Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

white screen of death coming? won't run anything.No solution [Clos


  • This topic is locked This topic is locked

#1
teddy91

teddy91

    New Member

  • Member
  • Pip
  • 2 posts
Same problem on ur past post - http://www.geekstogo...t-run-anything/
Dell inspiron 4110 laptop.
I was surfing the web and fed up with popups reminding me of things I had previously looked for I clicked on private browsing on the toolbar, thinking this might stop it. Back toi the web, changed pages and the whole screen went white. All that was left was a hand icon in the middle. I tried alt-ctrl-del without any result. So I turned the laptop off and rebooted. It boot the "welcome to windows 7 screen then went on to the white screen, where it remains.
There is no border, no taskbar, nothing except a white screen.
If I press alt-ctrl-del I get the page showing :- "lock this computer, switch user etc and start task manager." None of them work, it just reverts to the white screen, however, on the bottom left is the "Ease of Access" Button. If I activate one of these commands I can now alt-tab between the command I have activated e.g.Magnifier and (apparently) Windows Logon, which is the white screen. It doesn't always go to windows logon though, it sometimes stays on the Access page.
When it does go to win logon and I alt-tab there one of the icons in the middle, in the alt-tab box, now says "Win Locker".?
On the bottom right of the alt-ctrl-del page is a red "Shut Down/Shut Down options" button. I can use this to shut it down and that is pretty much it.
When it does shut down, it goes to the screensaver page and hangs for a while with the message "Waiting for programs to shut down" and shows the "Force shutdown" buttons. Then eventually it closes the box, and the "Start" button on the taskbar appears briefly, but I can't do anything with that. The laptop then shuts down.
I have gone into the BIOS and turned off the wireless adaptor and reset the boot options to select cd and memory stick first.
Have I been hijacked or did I just press the wrong button somewhere?
I can't load anything straight through the cd or memory stick while this white page is there but I did get a copy of the AVG rescue cd which I can load, but I am not sure what I am looking at.
I haven't yet tried the manufacturers rescue disk as I am kind of hoping it will be something stupid.
All and any help appreciated.
Thanks

Attached Thumbnails

  • Untitled-1 copy.JPG

  • 0

Advertisements


#2
teddy91

teddy91

    New Member

  • Topic Starter
  • Member
  • Pip
  • 2 posts
According to reply in here,
http://www.geekstogo...t-run-anything/
I followed that way and I got text file... Here is that one;
Please help me to solve this case ASAP.






Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 02-02-2013 02
Ran by SYSTEM at 05-02-2013 14:01:59
Running from F:\
Windows 7 Home Premium Service Pack 1 (X64) OS Language: English(US)
The current controlset is ControlSet001

==================== Registry (Whitelisted) ===================

HKLM\...\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe [2771240 2011-04-22] (Synaptics Incorporated)
HKLM\...\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe -s [6611048 2011-02-18] (Realtek Semiconductor)
HKLM\...\Run: [QuickSet] C:\Program Files\Dell\QuickSet\QuickSet.exe [4500640 2011-03-10] (Dell Inc.)
HKLM\...\Run: [IntelWireless] "C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" /tf Intel Wireless Tray [1933584 2010-12-17] (Intel® Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [446392 2012-04-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AVP] "C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe" [206448 2012-10-31] (Kaspersky Lab ZAO)
HKLM-x32\...\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [252848 2012-07-02] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [SearchProtectAll] C:\Program Files (x86)\SearchProtect\cltmng.exe [1199944 2012-10-23] (Conduit)
HKLM-x32\...\Run: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [113288 2010-11-16] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [NBKeyScan] "C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [1836328 2007-09-19] (Nero AG)
HKLM-x32\...\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [31016 2006-10-26] (Microsoft Corporation)
HKLM-x32\...\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59240 2012-02-20] (Apple Inc.)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin [406992 2010-02-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin [1073312 2012-03-09] (Adobe Systems Incorporated)
HKU\Guest\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files (x86)\Common Files\Nero\Lib\NMBgMonitor.exe" [202024 2007-09-20] (Nero AG)
HKU\Guest\...\Run: [SearchProtect] C:\Users\Guest\AppData\Roaming\SearchProtect\cltmng.exe [1199944 2012-10-23] (Conduit)
HKU\Guest\...\Run: [WinFLTray] C:\Windows\SysWow64\WinFLTray.exe [321736 2012-12-09] ( New Softwares.net)
HKU\Guest\...\Run: [FLBackup] C:\Program Files (x86)\NewSoftware's\Folder Lock\FLComServCtrl.exe [275656 2012-08-20] (New Softwares.net)
HKU\Guest\...\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun [17355912 2012-05-02] (Skype Technologies S.A.)
HKU\Guest\...\Run: [PC Suite Tray] "C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray [1451520 2009-11-10] (Nokia)
HKU\Guest\...\Run: [IDMan] C:\Program Files (x86)\Internet Download Manager\IDMan.exe /onboot [3519936 2012-08-30] (Tonec Inc.)
HKU\Guest\...\Run: [Google Update] "C:\Users\TeddY\AppData\Local\Google\Update\GoogleUpdate.exe" /c [116648 2012-05-19] (Google Inc.)
HKU\Guest\...\Run: [Facebook Update] "C:\Users\TeddY\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver [138096 2012-07-14] (Facebook Inc.)
HKU\Guest\...\Run: [Device Detector] DevDetect.exe -autorun [x]
HKU\Guest\...\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun [357696 2010-04-01] (DT Soft Ltd)
HKU\Guest\...\Run: [GoogleChromeAutoLaunch_5D9EE5A420DFBFEC67F4D3E028B1EBCC] "C:\Users\TeddY\AppData\Local\Google\Chrome\Application\chrome.exe" --no-startup-window [1248208 2013-01-25] (Google Inc.)
HKU\ResQ\...\Run: [SearchProtect] C:\Users\ResQ\AppData\Roaming\SearchProtect\cltmng.exe [1199944 2012-10-23] (Conduit)
HKU\ResQ\...\Run: [WinFLTray] C:\Windows\SysWow64\WinFLTray.exe [321736 2012-12-09] ( New Softwares.net)
HKU\ResQ\...\Run: [FLBackup] C:\Program Files (x86)\NewSoftware's\Folder Lock\FLComServCtrl.exe [275656 2012-08-20] (New Softwares.net)
HKU\ResQ\...\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun [17355912 2012-05-02] (Skype Technologies S.A.)
HKU\ResQ\...\Run: [PC Suite Tray] "C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray [1451520 2009-11-10] (Nokia)
HKU\ResQ\...\Run: [IDMan] C:\Program Files (x86)\Internet Download Manager\IDMan.exe /onboot [3519936 2012-08-30] (Tonec Inc.)
HKU\ResQ\...\Run: [Google Update] "C:\Users\TeddY\AppData\Local\Google\Update\GoogleUpdate.exe" /c [116648 2012-05-19] (Google Inc.)
HKU\ResQ\...\Run: [Facebook Update] "C:\Users\TeddY\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver [138096 2012-07-14] (Facebook Inc.)
HKU\ResQ\...\Run: [Device Detector] DevDetect.exe -autorun [x]
HKU\ResQ\...\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun [357696 2010-04-01] (DT Soft Ltd)
HKU\ResQ\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files (x86)\Common Files\Nero\Lib\NMBgMonitor.exe" [202024 2007-09-20] (Nero AG)
HKU\ResQ\...\Run: [GoogleChromeAutoLaunch_5D9EE5A420DFBFEC67F4D3E028B1EBCC] "C:\Users\TeddY\AppData\Local\Google\Chrome\Application\chrome.exe" --no-startup-window [1248208 2013-01-25] (Google Inc.)
HKU\TeddY\...\Run: [WinFLTray] C:\Windows\SysWow64\WinFLTray.exe [321736 2012-12-09] ( New Softwares.net)
HKU\TeddY\...\Run: [FLBackup] C:\Program Files (x86)\NewSoftware's\Folder Lock\FLComServCtrl.exe [275656 2012-08-20] (New Softwares.net)
HKU\TeddY\...\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun [17355912 2012-05-02] (Skype Technologies S.A.)
HKU\TeddY\...\Run: [SearchProtect] C:\Users\TeddY\AppData\Roaming\SearchProtect\cltmng.exe [1199944 2012-10-23] (Conduit)
HKU\TeddY\...\Run: [PC Suite Tray] "C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray [1451520 2009-11-10] (Nokia)
HKU\TeddY\...\Run: [IDMan] C:\Program Files (x86)\Internet Download Manager\IDMan.exe /onboot [3519936 2012-08-30] (Tonec Inc.)
HKU\TeddY\...\Run: [Google Update] "C:\Users\TeddY\AppData\Local\Google\Update\GoogleUpdate.exe" /c [116648 2012-05-19] (Google Inc.)
HKU\TeddY\...\Run: [Facebook Update] "C:\Users\TeddY\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver [138096 2012-07-14] (Facebook Inc.)
HKU\TeddY\...\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun [357696 2010-04-01] (DT Soft Ltd)
HKU\TeddY\...\Run: [BitTorrent] "C:\Program Files (x86)\BitTorrent\BitTorrent.exe" [4770672 2012-05-19] (BitTorrent, Inc.)
HKU\TeddY\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files (x86)\Common Files\Nero\Lib\NMBgMonitor.exe" [202024 2007-09-20] (Nero AG)
HKU\TeddY\...\Run: [GoogleChromeAutoLaunch_5D9EE5A420DFBFEC67F4D3E028B1EBCC] "C:\Users\TeddY\AppData\Local\Google\Chrome\Application\chrome.exe" --no-startup-window [1248208 2013-01-25] (Google Inc.)
HKU\TeddY\...\Run: [AdobeBridge] [x]
HKU\TeddY\...\Winlogon: [Shell] explorer.exe,C:\Users\TeddY\AppData\Roaming\skype.dat [102400 2010-11-20] ()
Winlogon\Notify\klogon: %SystemRoot%\System32\klogon.dll (Kaspersky Lab ZAO)
Tcpip\..\Interfaces\{8CE2244F-58FF-48CC-BB23-BD95765D8B37}: [NameServer]203.143.29.1 222.165.171.2
Tcpip\..\Interfaces\{B11B433A-5311-4EF6-8F20-E40577D98177}: [NameServer]203.143.29.1 222.165.171.2
Startup: C:\Users\All Users\Start Menu\Programs\Startup\SinhalaTamil IME.lnk
ShortcutTarget: SinhalaTamil IME.lnk -> C:\Program Files (x86)\SinhalaTamil IME\SinhalaTamil IME.exe (Microimage)
Startup: C:\Users\TeddY\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk
ShortcutTarget: OneNote 2007 Screen Clipper and Launcher.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\TeddY\Start Menu\Programs\Startup\Rainmeter.lnk
ShortcutTarget: Rainmeter.lnk -> C:\Program Files\Rainmeter\Rainmeter.exe ()

==================== Services (Whitelisted) ===================

2 AVP; "C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe" -r [206448 2012-10-31] (Kaspersky Lab ZAO)
2 Capture Device Service; "C:\Program Files (x86)\Common Files\InterVideo\DeviceService\DevSvc.exe" [198168 2007-03-05] (InterVideo Inc.)
2 DCPFLICS; C:\Program Files (x86)\DCPFLICS\DCPFLICS.exe [139268 2007-10-24] ()
2 Etisalat Connect. RunOuc; C:\Program Files (x86)\Etisalat Connect\UpdateDog\ouc.exe [246112 2012-10-05] ()
2 eType Manager; C:\ProgramData\eType Manager\2.2.558.175\{16cdff19-861d-48e3-a751-d99a27784753}\etypemngr.exe [1695776 2012-08-15] ()
2 FLService; C:\Windows\SysWow64\WinFLService.exe [92360 2012-12-09] (New Softwares.net)
2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe -/service [339456 2010-11-16] ()
2 mi-raysat_3dsmax2011_32; "C:\Program Files (x86)\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_32server.exe" [86016 2010-03-09] ()
2 Mobile Broadband. RunOuc; C:\Program Files (x86)\Mobile Broadband\UpdateDog\ouc.exe [218624 2013-01-20] ()
3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2010-12-17] ()
2 Nero BackItUp Scheduler 3; C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe [853288 2007-09-19] (Nero AG)
2 NitroReaderDriverReadSpool2; "C:\Program Files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe" [216080 2012-07-26] (Nitro PDF Software)
3 NMIndexingService; "C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe" [382248 2007-09-20] (Nero AG)

==================== Drivers (Whitelisted) =====================

3 Apowersoft_AudioDevice; C:\Windows\System32\Drivers\Apowersoft_AudioDevice.sys [29288 2010-12-23] (Wondershare)
3 HP8107Fltr; C:\Windows\System32\DRIVERS\HP8107.sys [13824 2010-02-04] (Windows ® Win 7 DDK provider)
0 KL1; C:\Windows\System32\Drivers\KL1.sys [460888 2011-03-03] (Kaspersky Lab ZAO)
1 kl2; C:\Windows\System32\Drivers\kl2.sys [11864 2011-03-03] (Kaspersky Lab ZAO)
1 KLIF; C:\Windows\System32\Drivers\KLIF.sys [637272 2012-10-31] (Kaspersky Lab)
1 KLIM6; C:\Windows\System32\Drivers\KLIM6.sys [29488 2011-03-10] (Kaspersky Lab ZAO)
3 klmouflt; C:\Windows\System32\Drivers\klmouflt.sys [22544 2009-11-02] (Kaspersky Lab)
3 ManyCam; C:\Windows\System32\DRIVERS\mcvidrv_x64.sys [34304 2012-01-10] (ManyCam LLC)
3 mcaudrv_simple; C:\Windows\System32\drivers\mcaudrv_x64.sys [28160 2012-02-22] (ManyCam LLC)
2 NEWDRIVER; \??\C:\Windows\SysWow64\WinVDEdrv6.sys [197648 2012-08-20] ()
3 nmwcdcx64; C:\Windows\System32\drivers\ccdcmbox64.sys [25088 2009-10-05] (Nokia)
3 nmwcdx64; C:\Windows\System32\drivers\ccdcmbx64.sys [18944 2009-10-05] (Nokia)
0 sptd; C:\Windows\System32\Drivers\sptd.sys [834544 2012-05-19] (Duplex Secure Ltd.)
1 WinFLAdrv; C:\Windows\SysWow64\WinFLAdrv.sys [34816 2012-12-09] ()
2 WinVDEDrv; \??\C:\Windows\SysWow64\WinVDEdrv.sys [225680 2012-08-20] (NewSoftwares.net, Inc.)

==================== NetSvcs (Whitelisted) ====================


==================== One Month Created Files and Folders ========

2013-02-04 22:09 - 2013-02-04 22:09 - 00000000 ____D C:\$WINDOWS.~BT
2013-02-04 22:08 - 2013-02-04 22:08 - 00001890 ____A C:\Windows\diagwrn.xml
2013-02-04 22:08 - 2013-02-04 22:08 - 00001890 ____A C:\Windows\diagerr.xml
2013-02-04 21:16 - 2013-02-04 21:16 - 00000000 ____D C:\Users\Guest\AppData\Local\Google
2013-02-04 20:35 - 2013-02-05 00:27 - 00001171 ____A C:\Windows\setupact.log
2013-02-04 20:35 - 2013-02-04 22:08 - 00000000 ____A C:\Windows\setuperr.log
2013-02-04 20:35 - 2013-02-04 20:35 - 479666332 ____A C:\Windows\MEMORY.DMP
2013-02-04 20:17 - 2013-02-04 20:17 - 00033900 ____A C:\Users\Guest\Documents\cc_20130205_094714.reg
2013-02-04 20:11 - 2013-02-04 23:52 - 00024271 ____A C:\Windows\WindowsUpdate.log
2013-02-04 14:55 - 2013-02-04 23:50 - 00000004 ____A C:\Users\TeddY\AppData\Roaming\skype.ini
2013-02-04 14:49 - 2013-02-04 14:49 - 00102400 ____A C:\Users\TeddY\Downloads\Porn_with_Animals_Movie_82.mpeg.exe
2013-02-04 14:38 - 2013-02-04 14:47 - 00000000 ____D C:\Users\TeddY\Downloads\Pretty 18yo teen
2013-02-04 14:37 - 2013-02-04 14:37 - 00014814 ____A C:\Users\TeddY\Downloads\[kat.ph]pretty.18.years.old.teen.pics.from.digital.cam.new.torrent
2013-02-02 15:43 - 2013-02-02 15:43 - 00000000 ____A C:\Users\TeddY\.JavaPowUpload.properties
2013-02-02 10:44 - 2013-02-02 10:44 - 106468554 ____A C:\Users\TeddY\Downloads\Hiras Favour.rar
2013-02-02 06:21 - 2013-02-02 06:22 - 00000000 ____D C:\Users\TeddY\Downloads\Magic Bullet Looks 1.2
2013-02-02 06:20 - 2013-02-02 06:20 - 00026943 ____A C:\Users\TeddY\Downloads\[kat.ph]magic.bullet.looks.1.2.torrent
2013-02-01 10:46 - 2013-02-01 10:46 - 00000000 ____D C:\Users\TeddY\Downloads\Kaspersky Internet Security 2012 Keys [ChattChitto RG]
2013-01-31 22:16 - 2013-01-31 22:17 - 00000000 ____D C:\Users\TeddY\Desktop\2013.2.1
2013-01-30 22:19 - 2013-01-30 23:14 - 00000000 ____D C:\Users\TeddY\Desktop\Muslim
2013-01-29 23:21 - 2013-01-29 23:21 - 00000000 __SHD C:\found.001
2013-01-29 08:44 - 2013-01-29 08:44 - 00282290 ____A C:\Users\TeddY\Downloads\[kat.ph]24.complete.series.season.1.2.3.4.5.6.7.8.prequels.extras.m.torrent
2013-01-27 00:56 - 2013-01-27 00:56 - 00246802 ____A C:\Users\TeddY\Downloads\lazarus_form_recovery-2.3-fx.xpi
2013-01-27 00:56 - 2013-01-27 00:56 - 00000000 ____D C:\Users\TeddY\Downloads\lazarus_form_recovery-2.3-fx
2013-01-26 12:09 - 2013-02-01 12:21 - 733941760 ____A C:\Users\TeddY\Downloads\Barbie Raperonzolo.avi
2013-01-26 12:07 - 2013-02-01 13:04 - 180529664 ____A C:\Users\TeddY\Downloads\Tera Patrick [JAM-HOT.com].mpeg
2013-01-26 12:06 - 2013-01-26 12:42 - 93074564 ____A C:\Users\TeddY\Downloads\Rape Fantasy - Mother & daughter gangraped by 4 guys - (French) (forced sex, [bleep], blow).mpg
2013-01-26 12:06 - 2013-01-26 12:06 - 00000000 ____D C:\Users\TeddY\Downloads\Lesbian Rape - On A Bed 3
2013-01-26 12:05 - 2013-01-26 12:05 - 00029151 ____A C:\Users\TeddY\Downloads\torrentdownloads net Rape Fantasy Mother & Daughter Gangraped By 4 Guys (french).torrent
2013-01-26 12:05 - 2013-01-26 12:05 - 00028512 ____A C:\Users\TeddY\Downloads\Barbie+Raperonzolo+-+%5BXviD+-+Ita+Mp3%5D+Animazione%2C+Ragazzi+MirCrew.torrent
2013-01-26 12:05 - 2013-01-26 12:05 - 00014307 ____A C:\Users\TeddY\Downloads\torrentdownloads net Rape Fantasy Coffee Salesgirl Rape (tera Patrick).torrent
2013-01-26 12:04 - 2013-01-26 12:04 - 00019637 ____A C:\Users\TeddY\Downloads\[kat.ph]lesbian.rape.on.a.bed.3.torrent
2013-01-23 15:51 - 2013-01-23 19:02 - 00000000 ____D C:\Users\TeddY\Desktop\Private Universities
2013-01-22 02:03 - 2013-01-22 02:03 - 00000000 ____D C:\Users\TeddY\Documents\Savegame
2013-01-21 11:24 - 2013-01-21 13:03 - 00000000 ____D C:\Users\TeddY\Downloads\Pretty.Girls.Punished.XXX.DVDRip.XViD-JuStTr4Sh
2013-01-21 11:24 - 2013-01-21 11:24 - 00000000 ____D C:\Users\TeddY\Downloads\BDSM - Torture Galaxy
2013-01-21 11:22 - 2013-01-21 11:23 - 00013724 ____A C:\Users\TeddY\Downloads\BDSM+-+Torture+Galaxy.torrent
2013-01-21 11:21 - 2013-01-21 11:21 - 00057113 ____A C:\Users\TeddY\Downloads\Pretty+Girl+Punished++%28Bizarre%29+%5BBDSM%2C+BONDAGE%2C+DVDRip%5D.torrent
2013-01-20 22:53 - 2013-01-20 22:53 - 00000000 ____D C:\Users\Guest\Documents\Trigger
2013-01-20 22:53 - 2013-01-20 22:53 - 00000000 ____D C:\Users\Guest\Documents\Startup
2013-01-20 22:53 - 2013-01-20 22:53 - 00000000 ____D C:\Users\Guest\Documents\Screenshots
2013-01-20 22:53 - 2013-01-20 22:53 - 00000000 ____D C:\Users\Guest\Documents\Scenario
2013-01-20 22:53 - 2013-01-20 22:53 - 00000000 ____D C:\Users\Guest\Documents\Savegame
2013-01-20 22:53 - 2013-01-20 22:53 - 00000000 ____D C:\Users\Guest\Documents\RM
2013-01-20 22:53 - 2013-01-20 22:53 - 00000000 ____D C:\Users\Guest\Documents\HomeCities
2013-01-20 22:53 - 2013-01-20 22:53 - 00000000 ____D C:\Users\Guest\Documents\Data
2013-01-20 22:53 - 2013-01-20 22:53 - 00000000 ____D C:\Users\Guest\Documents\campaign
2013-01-20 22:53 - 2013-01-20 22:53 - 00000000 ____D C:\Users\Guest\Documents\AI
2013-01-20 22:39 - 2013-01-20 22:40 - 00000000 ____D C:\Users\Guest\AppData\Local\Autodesk
2013-01-20 22:39 - 2013-01-20 22:39 - 00000000 ____D C:\Users\Guest\Documents\3dsMax
2013-01-20 22:39 - 2013-01-20 22:39 - 00000000 ____D C:\Users\Guest\AppData\Roaming\Autodesk
2013-01-20 22:14 - 2013-01-20 22:25 - 00000000 ____D C:\Users\Guest\AppData\Local\Microsoft Games
2013-01-20 22:07 - 2013-01-20 22:07 - 00000000 ____D C:\Users\Guest\Desktop\competitions
2013-01-20 22:05 - 2013-01-20 22:06 - 00000000 ____D C:\Users\All Users\Mobile Broadband
2013-01-20 22:05 - 2013-01-20 22:05 - 00001063 ____A C:\Users\Public\Desktop\Mobile Broadband.lnk
2013-01-20 22:04 - 2013-01-20 22:03 - 01001472 ____A (DiBcom SA) C:\Windows\System32\Drivers\mod7700.sys
2013-01-20 22:04 - 2013-01-20 22:03 - 00212992 ____A (Huawei Technologies Co., Ltd.) C:\Windows\System32\Drivers\ew_juwwanecm.sys
2013-01-20 22:04 - 2013-01-20 22:03 - 00098816 ____A (Huawei Technologies Co., Ltd.) C:\Windows\System32\Drivers\ew_jucdcacm.sys
2013-01-20 22:04 - 2013-01-20 22:03 - 00069632 ____A (Huawei Technologies Co., Ltd.) C:\Windows\System32\Drivers\ew_jucdcecm.sys
2013-01-20 22:04 - 2013-01-20 22:03 - 00032768 ____A (Huawei Tech. Co., Ltd.) C:\Windows\System32\Drivers\ewdcsc.sys
2013-01-20 22:04 - 2013-01-20 22:03 - 00028672 ____A (Huawei Technologies Co., Ltd.) C:\Windows\System32\Drivers\ew_juextctrl.sys
2013-01-20 22:04 - 2013-01-20 22:03 - 00022016 ____A (Huawei Technologies Co., Ltd.) C:\Windows\System32\Drivers\ew_hwupgrade.sys
2013-01-20 22:04 - 2013-01-20 22:03 - 00013952 ____A (Huawei Technologies Co., Ltd.) C:\Windows\System32\Drivers\ew_usbenumfilter.sys
2013-01-20 22:03 - 2013-01-20 22:06 - 00000000 ____D C:\Program Files (x86)\Mobile Broadband
2013-01-20 22:03 - 2013-01-20 22:03 - 00421376 ____A (Huawei Technologies Co., Ltd.) C:\Windows\System32\Drivers\ewusbwwan.sys
2013-01-20 22:03 - 2013-01-20 22:03 - 00221312 ____A (Huawei Technologies Co., Ltd.) C:\Windows\System32\Drivers\ewusbmdm.sys
2013-01-20 22:03 - 2013-01-20 22:03 - 00117248 ____A (Huawei Technologies Co., Ltd.) C:\Windows\System32\Drivers\ew_hwusbdev.sys
2013-01-20 22:03 - 2013-01-20 22:03 - 00086016 ____A (Huawei Technologies Co., Ltd.) C:\Windows\System32\Drivers\ew_jubusenum.sys
2013-01-20 10:53 - 2013-01-20 10:53 - 00009522 ____A C:\Users\TeddY\Desktop\Krakatoa MX 2.1.1.47356 for 3ds Max 2010, 2011, 2012, 2013 64bit (1).torrent
2013-01-20 10:51 - 2013-01-20 10:51 - 00019079 ____A C:\Users\TeddY\Desktop\Thinkbox Krakatoa MX v2.0.1.46319 for 3DSMAX - XFORCE.torrent
2013-01-20 07:17 - 2013-01-21 00:24 - 15015265 ____A C:\Users\TeddY\Downloads\KrakatoaMX 2.1.1 (X64).rar
2013-01-19 15:22 - 2013-01-19 15:22 - 00011584 ____A C:\Users\TeddY\Downloads\Krakatoa MX 2.0.1.46319.torrent
2013-01-19 15:02 - 2013-01-19 15:02 - 00009522 ____A C:\Users\TeddY\Downloads\Krakatoa MX 2.1.1.47356 for 3ds Max 2010, 2011, 2012, 2013 64bit (1).torrent
2013-01-19 14:56 - 2013-01-19 14:56 - 00019079 ____A C:\Users\TeddY\Downloads\Thinkbox Krakatoa MX v2.0.1.46319 for 3DSMAX - XFORCE (2).torrent
2013-01-18 23:34 - 2013-01-18 23:34 - 00000000 ____D C:\Users\TeddY\Desktop\chip backup
2013-01-18 18:58 - 2013-01-18 20:15 - 00000000 ____D C:\Users\TeddY\Desktop\Bikshu Deshapalanaya
2013-01-18 15:41 - 2013-01-18 15:41 - 00013267 ____A C:\Users\TeddY\Downloads\Graphisoft ArchiCAD 16 Build 3270 x64 + Crack + Goodies.txt
2013-01-18 15:40 - 2013-01-18 16:53 - 00000000 ____D C:\Users\TeddY\Downloads\Thinkbox Frost v1.1.2.44769 plugin for 3DS MAX 2012
2013-01-18 15:39 - 2013-01-18 15:39 - 00011525 ____A C:\Users\TeddY\Downloads\9DD14CED41058C23C0E8F14D0E618DAA74372156.torrent
2013-01-18 15:35 - 2013-01-18 15:35 - 00000000 ____D C:\Program Files (x86)\uTorrentControl_v2
2013-01-18 15:34 - 2013-01-18 15:34 - 00000903 ____A C:\Users\Public\Desktop\µTorrent.lnk
2013-01-18 15:34 - 2013-01-18 15:34 - 00000000 ____D C:\Program Files (x86)\uTorrent
2013-01-18 15:33 - 2013-02-04 20:19 - 00000000 ____D C:\Users\TeddY\AppData\Roaming\uTorrent
2013-01-18 15:31 - 2013-01-18 15:31 - 00019079 ____A C:\Users\TeddY\Downloads\Thinkbox Krakatoa MX v2.0.1.46319 for 3DSMAX - XFORCE (2).txt
2013-01-18 14:58 - 2013-01-18 14:58 - 00009522 ____A C:\Users\TeddY\Downloads\Krakatoa MX 2.1.1.47356 for 3ds Max 2010, 2011, 2012, 2013 64bit.txt
2013-01-18 14:55 - 2013-01-18 14:55 - 00019079 ____A C:\Users\TeddY\Downloads\Thinkbox Krakatoa MX v2.0.1.46319 for 3DSMAX - XFORCE (1).txt
2013-01-18 14:51 - 2013-01-18 14:52 - 00019079 ____A C:\Users\TeddY\Downloads\Thinkbox Krakatoa MX v2.0.1.46319 for 3DSMAX - XFORCE.torrent
2013-01-18 04:45 - 2013-01-18 04:45 - 00000000 ____D C:\Users\TeddY\AppData\Local\Thinkbox
2013-01-18 04:34 - 2013-01-19 15:31 - 00000000 ____D C:\Program Files (x86)\Thinkbox
2013-01-14 10:33 - 2013-01-14 10:44 - 66926759 ____A C:\Users\TeddY\Desktop\v2.flv
2013-01-14 10:33 - 2013-01-14 10:43 - 56246547 ____A C:\Users\TeddY\Desktop\v3.flv
2013-01-14 08:53 - 2013-01-14 08:53 - 00401304 ____A C:\Users\TeddY\Downloads\New Tab.htm
2013-01-14 03:42 - 2013-01-14 03:42 - 00163840 ____A C:\Users\TeddY\Desktop\lr.max
2013-01-10 12:47 - 2013-01-10 15:12 - 00000000 ____D C:\Users\TeddY\Downloads\6000 Sound Effects
2013-01-10 12:46 - 2013-01-10 12:46 - 00013946 ____A C:\Users\TeddY\Downloads\[kat.ph]6000.sound.effects.torrent
2013-01-09 12:08 - 2013-01-09 12:08 - 00013596 ____A C:\Users\TeddY\Downloads\FX+The+Effects+Vol+2+%28Loop9Samples%29.torrent
2013-01-09 12:06 - 2013-01-09 12:06 - 00035268 ____A C:\Users\TeddY\Downloads\sound-effects-fx.torrent
2013-01-09 00:22 - 2013-01-09 00:22 - 00011778 ____A C:\Windows\log.tmp
2013-01-09 00:21 - 2012-10-23 12:58 - 00000034 ____A C:\Windows\DeCompress.bat
2013-01-09 00:21 - 2012-10-20 17:20 - 00286679 ____A C:\Windows\Uharc.exe
2013-01-09 00:21 - 2012-09-01 18:06 - 02990592 ____A (SecurityXploded) C:\Windows\Uha64.exe
2013-01-08 22:29 - 2013-01-08 23:59 - 00000132 ____A C:\Users\TeddY\AppData\Roaming\Adobe PNG Format CS6 Prefs
2013-01-08 10:58 - 2013-01-08 10:58 - 00020960 ____A C:\Users\TeddY\Downloads\after-effects-project-template-3d-logo-reveal.torrent
2013-01-08 10:56 - 2013-01-08 10:56 - 00020187 ____A C:\Users\TeddY\Downloads\After+Effects+%26amp%3B+Photoshop+Animation+%26amp%3B+Production+Effects+for+DV+and+Film+-+allfeeebook.tk.torrent


==================== One Month Modified Files and Folders =======

2013-02-05 14:01 - 2013-02-05 14:01 - 00000000 ____D C:\FRST
2013-02-05 00:28 - 2012-11-29 16:19 - 00000892 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-02-05 00:28 - 2012-07-25 23:04 - 00000000 ____D C:\Users\All Users\Kaspersky Lab
2013-02-05 00:27 - 2013-02-04 20:35 - 00001171 ____A C:\Windows\setupact.log
2013-02-05 00:27 - 2012-09-20 16:17 - 00000412 ___AH C:\Windows\Tasks\OptimizerPro1UpdaterTask{F0FE7042-0C93-4DAF-BEBC-4B5194CE318B}.job
2013-02-05 00:27 - 2012-09-20 16:13 - 00000376 ___AH C:\Windows\Tasks\WxDFastUpdaterTask{55CD7B95-4371-4ACF-9083-39A34822DDF6}.job
2013-02-05 00:27 - 2009-07-13 21:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-02-05 00:05 - 2012-05-19 09:45 - 00000908 ____A C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-78225331-1311717946-2754557223-1000UA.job
2013-02-04 23:56 - 2009-07-13 20:45 - 00021072 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-02-04 23:56 - 2009-07-13 20:45 - 00021072 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-02-04 23:53 - 2009-07-13 21:13 - 00778150 ____A C:\Windows\System32\PerfStringBackup.INI
2013-02-04 23:52 - 2013-02-04 20:11 - 00024271 ____A C:\Windows\WindowsUpdate.log
2013-02-04 23:51 - 2012-05-21 04:54 - 00000830 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-02-04 23:50 - 2013-02-04 14:55 - 00000004 ____A C:\Users\TeddY\AppData\Roaming\skype.ini
2013-02-04 23:50 - 2012-05-19 20:17 - 00000000 ____D C:\Users\TeddY\AppData\Roaming\DMCache
2013-02-04 23:50 - 2012-05-19 17:54 - 00000000 ____D C:\Users\TeddY\AppData\Roaming\BitTorrent
2013-02-04 23:49 - 2012-07-31 10:33 - 00000000 ____D C:\Users\TeddY\AppData\Roaming\Rainmeter
2013-02-04 23:24 - 2012-11-29 16:19 - 00000896 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-02-04 23:11 - 2012-12-11 06:21 - 00000000 ____D C:\Users\Guest\AppData\Roaming\Skype
2013-02-04 22:09 - 2013-02-04 22:09 - 00000000 ____D C:\$WINDOWS.~BT
2013-02-04 22:08 - 2013-02-04 22:08 - 00001890 ____A C:\Windows\diagwrn.xml
2013-02-04 22:08 - 2013-02-04 22:08 - 00001890 ____A C:\Windows\diagerr.xml
2013-02-04 22:08 - 2013-02-04 20:35 - 00000000 ____A C:\Windows\setuperr.log
2013-02-04 22:07 - 2012-05-28 20:03 - 00000928 ____A C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-78225331-1311717946-2754557223-1000UA.job
2013-02-04 21:16 - 2013-02-04 21:16 - 00000000 ____D C:\Users\Guest\AppData\Local\Google
2013-02-04 20:35 - 2013-02-04 20:35 - 479666332 ____A C:\Windows\MEMORY.DMP
2013-02-04 20:35 - 2012-05-30 07:23 - 00000000 ____D C:\Windows\Minidump
2013-02-04 20:19 - 2013-01-18 15:33 - 00000000 ____D C:\Users\TeddY\AppData\Roaming\uTorrent
2013-02-04 20:17 - 2013-02-04 20:17 - 00033900 ____A C:\Users\Guest\Documents\cc_20130205_094714.reg
2013-02-04 20:10 - 2012-12-11 06:20 - 00000000 ____D C:\Users\Guest\AppData\Roaming\BitTorrent
2013-02-04 16:07 - 2012-05-28 20:03 - 00000906 ____A C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-78225331-1311717946-2754557223-1000Core.job
2013-02-04 14:55 - 2012-05-19 09:52 - 00000000 ____D C:\Users\TeddY\AppData\Roaming\Skype
2013-02-04 14:49 - 2013-02-04 14:49 - 00102400 ____A C:\Users\TeddY\Downloads\Porn_with_Animals_Movie_82.mpeg.exe
2013-02-04 14:47 - 2013-02-04 14:38 - 00000000 ____D C:\Users\TeddY\Downloads\Pretty 18yo teen
2013-02-04 14:37 - 2013-02-04 14:37 - 00014814 ____A C:\Users\TeddY\Downloads\[kat.ph]pretty.18.years.old.teen.pics.from.digital.cam.new.torrent
2013-02-04 13:45 - 2012-05-19 09:45 - 00000856 ____A C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-78225331-1311717946-2754557223-1000Core.job
2013-02-04 05:16 - 2012-05-19 09:50 - 00000000 ____D C:\Users\TeddY\AppData\Roaming\vlc
2013-02-04 02:32 - 2012-08-13 14:43 - 00000000 ____D C:\Users\TeddY\AppData\Roaming\Nitro PDF
2013-02-03 04:21 - 2012-10-02 00:37 - 00000000 ____D C:\Users\TeddY\AppData\Local\LooksBuilder
2013-02-03 04:11 - 2012-09-10 19:51 - 00000092 ____A C:\Users\TeddY\AppData\default.pls
2013-02-02 15:43 - 2013-02-02 15:43 - 00000000 ____A C:\Users\TeddY\.JavaPowUpload.properties
2013-02-02 15:43 - 2012-05-19 09:18 - 00000000 ____D C:\users\TeddY
2013-02-02 10:44 - 2013-02-02 10:44 - 106468554 ____A C:\Users\TeddY\Downloads\Hiras Favour.rar
2013-02-02 06:22 - 2013-02-02 06:21 - 00000000 ____D C:\Users\TeddY\Downloads\Magic Bullet Looks 1.2
2013-02-02 06:20 - 2013-02-02 06:20 - 00026943 ____A C:\Users\TeddY\Downloads\[kat.ph]magic.bullet.looks.1.2.torrent
2013-02-01 14:39 - 2012-08-30 12:15 - 00000000 ____D C:\Users\TeddY\AppData\Roaming\IDM
2013-02-01 13:04 - 2013-01-26 12:07 - 180529664 ____A C:\Users\TeddY\Downloads\Tera Patrick [JAM-HOT.com].mpeg
2013-02-01 12:50 - 2012-05-13 05:42 - 00000000 ____D C:\Users\TeddY\Downloads\Video
2013-02-01 12:21 - 2013-01-26 12:09 - 733941760 ____A C:\Users\TeddY\Downloads\Barbie Raperonzolo.avi
2013-02-01 10:53 - 2012-05-16 11:56 - 00000000 ____D C:\Users\TeddY\Downloads\Compressed
2013-02-01 10:46 - 2013-02-01 10:46 - 00000000 ____D C:\Users\TeddY\Downloads\Kaspersky Internet Security 2012 Keys [ChattChitto RG]
2013-02-01 07:19 - 2012-08-15 15:29 - 00000000 ____D C:\Users\All Users\Browser Manager
2013-01-31 22:17 - 2013-01-31 22:16 - 00000000 ____D C:\Users\TeddY\Desktop\2013.2.1
2013-01-31 00:11 - 2012-05-19 17:55 - 00000000 ____D C:\Users\TeddY\AppData\Roaming\Mozilla
2013-01-30 23:14 - 2013-01-30 22:19 - 00000000 ____D C:\Users\TeddY\Desktop\Muslim
2013-01-30 20:13 - 2012-12-28 04:47 - 00000000 ____D C:\Users\TeddY\Desktop\4n songs
2013-01-29 23:21 - 2013-01-29 23:21 - 00000000 __SHD C:\found.001
2013-01-29 08:44 - 2013-01-29 08:44 - 00282290 ____A C:\Users\TeddY\Downloads\[kat.ph]24.complete.series.season.1.2.3.4.5.6.7.8.prequels.extras.m.torrent
2013-01-27 22:11 - 2012-05-19 09:18 - 00000000 ____D C:\Users\TeddY\AppData\Local\VirtualStore
2013-01-27 00:56 - 2013-01-27 00:56 - 00246802 ____A C:\Users\TeddY\Downloads\lazarus_form_recovery-2.3-fx.xpi
2013-01-27 00:56 - 2013-01-27 00:56 - 00000000 ____D C:\Users\TeddY\Downloads\lazarus_form_recovery-2.3-fx
2013-01-26 12:42 - 2013-01-26 12:06 - 93074564 ____A C:\Users\TeddY\Downloads\Rape Fantasy - Mother & daughter gangraped by 4 guys - (French) (forced sex, [bleep], blow).mpg
2013-01-26 12:06 - 2013-01-26 12:06 - 00000000 ____D C:\Users\TeddY\Downloads\Lesbian Rape - On A Bed 3
2013-01-26 12:05 - 2013-01-26 12:05 - 00029151 ____A C:\Users\TeddY\Downloads\torrentdownloads net Rape Fantasy Mother & Daughter Gangraped By 4 Guys (french).torrent
2013-01-26 12:05 - 2013-01-26 12:05 - 00028512 ____A C:\Users\TeddY\Downloads\Barbie+Raperonzolo+-+%5BXviD+-+Ita+Mp3%5D+Animazione%2C+Ragazzi+MirCrew.torrent
2013-01-26 12:05 - 2013-01-26 12:05 - 00014307 ____A C:\Users\TeddY\Downloads\torrentdownloads net Rape Fantasy Coffee Salesgirl Rape (tera Patrick).torrent
2013-01-26 12:04 - 2013-01-26 12:04 - 00019637 ____A C:\Users\TeddY\Downloads\[kat.ph]lesbian.rape.on.a.bed.3.torrent
2013-01-23 19:02 - 2013-01-23 15:51 - 00000000 ____D C:\Users\TeddY\Desktop\Private Universities
2013-01-22 02:03 - 2013-01-22 02:03 - 00000000 ____D C:\Users\TeddY\Documents\Savegame
2013-01-21 13:03 - 2013-01-21 11:24 - 00000000 ____D C:\Users\TeddY\Downloads\Pretty.Girls.Punished.XXX.DVDRip.XViD-JuStTr4Sh
2013-01-21 11:24 - 2013-01-21 11:24 - 00000000 ____D C:\Users\TeddY\Downloads\BDSM - Torture Galaxy
2013-01-21 11:23 - 2013-01-21 11:22 - 00013724 ____A C:\Users\TeddY\Downloads\BDSM+-+Torture+Galaxy.torrent
2013-01-21 11:21 - 2013-01-21 11:21 - 00057113 ____A C:\Users\TeddY\Downloads\Pretty+Girl+Punished++%28Bizarre%29+%5BBDSM%2C+BONDAGE%2C+DVDRip%5D.torrent
2013-01-21 00:24 - 2013-01-20 07:17 - 15015265 ____A C:\Users\TeddY\Downloads\KrakatoaMX 2.1.1 (X64).rar
2013-01-20 22:53 - 2013-01-20 22:53 - 00000000 ____D C:\Users\Guest\Documents\Trigger
2013-01-20 22:53 - 2013-01-20 22:53 - 00000000 ____D C:\Users\Guest\Documents\Startup
2013-01-20 22:53 - 2013-01-20 22:53 - 00000000 ____D C:\Users\Guest\Documents\Screenshots
2013-01-20 22:53 - 2013-01-20 22:53 - 00000000 ____D C:\Users\Guest\Documents\Scenario
2013-01-20 22:53 - 2013-01-20 22:53 - 00000000 ____D C:\Users\Guest\Documents\Savegame
2013-01-20 22:53 - 2013-01-20 22:53 - 00000000 ____D C:\Users\Guest\Documents\RM
2013-01-20 22:53 - 2013-01-20 22:53 - 00000000 ____D C:\Users\Guest\Documents\HomeCities
2013-01-20 22:53 - 2013-01-20 22:53 - 00000000 ____D C:\Users\Guest\Documents\Data
2013-01-20 22:53 - 2013-01-20 22:53 - 00000000 ____D C:\Users\Guest\Documents\campaign
2013-01-20 22:53 - 2013-01-20 22:53 - 00000000 ____D C:\Users\Guest\Documents\AI
2013-01-20 22:51 - 2009-07-13 21:08 - 00032624 ____A C:\Windows\Tasks\SCHEDLGU.TXT
2013-01-20 22:40 - 2013-01-20 22:39 - 00000000 ____D C:\Users\Guest\AppData\Local\Autodesk
2013-01-20 22:39 - 2013-01-20 22:39 - 00000000 ____D C:\Users\Guest\Documents\3dsMax
2013-01-20 22:39 - 2013-01-20 22:39 - 00000000 ____D C:\Users\Guest\AppData\Roaming\Autodesk
2013-01-20 22:25 - 2013-01-20 22:14 - 00000000 ____D C:\Users\Guest\AppData\Local\Microsoft Games
2013-01-20 22:13 - 2012-11-13 22:07 - 00565568 ____A C:\Users\Guest\AppData\Local\GDIPFONTCACHEV1.DAT
2013-01-20 22:07 - 2013-01-20 22:07 - 00000000 ____D C:\Users\Guest\Desktop\competitions
2013-01-20 22:06 - 2013-01-20 22:05 - 00000000 ____D C:\Users\All Users\Mobile Broadband
2013-01-20 22:06 - 2013-01-20 22:03 - 00000000 ____D C:\Program Files (x86)\Mobile Broadband
2013-01-20 22:06 - 2012-10-05 08:41 - 00000000 ____D C:\Users\All Users\DatacardService
2013-01-20 22:05 - 2013-01-20 22:05 - 00001063 ____A C:\Users\Public\Desktop\Mobile Broadband.lnk
2013-01-20 22:03 - 2013-01-20 22:04 - 01001472 ____A (DiBcom SA) C:\Windows\System32\Drivers\mod7700.sys
2013-01-20 22:03 - 2013-01-20 22:04 - 00212992 ____A (Huawei Technologies Co., Ltd.) C:\Windows\System32\Drivers\ew_juwwanecm.sys
2013-01-20 22:03 - 2013-01-20 22:04 - 00098816 ____A (Huawei Technologies Co., Ltd.) C:\Windows\System32\Drivers\ew_jucdcacm.sys
2013-01-20 22:03 - 2013-01-20 22:04 - 00069632 ____A (Huawei Technologies Co., Ltd.) C:\Windows\System32\Drivers\ew_jucdcecm.sys
2013-01-20 22:03 - 2013-01-20 22:04 - 00032768 ____A (Huawei Tech. Co., Ltd.) C:\Windows\System32\Drivers\ewdcsc.sys
2013-01-20 22:03 - 2013-01-20 22:04 - 00028672 ____A (Huawei Technologies Co., Ltd.) C:\Windows\System32\Drivers\ew_juextctrl.sys
2013-01-20 22:03 - 2013-01-20 22:04 - 00022016 ____A (Huawei Technologies Co., Ltd.) C:\Windows\System32\Drivers\ew_hwupgrade.sys
2013-01-20 22:03 - 2013-01-20 22:04 - 00013952 ____A (Huawei Technologies Co., Ltd.) C:\Windows\System32\Drivers\ew_usbenumfilter.sys
2013-01-20 22:03 - 2013-01-20 22:03 - 00421376 ____A (Huawei Technologies Co., Ltd.) C:\Windows\System32\Drivers\ewusbwwan.sys
2013-01-20 22:03 - 2013-01-20 22:03 - 00221312 ____A (Huawei Technologies Co., Ltd.) C:\Windows\System32\Drivers\ewusbmdm.sys
2013-01-20 22:03 - 2013-01-20 22:03 - 00117248 ____A (Huawei Technologies Co., Ltd.) C:\Windows\System32\Drivers\ew_hwusbdev.sys
2013-01-20 22:03 - 2013-01-20 22:03 - 00086016 ____A (Huawei Technologies Co., Ltd.) C:\Windows\System32\Drivers\ew_jubusenum.sys
2013-01-20 22:03 - 2012-10-05 08:50 - 01490656 ____A (Microsoft Corporation) C:\Windows\System32\WdfCoInstaller01007.dll
2013-01-20 22:03 - 2012-10-05 08:50 - 01490656 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\WdfCoInstaller01007.dll
2013-01-20 10:53 - 2013-01-20 10:53 - 00009522 ____A C:\Users\TeddY\Desktop\Krakatoa MX 2.1.1.47356 for 3ds Max 2010, 2011, 2012, 2013 64bit (1).torrent
2013-01-20 10:51 - 2013-01-20 10:51 - 00019079 ____A C:\Users\TeddY\Desktop\Thinkbox Krakatoa MX v2.0.1.46319 for 3DSMAX - XFORCE.torrent
2013-01-19 15:42 - 2012-11-22 02:36 - 00000000 ____D C:\Users\TeddY\Desktop\101MSDCF
2013-01-19 15:31 - 2013-01-18 04:34 - 00000000 ____D C:\Program Files (x86)\Thinkbox
2013-01-19 15:22 - 2013-01-19 15:22 - 00011584 ____A C:\Users\TeddY\Downloads\Krakatoa MX 2.0.1.46319.torrent
2013-01-19 15:02 - 2013-01-19 15:02 - 00009522 ____A C:\Users\TeddY\Downloads\Krakatoa MX 2.1.1.47356 for 3ds Max 2010, 2011, 2012, 2013 64bit (1).torrent
2013-01-19 14:56 - 2013-01-19 14:56 - 00019079 ____A C:\Users\TeddY\Downloads\Thinkbox Krakatoa MX v2.0.1.46319 for 3DSMAX - XFORCE (2).torrent
2013-01-18 23:34 - 2013-01-18 23:34 - 00000000 ____D C:\Users\TeddY\Desktop\chip backup
2013-01-18 20:15 - 2013-01-18 18:58 - 00000000 ____D C:\Users\TeddY\Desktop\Bikshu Deshapalanaya
2013-01-18 16:53 - 2013-01-18 15:40 - 00000000 ____D C:\Users\TeddY\Downloads\Thinkbox Frost v1.1.2.44769 plugin for 3DS MAX 2012
2013-01-18 15:41 - 2013-01-18 15:41 - 00013267 ____A C:\Users\TeddY\Downloads\Graphisoft ArchiCAD 16 Build 3270 x64 + Crack + Goodies.txt
2013-01-18 15:39 - 2013-01-18 15:39 - 00011525 ____A C:\Users\TeddY\Downloads\9DD14CED41058C23C0E8F14D0E618DAA74372156.torrent
2013-01-18 15:38 - 2012-08-13 14:30 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-01-18 15:36 - 2012-05-19 17:55 - 00000000 ____D C:\Users\TeddY\AppData\Local\CRE
2013-01-18 15:35 - 2013-01-18 15:35 - 00000000 ____D C:\Program Files (x86)\uTorrentControl_v2
2013-01-18 15:35 - 2012-05-19 17:55 - 00000000 ____D C:\Users\TeddY\AppData\Local\Conduit
2013-01-18 15:34 - 2013-01-18 15:34 - 00000903 ____A C:\Users\Public\Desktop\µTorrent.lnk
2013-01-18 15:34 - 2013-01-18 15:34 - 00000000 ____D C:\Program Files (x86)\uTorrent
2013-01-18 15:31 - 2013-01-18 15:31 - 00019079 ____A C:\Users\TeddY\Downloads\Thinkbox Krakatoa MX v2.0.1.46319 for 3DSMAX - XFORCE (2).txt
2013-01-18 14:58 - 2013-01-18 14:58 - 00009522 ____A C:\Users\TeddY\Downloads\Krakatoa MX 2.1.1.47356 for 3ds Max 2010, 2011, 2012, 2013 64bit.txt
2013-01-18 14:55 - 2013-01-18 14:55 - 00019079 ____A C:\Users\TeddY\Downloads\Thinkbox Krakatoa MX v2.0.1.46319 for 3DSMAX - XFORCE (1).txt
2013-01-18 14:52 - 2013-01-18 14:51 - 00019079 ____A C:\Users\TeddY\Downloads\Thinkbox Krakatoa MX v2.0.1.46319 for 3DSMAX - XFORCE.torrent
2013-01-18 04:45 - 2013-01-18 04:45 - 00000000 ____D C:\Users\TeddY\AppData\Local\Thinkbox
2013-01-16 21:59 - 2012-11-15 09:14 - 00000000 ____D C:\Users\ResQ\AppData\Roaming\Adobe
2013-01-14 10:44 - 2013-01-14 10:33 - 66926759 ____A C:\Users\TeddY\Desktop\v2.flv
2013-01-14 10:43 - 2013-01-14 10:33 - 56246547 ____A C:\Users\TeddY\Desktop\v3.flv
2013-01-14 08:53 - 2013-01-14 08:53 - 00401304 ____A C:\Users\TeddY\Downloads\New Tab.htm
2013-01-14 03:42 - 2013-01-14 03:42 - 00163840 ____A C:\Users\TeddY\Desktop\lr.max
2013-01-12 08:49 - 2012-05-21 22:32 - 00000000 ____D C:\Program Files\K-Lite Codec Pack x64
2013-01-12 03:20 - 2012-12-14 11:39 - 00000000 ____D C:\Users\TeddY\Desktop\td]]]
2013-01-10 17:29 - 2013-01-01 20:43 - 00000515 ____A C:\Users\TeddY\Desktop\Amma Budjet.txt
2013-01-10 15:12 - 2013-01-10 12:47 - 00000000 ____D C:\Users\TeddY\Downloads\6000 Sound Effects
2013-01-10 12:46 - 2013-01-10 12:46 - 00013946 ____A C:\Users\TeddY\Downloads\[kat.ph]6000.sound.effects.torrent
2013-01-10 06:05 - 2009-07-13 20:45 - 06227312 ____A C:\Windows\System32\FNTCACHE.DAT
2013-01-09 12:08 - 2013-01-09 12:08 - 00013596 ____A C:\Users\TeddY\Downloads\FX+The+Effects+Vol+2+%28Loop9Samples%29.torrent
2013-01-09 12:06 - 2013-01-09 12:06 - 00035268 ____A C:\Users\TeddY\Downloads\sound-effects-fx.torrent
2013-01-09 12:05 - 2012-05-21 04:54 - 00697864 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-01-09 12:05 - 2012-05-21 04:54 - 00074248 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-01-09 03:49 - 2012-05-19 09:40 - 00565568 ____A C:\Users\TeddY\AppData\Local\GDIPFONTCACHEV1.DAT
2013-01-09 00:22 - 2013-01-09 00:22 - 00011778 ____A C:\Windows\log.tmp
2013-01-08 23:59 - 2013-01-08 22:29 - 00000132 ____A C:\Users\TeddY\AppData\Roaming\Adobe PNG Format CS6 Prefs
2013-01-08 10:58 - 2013-01-08 10:58 - 00020960 ____A C:\Users\TeddY\Downloads\after-effects-project-template-3d-logo-reveal.torrent
2013-01-08 10:56 - 2013-01-08 10:56 - 00020187 ____A C:\Users\TeddY\Downloads\After+Effects+%26amp%3B+Photoshop+Animation+%26amp%3B+Production+Effects+for+DV+and+Film+-+allfeeebook.tk.torrent

==================== Known DLLs (Whitelisted) =================


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points =========================


==================== Memory info ===========================

Percentage of memory in use: 14%
Total physical RAM: 3990.17 MB
Available physical RAM: 3404.82 MB
Total Pagefile: 3988.37 MB
Available Pagefile: 3395.76 MB
Total Virtual: 8192 MB
Available Virtual: 8191.9 MB

==================== Partitions =============================

1 Drive c: () (Fixed) (Total:147.3 GB) (Free:2.51 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
2 Drive d: () (Fixed) (Total:0.1 GB) (Free:0.08 GB) NTFS
3 Drive e: () (Fixed) (Total:195.31 GB) (Free:2.3 GB) NTFS
4 Drive f: () (Fixed) (Total:107.22 GB) (Free:0.2 GB) NTFS
6 Drive h: (New Volume) (Fixed) (Total:15.83 GB) (Free:15.74 GB) NTFS
7 Drive i: () (Removable) (Total:7.41 GB) (Free:6.44 GB) FAT32
8 Drive j: (KINGSTON) (Removable) (Total:14.64 GB) (Free:6.54 GB) FAT32
9 Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS

Disk ### Status Size Free Dyn Gpt
-------- ------------- ------- ------- --- ---
Disk 0 Online 465 GB 1024 KB *
Disk 1 Online 7600 MB 0 B
Disk 2 Online 14 GB 0 B

Partitions of Disk 0:
===============

Disk ID: 7CAF9F72

Partition ### Type Size Offset
------------- ---------------- ------- -------
Partition 1 Dynamic Data 100 MB 31 KB
Partition 2 Dynamic Data 147 GB 101 MB
Partition 3 Dynamic Data 318 GB 147 GB

==================================================================================

Disk: 0
Partition 1
Type : 42
Hidden: Yes
Active: No

There is no volume associated with this partition.

=========================================================

Disk: 0
Partition 2
Type : 42
Hidden: Yes
Active: Yes

Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 3 C NTFS Simple 147 GB Healthy

=========================================================

Disk: 0
Partition 3
Type : 42
Hidden: Yes
Active: No

Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 2 E NTFS Simple 195 GB Healthy

=========================================================

Partitions of Disk 1:
===============

Disk ID: 00000000

Partition ### Type Size Offset
------------- ---------------- ------- -------
Partition 1 Primary 7596 MB 4096 KB

==================================================================================

Disk: 1
Partition 1
Type : 0B
Hidden: No
Active: Yes

Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 6 I FAT32 Removable 7596 MB Healthy

=========================================================

Partitions of Disk 2:
===============

Disk ID: C3072E18

Partition ### Type Size Offset
------------- ---------------- ------- -------
Partition 1 Primary 14 GB 4032 KB

==================================================================================

Disk: 2
Partition 1
Type : 0C
Hidden: No
Active: Yes

Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 7 J KINGSTON FAT32 Removable 14 GB Healthy

=========================================================

Last Boot: 2013-02-04 16:47

==================== End Of Log =============================

Attached Files

  • Attached File  FRST.txt   43.23KB   97 downloads

  • 0

#3
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Hi there sorry for the delay

Download the attached fixlist.txt to the same USB as FRST

Run FRST as before
Click fix
Once it has run reboot to normal windows

Download OTL to your Desktop
Secondary link
  • Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.

    Posted Image
  • Select All Users
  • Under the Custom Scan box paste this in

    netsvcs
    BASESERVICES
    %SYSTEMDRIVE%\*.exe
    /md5start
    services.*
    explorer.exe
    winlogon.exe
    Userinit.exe
    svchost.exe
    winsock.*
    /md5stop
    CREATERESTOREPOINT

  • Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
  • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
  • Post both logs

  • 0

#4
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP