F033C4-5891-4223-A86D-81C168346ED8}" = protocol=6 | dir=in | app=c:\program files\avg\avg2012\avgmfapx.exe |
"{BE96CC33-CF8F-4942-8F34-FC92E9448110}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{C275DC17-4B5F-4DCC-BFA9-6579A9C176E1}" = protocol=17 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{CE407CE1-5E13-4A2E-8291-21411F0947F0}" = dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{D3F35888-8316-448B-840E-94E0DE51E807}" = protocol=17 | dir=in | app=c:\program files\avg\avg2012\avgmfapx.exe |
"{E7398CA8-DCF0-4712-81AC-6F2D2D009695}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{E74571EA-022B-4369-8206-16CE949E210B}" = protocol=6 | dir=in | app=c:\program files\avg\avg2012\avgnsx.exe |
"{E8AC6AA0-EEA5-45F9-B422-EE69D1B28F67}" = protocol=17 | dir=in | app=c:\program files\avg\avg2012\avgnsx.exe |
"{F3F28F93-9563-4E60-92EE-8D3D3DEDCEF5}" = protocol=6 | dir=in | app=c:\program files\avg\avg2012\avgdiagex.exe |
"TCP Query User{8CE054C9-BB89-4745-9F2F-F77751243820}C:\program files\byond\bin\byond.exe" = protocol=6 | dir=in | app=c:\program files\byond\bin\byond.exe |
"UDP Query User{DA73FA46-2655-4A0F-8564-4A404CC8F570}C:\program files\byond\bin\byond.exe" = protocol=17 | dir=in | app=c:\program files\byond\bin\byond.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{08E81ABD-79F7-49C2-881F-FD6CB0975693}" = Roxio Creator Data
"{09760D42-E223-42AD-8C3E-55B47D0DDAC3}" = Roxio Creator DE 10.3
"{0F6F6876-6334-4977-B5DD-CFC12E193420}" = iTunes
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F54DAFA-9261-4A62-B59D-6C9F26B48FE4}" = Roxio Creator Tools
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{30465B6C-B53F-49A1-9EBA-A3F187AD502E}" = Roxio Update Manager
"{38580E5E-AF78-4536-AD1E-6A62661372C5}" = AVG 2012
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{43D16DA8-BF42-3C62-89D3-3AD47829DC2E}" = Google Talk Plugin
"{4E4F8163-9889-4BAB-B2E7-DBAAE248C1EB}" = LG Android Driver
"{63EC2120-1742-4625-AA47-C6A8AEC9C64C}" = Apple Application Support
"{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Roxio Express Labeler 3
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD DX
"{73A4F29F-31AC-4EBD-AA1B-0CC5F18C8F83}" = Roxio Creator Audio
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{90120000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2007
"{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0015-0409-0000-0000000FF1CE}_PROPLUS_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_PROPLUS_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_PROPLUS_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}_PROPLUS_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_PROPLUS_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_PROPLUS_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_PROPLUS_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_PROPLUS_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_PROPLUS_{2314F9A1-126F-45CC-8A5E-DFAF866F3FBC}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}_PROPLUS_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_PROPLUS_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_PROPLUS_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}_PROPLUS_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{92606477-9366-4D3B-8AE3-6BE4B29727AB}" = League of Legends
"{9559F7CA-5E34-4237-A2D9-D856464AD727}" = Project64 1.6
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.4)
"{B69C390B-826F-473C-86EB-7AD4950818C3}" = AVG 2012
"{B6A26DE5-F2B5-4D58-9570-4FC760E00FCD}" = Roxio Creator Copy
"{C951E55D-44CA-472b-B8F1-824E4647E37C}_is1" = Alarm Clock version 1.0
"{D1D4879F-2279-49C9-AEBF-3B95C84EAA8F}" = AVG PC TuneUp
"{D4DDFAA1-EC37-4529-AD5B-A433ADE68662}" = Apple Mobile Device Support
"{ED439A64-F018-4DD4-8BA5-328D85AB09AB}" = Roxio Creator DE 10.3
"{FB03A941-815E-42F2-B604-FCE5636DB90B}" = AVG PC TuneUp Language Pack (en-US)
"{FE23D063-934D-4829-A0D8-00634CE79B4A}" = Adobe AIR
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"AVG" = AVG 2012
"AVG PC TuneUp" = AVG PC TuneUp
"BYOND" = BYOND
"CCleaner" = CCleaner
"CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_14F100C3" = Conexant HDA D110 MDC V.92 Modem
"Cricket Broadband CROSSWAVE" = Cricket Broadband CROSSWAVE
"eGames GameButler" = eGames GameButler
"Google Chrome" = Google Chrome
"HDMI" = Intel® Graphics Media Accelerator Driver
"Mahjongg Master 4" = Mahjongg Master 4
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.65.1.1000
"Marble Blaster" = Marble Blaster
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"PdaNet_is1" = PdaNet for Android 3.50
"PROPLUS" = Microsoft Office Professional Plus 2007
"Zuma Deluxe 1.0" = Zuma Deluxe 1.0
"Zuma's Revenge!" = Zuma's Revenge!

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 11/14/2012 3:39:11 PM | Computer Name = D820-PC | Source = BugSplat | ID = 1
Description =

Error - 11/14/2012 4:42:46 PM | Computer Name = D820-PC | Source = Application Hang | ID = 1002
Description = The program rads_user_kernel.exe version 0.0.0.0 stopped interacting
with Windows and was closed. To see if more information about the problem is available,
check the problem history in the Action Center control panel. Process ID: bf8 Start
Time: 01cdc2a890cdd0cd Termination Time: 32 Application Path: C:\Riot Games\League
of Legends\RADS\system\rads_user_kernel.exe Report Id: d6512ac6-2e9b-11e2-a5d6-00164192f6a1


Error - 11/14/2012 9:36:26 PM | Computer Name = D820-PC | Source = VSS | ID = 13
Description =

Error - 11/14/2012 9:36:26 PM | Computer Name = D820-PC | Source = VSS | ID = 12292
Description =

Error - 11/14/2012 11:45:52 PM | Computer Name = D820-PC | Source = VSS | ID = 13
Description =

Error - 11/14/2012 11:45:53 PM | Computer Name = D820-PC | Source = VSS | ID = 12292
Description =

Error - 11/15/2012 1:18:26 AM | Computer Name = D820-PC | Source = VSS | ID = 13
Description =

Error - 11/15/2012 1:18:26 AM | Computer Name = D820-PC | Source = VSS | ID = 12292
Description =

Error - 11/15/2012 1:18:26 AM | Computer Name = D820-PC | Source = VSS | ID = 8193
Description =

Error - 11/15/2012 1:18:26 AM | Computer Name = D820-PC | Source = System Restore | ID = 8193
Description =

[ Media Center Events ]
Error - 11/8/2012 9:52:24 PM | Computer Name = D820-PC | Source = MCUpdate | ID = 0
Description = 6:52:16 PM - Error connecting to the internet. 6:52:16 PM - Unable
to contact server..

Error - 11/13/2012 10:23:41 AM | Computer Name = D820-PC | Source = MCUpdate | ID = 0
Description = 7:23:39 AM - Error connecting to the internet. 7:23:39 AM - Unable
to contact server..

Error - 11/13/2012 11:23:49 AM | Computer Name = D820-PC | Source = MCUpdate | ID = 0
Description = 8:23:47 AM - Error connecting to the internet. 8:23:47 AM - Unable
to contact server..

Error - 11/13/2012 12:23:57 PM | Computer Name = D820-PC | Source = MCUpdate | ID = 0
Description = 9:23:55 AM - Error connecting to the internet. 9:23:55 AM - Unable
to contact server..

Error - 11/13/2012 1:24:05 PM | Computer Name = D820-PC | Source = MCUpdate | ID = 0
Description = 10:24:03 AM - Error connecting to the internet. 10:24:03 AM - Unable
to contact server..

Error - 11/13/2012 11:04:02 PM | Computer Name = D820-PC | Source = MCUpdate | ID = 0
Description = 8:04:01 PM - Error connecting to the internet. 8:04:01 PM - Unable
to contact server..

Error - 11/13/2012 11:04:14 PM | Computer Name = D820-PC | Source = MCUpdate | ID = 0
Description = 8:04:07 PM - Error connecting to the internet. 8:04:07 PM - Unable
to contact server..

Error - 11/14/2012 12:32:15 AM | Computer Name = D820-PC | Source = MCUpdate | ID = 0
Description = 9:32:15 PM - Error connecting to the internet. 9:32:15 PM - Unable
to contact server..

Error - 11/14/2012 12:32:32 AM | Computer Name = D820-PC | Source = MCUpdate | ID = 0
Description = 9:32:21 PM - Error connecting to the internet. 9:32:21 PM - Unable
to contact server..

Error - 11/14/2012 1:34:38 AM | Computer Name = D820-PC | Source = MCUpdate | ID = 0
Description = 10:34:32 PM - Failed to retrieve Broadband (Error: The underlying
connection was closed: Could not establish trust relationship for the SSL/TLS secure
channel.)

[ System Events ]
Error - 11/10/2012 1:13:22 PM | Computer Name = D820-PC | Source = Disk | ID = 262155
Description = The driver detected a controller error on \Device\Harddisk2\DR2.

Error - 11/10/2012 1:13:23 PM | Computer Name = D820-PC | Source = Disk | ID = 262155
Description = The driver detected a controller error on \Device\Harddisk2\DR2.

Error - 11/10/2012 10:01:40 PM | Computer Name = D820-PC | Source = EventLog | ID = 6008
Description = The previous system shutdown at 2:34:00 PM on ?11/?10/?2012 was unexpected.

Error - 11/11/2012 6:04:37 PM | Computer Name = D820-PC | Source = EventLog | ID = 6008
Description = The previous system shutdown at 12:11:06 PM on ?11/?11/?2012 was unexpected.

Error - 11/11/2012 6:05:19 PM | Computer Name = D820-PC | Source = Service Control Manager | ID = 7023
Description = The iPod Service service terminated with the following error: %%-2147417831

Error - 11/11/2012 6:05:40 PM | Computer Name = D820-PC | Source = DCOM | ID = 10010
Description =

Error - 11/11/2012 10:58:05 PM | Computer Name = D820-PC | Source = EventLog | ID = 6008
Description = The previous system shutdown at 7:51:02 PM on ?11/?11/?2012 was unexpected.

Error - 11/11/2012 10:58:52 PM | Computer Name = D820-PC | Source = Service Control Manager | ID = 7023
Description = The iPod Service service terminated with the following error: %%-2147417831

Error - 11/11/2012 10:59:09 PM | Computer Name = D820-PC | Source = DCOM | ID = 10010
Description =

Error - 11/12/2012 12:56:47 AM | Computer Name = D820-PC | Source = EventLog | ID = 6008
Description = The previous system shutdown at 8:38:46 PM on ?11/?11/?2012 was unexpected.


< End of report >
  • 0
Back to Virus, Spyware, Malware Removal · Next Unread Topic →




Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Geeks to Go Community
  2. → Security
  3. → Virus, Spyware, Malware Removal

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP