Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Can't Remove RCMP Ukash and Windows Security Center [Solved]


  • This topic is locked This topic is locked

#31
lillie_nemo

lillie_nemo

    Member

  • Topic Starter
  • Member
  • PipPip
  • 66 posts
Finally finished ESET check!

Some logs for you:

ESET:
[email protected] as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=f85462257edfd144ae35f225ade7d6f2
# engine=14188
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2013-06-28 07:39:35
# local_time=2013-06-28 03:39:35 (-0500, Eastern Daylight Time)
# country="Japan"
# lang=1033
# osver=6.0.6000 NT
# compatibility_mode=5122 16777214 66 93 0 134318953 0 0
# compatibility_mode=5892 16776573 100 100 0 209055903 0 0
# scanned=366553
# found=9
# cleaned=0
# scan_time=13879
sh=A12E5BD394124E527CE6892ECDDF4807FFB4EFCB ft=0 fh=0000000000000000 vn="probably a variant of Win32/NetTool.Portscan.AA application" ac=I fn="C:\Ogata\Zips\NetTools5.0.70.zip"
sh=1FAE86B43D755CDE051EF2FC7FD4E697C029620A ft=0 fh=0000000000000000 vn="Win32/Reveton.M trojan" ac=I fn="C:\ProgramData\sdaksda.txt"
sh=919CB06FB36610E892A33BFFFFB31ADFFF85657C ft=0 fh=0000000000000000 vn="Win32/Bagle.gen.zip worm" ac=I fn="C:\ProgramData\Spybot - Search & Destroy\Recovery\CoolWWWSearchCtfmon1.zip"
sh=1FAE86B43D755CDE051EF2FC7FD4E697C029620A ft=0 fh=0000000000000000 vn="Win32/Reveton.M trojan" ac=I fn="C:\Users\All Users\sdaksda.txt"
sh=919CB06FB36610E892A33BFFFFB31ADFFF85657C ft=0 fh=0000000000000000 vn="Win32/Bagle.gen.zip worm" ac=I fn="C:\Users\All Users\Spybot - Search & Destroy\Recovery\CoolWWWSearchCtfmon1.zip"
sh=1FAE86B43D755CDE051EF2FC7FD4E697C029620A ft=0 fh=0000000000000000 vn="Win32/Reveton.M trojan" ac=I fn="C:\Users\saicoink\AppData\Local\Temp\tratra.lnk"
sh=49D2ACD40AB4BD4C3677946D5D50AEFDA32F1829 ft=1 fh=a12bf011e2879ffc vn="a variant of Win32/Kryptik.BEHL trojan" ac=I fn="C:\Users\saicoink\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1\3e0d6341-2c36a64e"
sh=5C64413CF383EB7ACF885C64D40964EDB229A601 ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="C:\Users\saicoink\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\35\3bedf523-19cdfb1c"
sh=CF4804C7850E60AE7484AEF7065B2DBC6636B781 ft=0 fh=0000000000000000 vn="Win32/Reveton.M trojan" ac=I fn="C:\Windows\Temp\tratra.lnk"

---

OTL log:
OTL logfile created on: 2013/06/28 15:51:58 - Run 3
OTL by OldTimer - Version 3.2.69.0 Folder = E:\
Windows Vista Home Premium Edition (Version = 6.0.6000) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6000.16945)
Locale: 00000411 | Country: Japan | Language: JPN | Date Format: yyyy/MM/dd

1021.88 Mb Total Physical Memory | 240.70 Mb Available Physical Memory | 23.56% Memory free
2.23 Gb Paging File | 0.71 Gb Available in Paging File | 31.61% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 363.68 Gb Total Space | 66.85 Gb Free Space | 18.38% Space Free | Partition Type: NTFS
Drive D: | 8.92 Gb Total Space | 0.98 Gb Free Space | 10.95% Space Free | Partition Type: NTFS
Drive E: | 3.73 Gb Total Space | 1.73 Gb Free Space | 46.42% Space Free | Partition Type: FAT32

Computer Name: ENFLEUR | User Name: saicoink | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2013/06/25 04:46:46 | 000,602,112 | ---- | M] (OldTimer Tools) -- E:\OTL.exe
PRC - [2013/05/21 23:33:04 | 000,920,472 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2013/04/04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2013/04/04 14:50:32 | 000,532,040 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
PRC - [2013/04/04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
PRC - [2013/04/03 13:50:34 | 000,172,416 | ---- | M] (McAfee, Inc.) -- C:\Windows\System32\mfevtps.exe
PRC - [2013/04/03 13:47:22 | 000,169,320 | ---- | M] (McAfee, Inc.) -- C:\Program Files\Common Files\Mcafee\SystemCore\mfefire.exe
PRC - [2013/03/05 11:43:26 | 000,184,728 | ---- | M] (McAfee, Inc.) -- C:\Program Files\Common Files\Mcafee\Platform\McSvcHost\McSvHost.exe
PRC - [2013/02/28 13:33:06 | 000,140,456 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee\MSC\McAPExe.exe
PRC - [2013/02/28 09:46:46 | 000,638,976 | ---- | M] (McAfee, Inc.) -- C:\Program Files\Common Files\Mcafee\AMCore\mcshield.exe
PRC - [2012/10/07 03:12:36 | 000,252,792 | ---- | M] (McAfee, Inc.) -- C:\Program Files\Common Files\Mcafee\Platform\McUICnt.exe
PRC - [2012/07/08 22:57:48 | 000,069,640 | ---- | M] (Nalpeiron Ltd.) -- C:\Windows\System32\NLSSRV32.EXE
PRC - [2012/07/08 22:57:40 | 000,184,840 | ---- | M] (Nitro PDF Software) -- C:\Program Files\Nitro PDF\Professional 7\NitroPDFDriverService2.exe
PRC - [2011/10/25 19:01:18 | 000,417,792 | ---- | M] (AMD) -- C:\Windows\System32\atieclxx.exe
PRC - [2011/10/25 19:00:46 | 000,176,128 | ---- | M] (AMD) -- C:\Windows\System32\atiesrxx.exe
PRC - [2009/10/06 14:53:56 | 001,823,528 | ---- | M] (Wacom Technology, Corp.) -- C:\Windows\System32\WTablet\Wacom_TabletUser.exe
PRC - [2009/10/06 14:53:54 | 004,463,400 | ---- | M] (Wacom Technology, Corp.) -- C:\Windows\System32\Wacom_Tablet.exe
PRC - [2009/09/29 10:17:50 | 000,013,088 | ---- | M] (Intuit Inc.) -- C:\Program Files\Common Files\Intuit\Update Service\IntuitUpdateService.exe
PRC - [2009/03/19 15:03:32 | 000,167,936 | ---- | M] (Teruten Inc.) -- C:\Windows\System32\TsService.exe
PRC - [2009/01/26 15:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) -- C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
PRC - [2008/10/29 02:20:29 | 002,923,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2007/11/04 18:36:32 | 001,006,264 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Defender\MSASCui.exe
PRC - [2007/06/05 13:20:32 | 000,177,704 | ---- | M] () -- C:\Windows\System32\PSIService.exe
PRC - [2007/03/01 11:38:48 | 004,390,912 | ---- | M] (Realtek Semiconductor) -- C:\Windows\RtHDVCpl.exe
PRC - [2007/02/15 06:59:00 | 000,118,784 | ---- | M] (OsdMaestro) -- C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
PRC - [2006/11/15 19:58:26 | 000,151,552 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
PRC - [2006/11/15 19:57:58 | 000,081,920 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
PRC - [2006/11/02 05:44:59 | 000,068,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conime.exe
PRC - [2006/09/28 09:42:24 | 000,065,536 | ---- | M] (Hewlett-Packard Company) -- C:\hp\support\hpsysdrv.exe
PRC - [2006/09/03 13:32:28 | 000,208,896 | ---- | M] () -- C:\Program Files\Common Files\Intel\IntelDH\NMS\AdpPlugins\DQLWinService.exe


========== Modules (No Company Name) ==========

MOD - [2013/05/21 23:33:03 | 003,128,728 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2011/10/25 18:20:30 | 000,037,376 | ---- | M] () -- C:\Windows\System32\atitmpxx.dll


========== Services (SafeList) ==========

SRV - File not found [Auto | Stopped] -- %systemroot%\system32\besclient.dll -- (w800bus)
SRV - File not found [Auto | Running] -- C:\Program Files\Spybot -- (SBSDWSCService)
SRV - File not found [On_Demand | Stopped] -- c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe /h ccCommon -- (LiveUpdate Notice Ex)
SRV - [2013/04/11 22:08:25 | 000,117,144 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013/04/04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2013/04/04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2013/04/03 13:50:34 | 000,172,416 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Windows\System32\mfevtps.exe -- (mfevtp)
SRV - [2013/04/03 13:47:22 | 000,169,320 | ---- | M] () [Auto | Running] -- C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe -- (mfefire)
SRV - [2013/03/05 11:43:26 | 000,184,728 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\Mcafee\Platform\McSvcHost\McSvHost.exe -- (MSK80Service)
SRV - [2013/03/05 11:43:26 | 000,184,728 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\Mcafee\Platform\McSvcHost\McSvHost.exe -- (McProxy)
SRV - [2013/03/05 11:43:26 | 000,184,728 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\Mcafee\Platform\McSvcHost\McSvHost.exe -- (mcpltsvc)
SRV - [2013/03/05 11:43:26 | 000,184,728 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\Mcafee\Platform\McSvcHost\McSvHost.exe -- (McNaiAnn)
SRV - [2013/03/05 11:43:26 | 000,184,728 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\Mcafee\Platform\McSvcHost\McSvHost.exe -- (McMPFSvc)
SRV - [2013/03/05 11:43:26 | 000,184,728 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\Mcafee\Platform\McSvcHost\McSvHost.exe -- (HomeNetSvc)
SRV - [2013/03/01 09:06:56 | 000,287,752 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\McAfee\VirusScan\mcods.exe -- (McODS)
SRV - [2013/02/28 09:46:46 | 000,638,976 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\Mcafee\AMCore\mcshield.exe -- (mfecore)
SRV - [2012/07/08 22:57:48 | 000,069,640 | ---- | M] (Nalpeiron Ltd.) [Auto | Running] -- C:\Windows\System32\NLSSRV32.EXE -- (nlsX86cc)
SRV - [2012/07/08 22:57:40 | 000,184,840 | ---- | M] (Nitro PDF Software) [Auto | Running] -- C:\Program Files\Nitro PDF\Professional 7\NitroPDFDriverService2.exe -- (NitroDriverReadSpool2)
SRV - [2011/10/25 19:00:46 | 000,176,128 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\System32\atiesrxx.exe -- (AMD External Events Utility)
SRV - [2011/06/29 15:59:18 | 000,155,344 | ---- | M] (Avanquest Software) [On_Demand | Stopped] -- C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe -- (Sony Ericsson PCCompanion)
SRV - [2009/10/06 14:53:54 | 004,463,400 | ---- | M] (Wacom Technology, Corp.) [Auto | Running] -- C:\Windows\System32\Wacom_Tablet.exe -- (TabletServiceWacom)
SRV - [2009/09/29 10:17:50 | 000,013,088 | ---- | M] (Intuit Inc.) [Auto | Running] -- C:\Program Files\Common Files\Intuit\Update Service\IntuitUpdateService.exe -- (IntuitUpdateService)
SRV - [2009/03/19 15:03:32 | 000,167,936 | ---- | M] (Teruten Inc.) [Auto | Running] -- C:\Windows\System32\TsService.exe -- (TsService)
SRV - [2008/06/20 14:26:52 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2007/11/28 20:51:10 | 000,583,048 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe -- (LiveUpdate Notice Service)
SRV - [2007/11/04 18:36:32 | 000,265,912 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007/09/12 19:27:24 | 002,999,664 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE -- (LiveUpdate)
SRV - [2007/09/12 19:27:24 | 000,554,352 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe -- (Automatic LiveUpdate Scheduler)
SRV - [2007/09/11 00:45:04 | 000,124,832 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe -- (AdobeActiveFileMonitor6.0)
SRV - [2007/06/05 13:20:32 | 000,177,704 | ---- | M] () [Auto | Start_Pending] -- C:\Windows\System32\PSIService.exe -- (ProtexisLicensing)
SRV - [2007/02/05 11:11:18 | 000,075,320 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe -- (SSScsiSV)
SRV - [2007/02/05 11:11:16 | 000,112,184 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Sony Shared\AVLib\SsBeSvc.exe -- (SonicStage Back-End Service)
SRV - [2006/12/14 03:21:20 | 000,045,056 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe -- (MSCSPTISRV)
SRV - [2006/12/14 03:02:08 | 000,069,632 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe -- (SPTISRV)
SRV - [2006/12/14 02:46:16 | 000,057,344 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe -- (PACSPTISVR)
SRV - [2006/11/15 19:57:58 | 000,081,920 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON)
SRV - [2006/09/11 19:02:44 | 000,544,256 | ---- | M] (Intel® Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\Remote UI Service.exe -- (Remote UI Service)
SRV - [2006/09/11 19:01:04 | 000,167,936 | ---- | M] (Intel® Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\MCLServiceATL.exe -- (MCLServiceATL)
SRV - [2006/09/11 18:56:32 | 000,075,264 | ---- | M] (Intel® Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\issm.exe -- (ISSM)
SRV - [2006/09/11 18:56:20 | 000,188,416 | ---- | M] (Intel® Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\IntelDH\CCU\AlertService.exe -- (AlertService)
SRV - [2006/09/03 13:32:28 | 000,208,896 | ---- | M] () [Auto | Running] -- C:\Program Files\Common Files\Intel\IntelDH\NMS\AdpPlugins\DQLWinService.exe -- (DQLWinService)
SRV - [2006/09/01 02:47:56 | 000,026,624 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\mediaserver.exe -- (M1 Server)
SRV - [2006/05/10 12:13:52 | 000,029,696 | R--- | M] (Intel® Corporation) [Auto | Stopped] -- C:\Program Files\Intel\IntelDH\Intel Media Server\tools\IntelDHSvcConf.exe -- (IntelDHSvcConf)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\wacomrouterfilter.sys -- (wacomrouterfilter)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\Zinf\portio.sys -- (portio)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - File not found [Kernel | System | Stopped] -- system32\DRIVERS\cdrom.sys -- (cdrom)
DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\blbdrive.sys -- (blbdrive)
DRV - [2013/04/04 14:50:32 | 000,022,856 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2013/04/03 13:53:24 | 000,060,920 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\cfwids.sys -- (cfwids)
DRV - [2013/04/03 13:50:14 | 000,091,640 | ---- | M] (McAfee, Inc.) [Kernel | System | Running] -- C:\Windows\System32\drivers\mfetdi2k.sys -- (mfetdi2k)
DRV - [2013/04/03 13:48:22 | 000,566,656 | ---- | M] (McAfee, Inc.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\mfehidk.sys -- (mfehidk)
DRV - [2013/04/03 13:47:52 | 000,066,888 | ---- | M] (McAfee, Inc.) [Kernel | System | Running] -- C:\Windows\System32\drivers\mfenlfk.sys -- (mfenlfk)
DRV - [2013/04/03 13:47:32 | 000,363,432 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\mfefirek.sys -- (mfefirek)
DRV - [2013/04/03 13:47:10 | 000,065,928 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\mfebopk.sys -- (mfebopk)
DRV - [2013/04/03 13:46:52 | 000,235,520 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\mfeavfk.sys -- (mfeavfk)
DRV - [2013/04/03 13:46:22 | 000,133,992 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\mfeapfk.sys -- (mfeapfk)
DRV - [2013/02/18 07:46:38 | 000,080,592 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\mfencrk.sys -- (mfencrk)
DRV - [2013/02/18 07:46:34 | 000,257,496 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\mfencbdc.sys -- (mfencbdc)
DRV - [2012/05/28 10:28:04 | 000,147,472 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\HipShieldK.sys -- (HipShieldK)
DRV - [2011/10/25 20:03:48 | 008,853,504 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (amdkmdag)
DRV - [2011/10/25 18:21:36 | 000,264,192 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmpag.sys -- (amdkmdap)
DRV - [2011/06/06 15:06:42 | 000,081,936 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AtihdLH3.sys -- (AtiHDAudioService)
DRV - [2009/08/27 16:06:32 | 000,016,168 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\wacmoumonitor.sys -- (wacmoumonitor)
DRV - [2009/05/20 12:54:06 | 000,013,736 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\wacomvhid.sys -- (wacomvhid)
DRV - [2008/05/08 05:05:18 | 000,266,752 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\HSXHWBS2.sys -- (HSXHWBS2)
DRV - [2008/05/08 05:03:18 | 000,980,992 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\HSX_DP.sys -- (HSF_DP)
DRV - [2008/05/02 00:15:44 | 000,004,096 | ---- | M] () [Kernel | Unavailable | Unknown] -- C:\Program Files\Unlocker\UnlockerDriver5.sys -- (UnlockerDriver5)
DRV - [2007/10/18 07:36:54 | 000,008,704 | ---- | M] (Conexant Systems, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\XAudio.sys -- (XAudio)
DRV - [2007/09/25 10:59:46 | 000,015,152 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files\MediaCoder\SysInfo.sys -- (CrystalSysInfo)
DRV - [2007/03/12 16:37:00 | 004,465,408 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2007/02/16 11:12:36 | 000,011,312 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\wacommousefilter.sys -- (wacommousefilter)
DRV - [2007/01/15 03:43:28 | 000,354,432 | ---- | M] (Hauppauge Computer Works, Inc) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\hcw18bda.sys -- (hcw18bda)
DRV - [2006/11/02 05:02:01 | 000,006,144 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\[email protected] -- (RDPCDD)
DRV - [2006/11/02 03:30:55 | 000,200,704 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\e1e6032.sys -- (e1express)
DRV - [2005/12/12 13:27:00 | 000,019,072 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\PS2.sys -- (Ps2)
DRV - [2002/08/08 16:51:32 | 000,038,951 | ---- | M] (Sony Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\NETMDUSB.sys -- (NETMDUSB)
DRV - [1999/09/10 12:06:00 | 000,025,244 | ---- | M] (Adaptec) [Kernel | System | Running] -- C:\Windows\System32\drivers\Aspi32.sys -- (ASPI32)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.h...lion&pf=desktop
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.h...lion&pf=desktop
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{76F3D4AC-5E11-4F6F-9F7F-F3FB98FC089E}: "URL" = http://ca.search.yah...ing}&fr=hp-pvdt
IE - HKLM\..\SearchScopes\{8CBE3FF8-BC71-4515-AC21-4B5338A96073}: "URL" = http://www.ask.com/w...}&l=dis&o=cahpd
IE - HKLM\..\SearchScopes\{9227DF63-238D-48B7-AFFA-90916A8D4255}: "URL" = http://search.live.c...#38;FORM=HVDCS7


IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-21-392368935-1018968332-2870084161-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKU\S-1-5-21-392368935-1018968332-2870084161-1001\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-392368935-1018968332-2870084161-1001\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-392368935-1018968332-2870084161-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE - HKU\S-1-5-21-392368935-1018968332-2870084161-1001\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE - HKU\S-1-5-21-392368935-1018968332-2870084161-1001\..\SearchScopes\{76F3D4AC-5E11-4F6F-9F7F-F3FB98FC089E}: "URL" = http://ca.search.yah...ing}&fr=hp-pvdt
IE - HKU\S-1-5-21-392368935-1018968332-2870084161-1001\..\SearchScopes\{8CBE3FF8-BC71-4515-AC21-4B5338A96073}: "URL" = http://www.ask.com/w...}&l=dis&o=cahpd
IE - HKU\S-1-5-21-392368935-1018968332-2870084161-1001\..\SearchScopes\{9227DF63-238D-48B7-AFFA-90916A8D4255}: "URL" = http://search.live.c...#38;FORM=HVDCS7
IE - HKU\S-1-5-21-392368935-1018968332-2870084161-1001\..\SearchScopes\{DECA3892-BA8F-44b8-A993-A466AD694AE4}: "URL" = http://ca.search.yah...p={searchTerms}
IE - HKU\S-1-5-21-392368935-1018968332-2870084161-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..extensions.enabledAddons: brief%40mozdev.org:1.6.2
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:21.0
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_4_402_287.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Content Upload Plugin,version=1.0.0: C:\Program Files\DivX\DivX Content Uploader\npUpload.dll File not found
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll (DivX, Inc)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.11.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@mcafee.com/MSC,version=10: c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nitropdf.com/NitroPDF: C:\Program Files\Nitro PDF\Professional 7\npnitromozilla.dll ( )
FF - HKLM\Software\MozillaPlugins\@playstation.com/PsndlCheck,version=1.00: File not found
FF - HKLM\Software\MozillaPlugins\@real.com/RhapsodyPlayerEngine,version=1.0: C:\Program Files\Real\RhapsodyPlayerEngine\nprhapengine.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@SonyCreativeSoftware.com/Media Go,version=1.0: C:\Program Files\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.1: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@wacom.com/wacom-plugin,version=1.1.0.3: C:\Program Files\TabletPlugins\npwacom.dll (Wacom, Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\saicoink\AppData\Local\Google\Update\1.3.21.53\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\saicoink\AppData\Local\Google\Update\1.3.21.53\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\wacom.com/WacomTabletPlugin: C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll File not found

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\FFTool[email protected]: C:\Program Files\Auslogics\Auslogics Antivirus\bdaphffext\
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013/05/21 23:33:05 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013/06/25 20:08:48 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\[email protected]: C:\Program Files\McAfee\MSK [2013/06/23 15:52:36 | 000,000,000 | ---D | M]

[2009/05/29 00:49:38 | 000,000,000 | ---D | M] (No name found) -- C:\Users\saicoink\AppData\Roaming\Mozilla\Extensions
[2013/05/21 10:17:36 | 000,000,000 | ---D | M] (No name found) -- C:\Users\saicoink\AppData\Roaming\Mozilla\Firefox\Profiles\vlxpr8g8.default-1366383230636\extensions
[2013/05/21 10:17:36 | 000,242,942 | ---- | M] () (No name found) -- C:\Users\saicoink\AppData\Roaming\Mozilla\Firefox\Profiles\vlxpr8g8.default-1366383230636\extensions\[email protected]
[2013/05/21 23:33:05 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions
[2013/05/21 23:33:05 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2009/09/13 22:10:06 | 000,047,104 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\mozilla firefox\components\FFComm.dll
[2010/06/08 09:50:17 | 000,002,027 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\McSiteAdvisor.xml

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?client=chrome&hl={language}&q={searchTerms}
CHR - homepage: http://www.google.com/
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\saicoink\AppData\Local\Google\Chrome\Application\10.0.648.205\pdf.dll
CHR - plugin: Google Gears 0.5.33.0 (Enabled) = C:\Users\saicoink\AppData\Local\Google\Chrome\Application\10.0.648.205\gears.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\saicoink\AppData\Local\Google\Chrome\Application\10.0.648.205\gcswf32.dll
CHR - plugin: McAfee SiteAdvisor (Enabled) = C:\Users\saicoink\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.30.150.1_0\McChPlg.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 8.0\Reader\Browser\nppdf32.dll
CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll
CHR - plugin: BitTorrent (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npbittorrent.dll
CHR - plugin: DivX Player Netscape Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npDivxPlayerPlugin.dll
CHR - plugin: downloadUpdater (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npdnu.dll
CHR - plugin: downloadUpdater2 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npdnupdater2.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll
CHR - plugin: MetaStream 3 Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npViewpoint.dll
CHR - plugin: DNA Plug-in (Enabled) = C:\Program Files\DNA\plugins\npbtdna.dll
CHR - plugin: DivX Web Player (Enabled) = C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
CHR - plugin: RealPlayer™ G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll
CHR - plugin: RealJukebox NS Plugin (Enabled) = C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll
CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll
CHR - plugin: RealNetworks Rhapsody Player Engine (Enabled) = C:\Program Files\Real\RhapsodyPlayerEngine\nprhapengine.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Google Update (Enabled) = C:\Users\saicoink\AppData\Local\Google\Update\1.2.183.39\npGoogleOneClick8.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: TweetDeck = C:\Users\saicoink\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbdpomandigafcibbmofojjchbcdagbl\2.0.2_0\

O1 HOSTS File: ([2013/06/25 03:05:10 | 000,449,750 | R--- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 www.1-2005-search.com
O1 - Hosts: 15443 more lines...
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Skype add-on (mastermind)) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe (Hewlett-Packard Company)
O4 - HKLM..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe (Intel Corporation)
O4 - HKLM..\Run: [mcpltui_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe (McAfee, Inc.)
O4 - HKLM..\Run: [mcui_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe (McAfee, Inc.)
O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\Windows\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvSvc] C:\Windows\System32\nvsvc.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [OsdMaestro] C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe (OsdMaestro)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" File not found
O4 - HKLM..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot File not found
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKU\.DEFAULT..\Run: [ctfmon32.exe] C:\PROGRA~2\rundll32.exe c:\progra~2\gwdb.dat,XFG00 File not found
O4 - HKU\S-1-5-18..\Run: [ctfmon32.exe] C:\PROGRA~2\rundll32.exe c:\progra~2\gwdb.dat,XFG00 File not found
O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - Startup: C:\Users\saicoink\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKU\S-1-5-21-392368935-1018968332-2870084161-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideSCAHealth = 1
O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O13 - gopher Prefix: missing
O15 - HKU\.DEFAULT\..Trusted Ranges: Range1 ([http] in Local intranet)
O15 - HKU\S-1-5-18\..Trusted Ranges: Range1 ([http] in Local intranet)
O15 - HKU\S-1-5-21-392368935-1018968332-2870084161-1001\..Trusted Domains: intuit.com ([ttlc] https in Trusted sites)
O15 - HKU\S-1-5-21-392368935-1018968332-2870084161-1001\..Trusted Ranges: Range1 ([http] in Local intranet)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_26)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 206.248.154.22 206.248.154.170
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4B320FF9-9304-4A2E-ADD7-D4FC2BEBA624}: DhcpNameServer = 206.248.154.22 206.248.154.170
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Filter\application/x-mfe-ipt {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\McAfee\MSC\McSnIePl.dll (McAfee, Inc.)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\saicoink\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O24 - Desktop BackupWallPaper: C:\Users\saicoink\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2007/06/04 16:14:23 | 000,000,074 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{64b8653f-b1e0-11df-85c8-001bfcf8e1f2}\Shell - "" = AutoRun
O33 - MountPoints2\{64b8653f-b1e0-11df-85c8-001bfcf8e1f2}\Shell\AutoRun\command - "" = "K:\WD SmartWare.exe" autoplay=true
O33 - MountPoints2\{bc6f828a-3bd6-11e2-bcf0-001bfcf8e1f2}\Shell\AutoRun\command - "" = E:\RunClubSanDisk.exe
O33 - MountPoints2\{f081b9ca-1043-11e0-a9f1-b4a0aaf81b7e}\Shell - "" = AutoRun
O33 - MountPoints2\{f081b9ca-1043-11e0-a9f1-b4a0aaf81b7e}\Shell\AutoRun\command - "" = "J:\WD SmartWare.exe" autoplay=true
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

SafeBootMin: 49224448.sys - Driver
SafeBootMin: AppMgmt - Service
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: MCODS - C:\Program Files\McAfee\VirusScan\mcods.exe (McAfee, Inc.)
SafeBootMin: mcpltsvc - C:\Program Files\Common Files\Mcafee\Platform\McSvcHost\McSvHost.exe (McAfee, Inc.)
SafeBootMin: NTDS - File not found
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

SafeBootNet: 49224448.sys - Driver
SafeBootNet: AppMgmt - Service
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: McMPFSvc - C:\Program Files\Common Files\Mcafee\Platform\McSvcHost\McSvHost.exe (McAfee, Inc.)
SafeBootNet: MCODS - C:\Program Files\McAfee\VirusScan\mcods.exe (McAfee, Inc.)
SafeBootNet: mcpltsvc - C:\Program Files\Common Files\Mcafee\Platform\McSvcHost\McSvHost.exe (McAfee, Inc.)
SafeBootNet: Messenger - Service
SafeBootNet: mfefire - C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe ()
SafeBootNet: mfefirek - C:\Windows\System32\drivers\mfefirek.sys (McAfee, Inc.)
SafeBootNet: mfefirek.sys - C:\Windows\System32\drivers\mfefirek.sys (McAfee, Inc.)
SafeBootNet: mfehidk - C:\Windows\System32\drivers\mfehidk.sys (McAfee, Inc.)
SafeBootNet: mfehidk.sys - C:\Windows\System32\drivers\mfehidk.sys (McAfee, Inc.)
SafeBootNet: mfevtp - C:\Windows\System32\mfevtps.exe (McAfee, Inc.)
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: NTDS - File not found
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

========== Files/Folders - Created Within 30 Days ==========

[2013/06/28 11:44:59 | 000,000,000 | ---D | C] -- C:\Program Files\ESET
[2013/06/28 11:28:12 | 002,347,384 | ---- | C] (ESET) -- C:\Users\saicoink\Desktop\esetsmartinstaller_enu.exe
[2013/06/28 11:22:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
[2013/06/26 10:45:43 | 000,000,000 | ---D | C] -- C:\FRST
[2013/06/26 10:44:59 | 004,745,728 | ---- | C] (AVAST Software) -- C:\Users\saicoink\Desktop\aswMBR.exe
[2013/06/26 10:44:44 | 001,370,251 | ---- | C] (Farbar) -- C:\Users\saicoink\Desktop\FRST.exe
[2013/06/25 22:38:03 | 000,000,000 | ---D | C] -- C:\TDSSKiller_Quarantine
[2013/06/25 20:43:22 | 000,355,927 | ---- | C] (Farbar) -- C:\Users\saicoink\Desktop\FSS.exe
[2013/06/25 20:33:02 | 002,237,968 | ---- | C] (Kaspersky Lab ZAO) -- C:\Users\saicoink\Desktop\tdsskiller.exe
[2013/06/25 07:55:36 | 000,000,000 | ---D | C] -- C:\Stinger_Quarantine
[2013/06/25 07:55:28 | 000,000,000 | ---D | C] -- C:\Program Files\stinger
[2013/06/25 02:31:07 | 000,000,000 | ---D | C] -- C:\Windows\pss
[2013/06/23 15:44:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2013/06/23 15:43:54 | 000,022,856 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2013/06/23 15:43:54 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2013/06/23 13:44:34 | 000,147,472 | ---- | C] (McAfee, Inc.) -- C:\Windows\System32\drivers\HipShieldK.sys
[2013/06/23 13:35:48 | 000,066,888 | ---- | C] (McAfee, Inc.) -- C:\Windows\System32\drivers\mfenlfk.sys
[2013/06/23 13:14:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Citrix
[2013/06/23 13:11:01 | 000,000,000 | ---D | C] -- C:\Program Files\Citrix
[2007/11/14 23:53:43 | 000,411,248 | ---- | C] (Applian Technologies Inc.) -- C:\Program Files\FLV PlayerRCSetup.exe
[14 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]
[14 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2013/06/28 16:05:00 | 000,000,424 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{D3B927D7-35BB-44E3-85A4-77E8C7A308A2}.job
[2013/06/28 15:52:00 | 000,000,712 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-392368935-1018968332-2870084161-1001UA.job
[2013/06/28 15:52:00 | 000,000,660 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-392368935-1018968332-2870084161-1001Core.job
[2013/06/28 15:17:12 | 000,003,856 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2013/06/28 15:17:12 | 000,003,856 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2013/06/28 11:27:57 | 002,347,384 | ---- | M] (ESET) -- C:\Users\saicoink\Desktop\esetsmartinstaller_enu.exe
[2013/06/28 11:17:08 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013/06/28 11:17:05 | 1072,123,904 | -HS- | M] () -- C:\hiberfil.sys
[2013/06/26 10:54:15 | 000,609,944 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2013/06/26 10:54:15 | 000,103,726 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2013/06/26 10:36:48 | 004,745,728 | ---- | M] (AVAST Software) -- C:\Users\saicoink\Desktop\aswMBR.exe
[2013/06/26 10:32:30 | 000,648,201 | ---- | M] () -- C:\Users\saicoink\Desktop\adwcleaner.exe
[2013/06/26 10:31:42 | 001,370,251 | ---- | M] (Farbar) -- C:\Users\saicoink\Desktop\FRST.exe
[2013/06/25 20:24:36 | 000,355,927 | ---- | M] (Farbar) -- C:\Users\saicoink\Desktop\FSS.exe
[2013/06/25 20:24:26 | 002,237,968 | ---- | M] (Kaspersky Lab ZAO) -- C:\Users\saicoink\Desktop\tdsskiller.exe
[2013/06/25 20:23:40 | 000,004,576 | ---- | M] () -- C:\Users\saicoink\Desktop\winmgmt.reg
[2013/06/25 04:08:00 | 014,909,286 | ---- | M] () -- C:\Users\saicoink\Documents\safe130622.reg
[2013/06/25 03:05:10 | 000,449,750 | R--- | M] () -- C:\Windows\System32\drivers\etc\hosts
[2013/06/24 20:00:00 | 000,000,552 | ---- | M] () -- C:\Windows\tasks\Norton Internet Security - Run Full System Scan - saicoink.job
[2013/06/23 16:28:59 | 002,523,136 | ---- | M] () -- C:\Windows\ocsetup_install_MicrosoftWindowsPowerShell.etl
[2013/06/23 16:28:59 | 000,081,920 | ---- | M] () -- C:\Windows\ocsetup_cbs_install_MicrosoftWindowsPowerShell.perf
[2013/06/23 16:28:59 | 000,016,384 | ---- | M] () -- C:\Windows\ocsetup_cbs_install_MicrosoftWindowsPowerShell.dpx
[2013/06/23 16:03:41 | 000,001,356 | ---- | M] () -- C:\Users\saicoink\AppData\Local\d3d9caps.dat
[2013/06/23 15:44:02 | 000,000,908 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013/06/18 11:29:10 | 000,097,296 | ---- | M] () -- C:\Users\saicoink\Documents\An Nguyen-CV.pdf
[2013/06/18 11:28:34 | 000,006,499 | ---- | M] () -- C:\Users\saicoink\AppData\Roaming\PrimoPDFSet.xml
[2013/06/02 23:02:49 | 000,191,488 | ---- | M] () -- C:\Users\saicoink\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[14 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]
[14 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]

========== Files Created - No Company Name ==========

[2013/06/28 11:17:05 | 1072,123,904 | -HS- | C] () -- C:\hiberfil.sys
[2013/06/28 11:06:51 | 000,000,000 | ---- | C] () -- C:\Users\saicoink\Desktop\SecurityCheck.exe
[2013/06/26 10:44:52 | 000,648,201 | ---- | C] () -- C:\Users\saicoink\Desktop\adwcleaner.exe
[2013/06/25 20:33:04 | 000,004,576 | ---- | C] () -- C:\Users\saicoink\Desktop\winmgmt.reg
[2013/06/25 20:30:37 | 000,001,172 | ---- | C] () -- C:\Users\saicoink\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk
[2013/06/25 20:30:37 | 000,001,152 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk
[2013/06/25 04:07:59 | 014,909,286 | ---- | C] () -- C:\Users\saicoink\Documents\safe130622.reg
[2013/06/23 16:10:15 | 002,523,136 | ---- | C] () -- C:\Windows\ocsetup_install_MicrosoftWindowsPowerShell.etl
[2013/06/23 16:10:15 | 000,081,920 | ---- | C] () -- C:\Windows\ocsetup_cbs_install_MicrosoftWindowsPowerShell.perf
[2013/06/23 16:10:15 | 000,016,384 | ---- | C] () -- C:\Windows\ocsetup_cbs_install_MicrosoftWindowsPowerShell.dpx
[2013/06/23 15:44:02 | 000,000,908 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013/06/23 13:43:46 | 000,002,641 | ---- | C] () -- C:\Windows\System32\drivers\mfencrk.inf
[2013/06/23 13:43:44 | 000,002,951 | ---- | C] () -- C:\Windows\System32\drivers\mfencbdc.inf
[2013/06/18 11:29:10 | 000,097,296 | ---- | C] () -- C:\Users\saicoink\Documents\An Nguyen-CV.pdf
[2012/08/21 03:30:47 | 000,014,244 | ---- | C] () -- C:\Windows\System32\Wacom_Tablet.dat
[2012/02/14 20:37:53 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2012/02/14 19:47:03 | 000,037,376 | ---- | C] () -- C:\Windows\System32\atitmpxx.dll
[2012/02/14 19:47:03 | 000,003,917 | ---- | C] () -- C:\Windows\System32\atipblag.dat
[2012/02/14 19:46:59 | 000,239,869 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
[2012/01/12 05:05:14 | 000,404,356 | -H-- | C] () -- C:\Windows\System32\mlfcache.dat
[2011/10/25 22:21:48 | 000,056,832 | ---- | C] () -- C:\Windows\System32\OpenVideo.dll
[2011/10/25 22:21:34 | 000,056,832 | ---- | C] () -- C:\Windows\System32\OVDecoder.dll
[2011/09/09 14:57:26 | 000,001,356 | ---- | C] () -- C:\Users\saicoink\AppData\Local\d3d9caps.dat
[2010/06/04 10:41:33 | 000,011,892 | ---- | C] () -- C:\ProgramData\LUUnInstall.LiveUpdate
[2009/04/17 08:49:14 | 000,006,499 | ---- | C] () -- C:\Users\saicoink\AppData\Roaming\PrimoPDFSet.xml
[2008/07/15 10:23:26 | 000,000,247 | ---- | C] () -- C:\Users\saicoink\.jupload.properties
[2008/03/25 22:53:00 | 000,000,032 | ---- | C] () -- C:\ProgramData\ezsid.dat
[2007/11/05 14:01:06 | 000,191,488 | ---- | C] () -- C:\Users\saicoink\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2007/11/05 01:49:55 | 000,030,638 | ---- | C] () -- C:\Users\saicoink\AppData\Roaming\wklnhst.dat
[1999/07/06 20:00:00 | 000,000,006 | RHS- | C] () -- C:\ProgramData\D81EDBF9-D167-4011-B77D-211DF920EB80

========== ZeroAccess Check ==========

[2006/11/02 08:54:22 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2008/11/06 08:57:06 | 011,315,712 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009/03/03 00:16:12 | 000,614,912 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2006/11/02 05:46:13 | 000,348,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== Hard Links - Junction Points - Mount Points - Symbolic Links ==========
[C:\Windows\$NtUninstallKB53243$] -> Error: Cannot create file handle -> Unknown point type

< End of report >
  • 0

Advertisements


#32
lillie_nemo

lillie_nemo

    Member

  • Topic Starter
  • Member
  • PipPip
  • 66 posts
I was just looking at the OTL file listed above and was just curious about the section "O1 HOSTS File" - what is with all the entries? I am not familiar with any of these websites. Should I find a way to get rid of all these 'hosts?'
  • 0

#33
Buddierdl

Buddierdl

    Trusted Helper

  • Malware Removal
  • 2,524 posts
That is actually a protective hosts file. If you were to try to go to one of those sites, you would be redirected to 127.0.0.1, which is your own computer. It prevents your computer from accessing those malicious sites.

I'll have another fix for you hopefully tomorrow afternoon (my schedule will be somewhat hectic :)).


In the meantime, does Security Center still show in Safe Mode? That is really weird because usually malicious programs run in Normal Mode and not Safe Mode, instead of the other way around. If so, could you get me an OTL quick scan while in Safe Mode?
  • 0

#34
lillie_nemo

lillie_nemo

    Member

  • Topic Starter
  • Member
  • PipPip
  • 66 posts
Thanks for helping me out despite your hectic schedule :-)

Writing from safe mode again-

Yeah, Security Center icon still shows! The whole thing is really baffling to me too!

Anyway, here is the OTL I just ran while in safe mode:

OTL logfile created on: 2013/06/28 20:36:21 - Run 4
OTL by OldTimer - Version 3.2.69.0 Folder = E:\
Windows Vista Home Premium Edition (Version = 6.0.6000) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6000.16945)
Locale: 00000411 | Country: Japan | Language: JPN | Date Format: yyyy/MM/dd

1021.88 Mb Total Physical Memory | 536.21 Mb Available Physical Memory | 52.47% Memory free
2.23 Gb Paging File | 1.91 Gb Available in Paging File | 85.72% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 363.68 Gb Total Space | 64.17 Gb Free Space | 17.65% Space Free | Partition Type: NTFS
Drive D: | 8.92 Gb Total Space | 0.98 Gb Free Space | 10.95% Space Free | Partition Type: NTFS
Drive E: | 3.73 Gb Total Space | 1.73 Gb Free Space | 46.42% Space Free | Partition Type: FAT32

Computer Name: ENFLEUR | User Name: saicoink | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2013/06/25 04:46:46 | 000,602,112 | ---- | M] (OldTimer Tools) -- E:\OTL.exe
PRC - [2013/04/03 13:50:34 | 000,172,416 | ---- | M] (McAfee, Inc.) -- C:\Windows\System32\mfevtps.exe
PRC - [2013/04/03 13:47:22 | 000,169,320 | ---- | M] (McAfee, Inc.) -- C:\Program Files\Common Files\Mcafee\SystemCore\mfefire.exe
PRC - [2013/03/05 11:43:26 | 000,184,728 | ---- | M] (McAfee, Inc.) -- C:\Program Files\Common Files\Mcafee\Platform\McSvcHost\McSvHost.exe
PRC - [2008/10/29 02:20:29 | 002,923,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe


========== Modules (No Company Name) ==========


========== Services (SafeList) ==========

SRV - File not found [Auto | Stopped] -- %systemroot%\system32\besclient.dll -- (w800bus)
SRV - File not found [Auto | Stopped] -- C:\Program Files\Spybot -- (SBSDWSCService)
SRV - File not found [On_Demand | Stopped] -- c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe /h ccCommon -- (LiveUpdate Notice Ex)
SRV - [2013/04/11 22:08:25 | 000,117,144 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013/04/04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2013/04/04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2013/04/03 13:50:34 | 000,172,416 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Windows\System32\mfevtps.exe -- (mfevtp)
SRV - [2013/04/03 13:47:22 | 000,169,320 | ---- | M] () [Auto | Running] -- C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe -- (mfefire)
SRV - [2013/03/05 11:43:26 | 000,184,728 | ---- | M] (McAfee, Inc.) [Auto | Stopped] -- C:\Program Files\Common Files\Mcafee\Platform\McSvcHost\McSvHost.exe -- (MSK80Service)
SRV - [2013/03/05 11:43:26 | 000,184,728 | ---- | M] (McAfee, Inc.) [Auto | Stopped] -- C:\Program Files\Common Files\Mcafee\Platform\McSvcHost\McSvHost.exe -- (McProxy)
SRV - [2013/03/05 11:43:26 | 000,184,728 | ---- | M] (McAfee, Inc.) [Auto | Stopped] -- C:\Program Files\Common Files\Mcafee\Platform\McSvcHost\McSvHost.exe -- (mcpltsvc)
SRV - [2013/03/05 11:43:26 | 000,184,728 | ---- | M] (McAfee, Inc.) [Auto | Stopped] -- C:\Program Files\Common Files\Mcafee\Platform\McSvcHost\McSvHost.exe -- (McNaiAnn)
SRV - [2013/03/05 11:43:26 | 000,184,728 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\Mcafee\Platform\McSvcHost\McSvHost.exe -- (McMPFSvc)
SRV - [2013/03/05 11:43:26 | 000,184,728 | ---- | M] (McAfee, Inc.) [Auto | Stopped] -- C:\Program Files\Common Files\Mcafee\Platform\McSvcHost\McSvHost.exe -- (HomeNetSvc)
SRV - [2013/03/01 09:06:56 | 000,287,752 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\McAfee\VirusScan\mcods.exe -- (McODS)
SRV - [2013/02/28 09:46:46 | 000,638,976 | ---- | M] (McAfee, Inc.) [Auto | Stopped] -- C:\Program Files\Common Files\Mcafee\AMCore\mcshield.exe -- (mfecore)
SRV - [2012/07/08 22:57:48 | 000,069,640 | ---- | M] (Nalpeiron Ltd.) [Auto | Stopped] -- C:\Windows\System32\NLSSRV32.EXE -- (nlsX86cc)
SRV - [2012/07/08 22:57:40 | 000,184,840 | ---- | M] (Nitro PDF Software) [Auto | Stopped] -- C:\Program Files\Nitro PDF\Professional 7\NitroPDFDriverService2.exe -- (NitroDriverReadSpool2)
SRV - [2011/10/25 19:00:46 | 000,176,128 | ---- | M] (AMD) [Auto | Stopped] -- C:\Windows\System32\atiesrxx.exe -- (AMD External Events Utility)
SRV - [2011/06/29 15:59:18 | 000,155,344 | ---- | M] (Avanquest Software) [On_Demand | Stopped] -- C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe -- (Sony Ericsson PCCompanion)
SRV - [2009/10/06 14:53:54 | 004,463,400 | ---- | M] (Wacom Technology, Corp.) [Auto | Stopped] -- C:\Windows\System32\Wacom_Tablet.exe -- (TabletServiceWacom)
SRV - [2009/09/29 10:17:50 | 000,013,088 | ---- | M] (Intuit Inc.) [Auto | Stopped] -- C:\Program Files\Common Files\Intuit\Update Service\IntuitUpdateService.exe -- (IntuitUpdateService)
SRV - [2009/03/19 15:03:32 | 000,167,936 | ---- | M] (Teruten Inc.) [Auto | Stopped] -- C:\Windows\System32\TsService.exe -- (TsService)
SRV - [2008/06/20 14:26:52 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2007/11/28 20:51:10 | 000,583,048 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe -- (LiveUpdate Notice Service)
SRV - [2007/11/04 18:36:32 | 000,265,912 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007/09/12 19:27:24 | 002,999,664 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE -- (LiveUpdate)
SRV - [2007/09/12 19:27:24 | 000,554,352 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe -- (Automatic LiveUpdate Scheduler)
SRV - [2007/09/11 00:45:04 | 000,124,832 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe -- (AdobeActiveFileMonitor6.0)
SRV - [2007/06/05 13:20:32 | 000,177,704 | ---- | M] () [Auto | Stopped] -- C:\Windows\System32\PSIService.exe -- (ProtexisLicensing)
SRV - [2007/02/05 11:11:18 | 000,075,320 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe -- (SSScsiSV)
SRV - [2007/02/05 11:11:16 | 000,112,184 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Sony Shared\AVLib\SsBeSvc.exe -- (SonicStage Back-End Service)
SRV - [2006/12/14 03:21:20 | 000,045,056 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe -- (MSCSPTISRV)
SRV - [2006/12/14 03:02:08 | 000,069,632 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe -- (SPTISRV)
SRV - [2006/12/14 02:46:16 | 000,057,344 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe -- (PACSPTISVR)
SRV - [2006/11/15 19:57:58 | 000,081,920 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON)
SRV - [2006/09/11 19:02:44 | 000,544,256 | ---- | M] (Intel® Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\Remote UI Service.exe -- (Remote UI Service)
SRV - [2006/09/11 19:01:04 | 000,167,936 | ---- | M] (Intel® Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\MCLServiceATL.exe -- (MCLServiceATL)
SRV - [2006/09/11 18:56:32 | 000,075,264 | ---- | M] (Intel® Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\issm.exe -- (ISSM)
SRV - [2006/09/11 18:56:20 | 000,188,416 | ---- | M] (Intel® Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\IntelDH\CCU\AlertService.exe -- (AlertService)
SRV - [2006/09/03 13:32:28 | 000,208,896 | ---- | M] () [Auto | Stopped] -- C:\Program Files\Common Files\Intel\IntelDH\NMS\AdpPlugins\DQLWinService.exe -- (DQLWinService)
SRV - [2006/09/01 02:47:56 | 000,026,624 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\mediaserver.exe -- (M1 Server)
SRV - [2006/05/10 12:13:52 | 000,029,696 | R--- | M] (Intel® Corporation) [Auto | Stopped] -- C:\Program Files\Intel\IntelDH\Intel Media Server\tools\IntelDHSvcConf.exe -- (IntelDHSvcConf)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\wacomrouterfilter.sys -- (wacomrouterfilter)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\Zinf\portio.sys -- (portio)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - File not found [Kernel | System | Stopped] -- system32\DRIVERS\cdrom.sys -- (cdrom)
DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\blbdrive.sys -- (blbdrive)
DRV - [2013/04/04 14:50:32 | 000,022,856 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2013/04/03 13:53:24 | 000,060,920 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\cfwids.sys -- (cfwids)
DRV - [2013/04/03 13:50:14 | 000,091,640 | ---- | M] (McAfee, Inc.) [Kernel | System | Running] -- C:\Windows\System32\drivers\mfetdi2k.sys -- (mfetdi2k)
DRV - [2013/04/03 13:48:22 | 000,566,656 | ---- | M] (McAfee, Inc.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\mfehidk.sys -- (mfehidk)
DRV - [2013/04/03 13:47:52 | 000,066,888 | ---- | M] (McAfee, Inc.) [Kernel | System | Running] -- C:\Windows\System32\drivers\mfenlfk.sys -- (mfenlfk)
DRV - [2013/04/03 13:47:32 | 000,363,432 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\mfefirek.sys -- (mfefirek)
DRV - [2013/04/03 13:47:10 | 000,065,928 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\mfebopk.sys -- (mfebopk)
DRV - [2013/04/03 13:46:52 | 000,235,520 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\mfeavfk.sys -- (mfeavfk)
DRV - [2013/04/03 13:46:22 | 000,133,992 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\mfeapfk.sys -- (mfeapfk)
DRV - [2013/02/18 07:46:38 | 000,080,592 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\mfencrk.sys -- (mfencrk)
DRV - [2013/02/18 07:46:34 | 000,257,496 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\mfencbdc.sys -- (mfencbdc)
DRV - [2012/05/28 10:28:04 | 000,147,472 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\HipShieldK.sys -- (HipShieldK)
DRV - [2011/10/25 20:03:48 | 008,853,504 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atikmdag.sys -- (amdkmdag)
DRV - [2011/10/25 18:21:36 | 000,264,192 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atikmpag.sys -- (amdkmdap)
DRV - [2011/06/06 15:06:42 | 000,081,936 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\AtihdLH3.sys -- (AtiHDAudioService)
DRV - [2009/08/27 16:06:32 | 000,016,168 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\wacmoumonitor.sys -- (wacmoumonitor)
DRV - [2009/05/20 12:54:06 | 000,013,736 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\wacomvhid.sys -- (wacomvhid)
DRV - [2008/05/08 05:05:18 | 000,266,752 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\HSXHWBS2.sys -- (HSXHWBS2)
DRV - [2008/05/08 05:03:18 | 000,980,992 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\HSX_DP.sys -- (HSF_DP)
DRV - [2008/05/02 00:15:44 | 000,004,096 | ---- | M] () [Kernel | Unavailable | Unknown] -- C:\Program Files\Unlocker\UnlockerDriver5.sys -- (UnlockerDriver5)
DRV - [2007/10/18 07:36:54 | 000,008,704 | ---- | M] (Conexant Systems, Inc.) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\XAudio.sys -- (XAudio)
DRV - [2007/09/25 10:59:46 | 000,015,152 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files\MediaCoder\SysInfo.sys -- (CrystalSysInfo)
DRV - [2007/03/12 16:37:00 | 004,465,408 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2007/02/16 11:12:36 | 000,011,312 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\wacommousefilter.sys -- (wacommousefilter)
DRV - [2007/01/15 03:43:28 | 000,354,432 | ---- | M] (Hauppauge Computer Works, Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\hcw18bda.sys -- (hcw18bda)
DRV - [2006/11/02 05:02:01 | 000,006,144 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\[email protected] -- (RDPCDD)
DRV - [2006/11/02 03:30:55 | 000,200,704 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\e1e6032.sys -- (e1express)
DRV - [2005/12/12 13:27:00 | 000,019,072 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\PS2.sys -- (Ps2)
DRV - [2002/08/08 16:51:32 | 000,038,951 | ---- | M] (Sony Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\NETMDUSB.sys -- (NETMDUSB)
DRV - [1999/09/10 12:06:00 | 000,025,244 | ---- | M] (Adaptec) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\Aspi32.sys -- (ASPI32)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.h...lion&pf=desktop
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.h...lion&pf=desktop
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{76F3D4AC-5E11-4F6F-9F7F-F3FB98FC089E}: "URL" = http://ca.search.yah...ing}&fr=hp-pvdt
IE - HKLM\..\SearchScopes\{8CBE3FF8-BC71-4515-AC21-4B5338A96073}: "URL" = http://www.ask.com/w...}&l=dis&o=cahpd
IE - HKLM\..\SearchScopes\{9227DF63-238D-48B7-AFFA-90916A8D4255}: "URL" = http://search.live.c...#38;FORM=HVDCS7

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\SearchScopes,DefaultScope =
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{76F3D4AC-5E11-4F6F-9F7F-F3FB98FC089E}: "URL" = http://ca.search.yah...ing}&fr=hp-pvdt
IE - HKCU\..\SearchScopes\{8CBE3FF8-BC71-4515-AC21-4B5338A96073}: "URL" = http://www.ask.com/w...}&l=dis&o=cahpd
IE - HKCU\..\SearchScopes\{9227DF63-238D-48B7-AFFA-90916A8D4255}: "URL" = http://search.live.c...#38;FORM=HVDCS7
IE - HKCU\..\SearchScopes\{DECA3892-BA8F-44b8-A993-A466AD694AE4}: "URL" = http://ca.search.yah...p={searchTerms}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..extensions.enabledAddons: brief%40mozdev.org:1.6.2
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:21.0
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_4_402_287.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Content Upload Plugin,version=1.0.0: C:\Program Files\DivX\DivX Content Uploader\npUpload.dll File not found
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll (DivX, Inc)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.11.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@mcafee.com/MSC,version=10: c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nitropdf.com/NitroPDF: C:\Program Files\Nitro PDF\Professional 7\npnitromozilla.dll ( )
FF - HKLM\Software\MozillaPlugins\@playstation.com/PsndlCheck,version=1.00: File not found
FF - HKLM\Software\MozillaPlugins\@real.com/RhapsodyPlayerEngine,version=1.0: C:\Program Files\Real\RhapsodyPlayerEngine\nprhapengine.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@SonyCreativeSoftware.com/Media Go,version=1.0: C:\Program Files\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.1: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@wacom.com/wacom-plugin,version=1.1.0.3: C:\Program Files\TabletPlugins\npwacom.dll (Wacom, Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\saicoink\AppData\Local\Google\Update\1.3.21.53\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\saicoink\AppData\Local\Google\Update\1.3.21.53\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\wacom.com/WacomTabletPlugin: C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll File not found

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files\Auslogics\Auslogics Antivirus\bdaphffext\
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013/05/21 23:33:05 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013/06/25 20:08:48 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\[email protected]: C:\Program Files\McAfee\MSK [2013/06/23 15:52:36 | 000,000,000 | ---D | M]

[2009/05/29 00:49:38 | 000,000,000 | ---D | M] (No name found) -- C:\Users\saicoink\AppData\Roaming\Mozilla\Extensions
[2013/05/21 10:17:36 | 000,000,000 | ---D | M] (No name found) -- C:\Users\saicoink\AppData\Roaming\Mozilla\Firefox\Profiles\vlxpr8g8.default-1366383230636\extensions
[2013/05/21 10:17:36 | 000,242,942 | ---- | M] () (No name found) -- C:\Users\saicoink\AppData\Roaming\Mozilla\Firefox\Profiles\vlxpr8g8.default-1366383230636\extensions\[email protected]
[2013/05/21 23:33:05 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions
[2013/05/21 23:33:05 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2009/09/13 22:10:06 | 000,047,104 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\mozilla firefox\components\FFComm.dll
[2010/06/08 09:50:17 | 000,002,027 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\McSiteAdvisor.xml

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?client=chrome&hl={language}&q={searchTerms}
CHR - homepage: http://www.google.com/
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\saicoink\AppData\Local\Google\Chrome\Application\10.0.648.205\pdf.dll
CHR - plugin: Google Gears 0.5.33.0 (Enabled) = C:\Users\saicoink\AppData\Local\Google\Chrome\Application\10.0.648.205\gears.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\saicoink\AppData\Local\Google\Chrome\Application\10.0.648.205\gcswf32.dll
CHR - plugin: McAfee SiteAdvisor (Enabled) = C:\Users\saicoink\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.30.150.1_0\McChPlg.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 8.0\Reader\Browser\nppdf32.dll
CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll
CHR - plugin: BitTorrent (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npbittorrent.dll
CHR - plugin: DivX Player Netscape Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npDivxPlayerPlugin.dll
CHR - plugin: downloadUpdater (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npdnu.dll
CHR - plugin: downloadUpdater2 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npdnupdater2.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll
CHR - plugin: MetaStream 3 Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npViewpoint.dll
CHR - plugin: DNA Plug-in (Enabled) = C:\Program Files\DNA\plugins\npbtdna.dll
CHR - plugin: DivX Web Player (Enabled) = C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
CHR - plugin: RealPlayer™ G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll
CHR - plugin: RealJukebox NS Plugin (Enabled) = C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll
CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll
CHR - plugin: RealNetworks Rhapsody Player Engine (Enabled) = C:\Program Files\Real\RhapsodyPlayerEngine\nprhapengine.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Google Update (Enabled) = C:\Users\saicoink\AppData\Local\Google\Update\1.2.183.39\npGoogleOneClick8.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: TweetDeck = C:\Users\saicoink\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbdpomandigafcibbmofojjchbcdagbl\2.0.2_0\

O1 HOSTS File: ([2013/06/25 03:05:10 | 000,449,750 | R--- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 www.1-2005-search.com
O1 - Hosts: 15443 more lines...
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Skype add-on (mastermind)) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe (Hewlett-Packard Company)
O4 - HKLM..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe (Intel Corporation)
O4 - HKLM..\Run: [mcpltui_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe (McAfee, Inc.)
O4 - HKLM..\Run: [mcui_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe (McAfee, Inc.)
O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\Windows\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvSvc] C:\Windows\System32\nvsvc.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [OsdMaestro] C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe (OsdMaestro)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" File not found
O4 - HKLM..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot File not found
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - Startup: C:\Users\saicoink\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideSCAHealth = 1
O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: intuit.com ([ttlc] https in Trusted sites)
O15 - HKCU\..Trusted Ranges: Range1 ([http] in Local intranet)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_26)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 206.248.154.22 206.248.154.170
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4B320FF9-9304-4A2E-ADD7-D4FC2BEBA624}: DhcpNameServer = 206.248.154.22 206.248.154.170
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Filter\application/x-mfe-ipt {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\McAfee\MSC\McSnIePl.dll (McAfee, Inc.)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\saicoink\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O24 - Desktop BackupWallPaper: C:\Users\saicoink\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2007/06/04 16:14:23 | 000,000,074 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{64b8653f-b1e0-11df-85c8-001bfcf8e1f2}\Shell - "" = AutoRun
O33 - MountPoints2\{64b8653f-b1e0-11df-85c8-001bfcf8e1f2}\Shell\AutoRun\command - "" = "K:\WD SmartWare.exe" autoplay=true
O33 - MountPoints2\{bc6f828a-3bd6-11e2-bcf0-001bfcf8e1f2}\Shell\AutoRun\command - "" = E:\RunClubSanDisk.exe
O33 - MountPoints2\{f081b9ca-1043-11e0-a9f1-b4a0aaf81b7e}\Shell - "" = AutoRun
O33 - MountPoints2\{f081b9ca-1043-11e0-a9f1-b4a0aaf81b7e}\Shell\AutoRun\command - "" = "J:\WD SmartWare.exe" autoplay=true
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

========== Files/Folders - Created Within 30 Days ==========

[2013/06/28 20:02:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
[2013/06/28 11:28:12 | 002,347,384 | ---- | C] (ESET) -- C:\Users\saicoink\Desktop\esetsmartinstaller_enu.exe
[2013/06/26 10:45:43 | 000,000,000 | ---D | C] -- C:\FRST
[2013/06/26 10:44:59 | 004,745,728 | ---- | C] (AVAST Software) -- C:\Users\saicoink\Desktop\aswMBR.exe
[2013/06/26 10:44:44 | 001,370,251 | ---- | C] (Farbar) -- C:\Users\saicoink\Desktop\FRST.exe
[2013/06/25 22:38:03 | 000,000,000 | ---D | C] -- C:\TDSSKiller_Quarantine
[2013/06/25 20:43:22 | 000,355,927 | ---- | C] (Farbar) -- C:\Users\saicoink\Desktop\FSS.exe
[2013/06/25 20:33:02 | 002,237,968 | ---- | C] (Kaspersky Lab ZAO) -- C:\Users\saicoink\Desktop\tdsskiller.exe
[2013/06/25 07:55:36 | 000,000,000 | ---D | C] -- C:\Stinger_Quarantine
[2013/06/25 07:55:28 | 000,000,000 | ---D | C] -- C:\Program Files\stinger
[2013/06/25 02:31:07 | 000,000,000 | ---D | C] -- C:\Windows\pss
[2013/06/23 15:44:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2013/06/23 15:43:54 | 000,022,856 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2013/06/23 15:43:54 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2013/06/23 13:44:34 | 000,147,472 | ---- | C] (McAfee, Inc.) -- C:\Windows\System32\drivers\HipShieldK.sys
[2013/06/23 13:35:48 | 000,066,888 | ---- | C] (McAfee, Inc.) -- C:\Windows\System32\drivers\mfenlfk.sys
[2013/06/23 13:14:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Citrix
[2013/06/23 13:11:01 | 000,000,000 | ---D | C] -- C:\Program Files\Citrix
[2007/11/14 23:53:43 | 000,411,248 | ---- | C] (Applian Technologies Inc.) -- C:\Program Files\FLV PlayerRCSetup.exe
[14 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]
[14 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2013/06/28 20:34:47 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013/06/28 20:30:00 | 000,000,424 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{D3B927D7-35BB-44E3-85A4-77E8C7A308A2}.job
[2013/06/28 20:17:13 | 000,003,856 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2013/06/28 20:17:13 | 000,003,856 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2013/06/28 19:52:00 | 000,000,712 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-392368935-1018968332-2870084161-1001UA.job
[2013/06/28 15:52:00 | 000,000,660 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-392368935-1018968332-2870084161-1001Core.job
[2013/06/28 11:27:57 | 002,347,384 | ---- | M] (ESET) -- C:\Users\saicoink\Desktop\esetsmartinstaller_enu.exe
[2013/06/26 10:54:15 | 000,609,944 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2013/06/26 10:54:15 | 000,103,726 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2013/06/26 10:36:48 | 004,745,728 | ---- | M] (AVAST Software) -- C:\Users\saicoink\Desktop\aswMBR.exe
[2013/06/26 10:32:30 | 000,648,201 | ---- | M] () -- C:\Users\saicoink\Desktop\adwcleaner.exe
[2013/06/26 10:31:42 | 001,370,251 | ---- | M] (Farbar) -- C:\Users\saicoink\Desktop\FRST.exe
[2013/06/25 20:24:36 | 000,355,927 | ---- | M] (Farbar) -- C:\Users\saicoink\Desktop\FSS.exe
[2013/06/25 20:24:26 | 002,237,968 | ---- | M] (Kaspersky Lab ZAO) -- C:\Users\saicoink\Desktop\tdsskiller.exe
[2013/06/25 20:23:40 | 000,004,576 | ---- | M] () -- C:\Users\saicoink\Desktop\winmgmt.reg
[2013/06/25 04:08:00 | 014,909,286 | ---- | M] () -- C:\Users\saicoink\Documents\safe130622.reg
[2013/06/25 03:05:10 | 000,449,750 | R--- | M] () -- C:\Windows\System32\drivers\etc\hosts
[2013/06/24 20:00:00 | 000,000,552 | ---- | M] () -- C:\Windows\tasks\Norton Internet Security - Run Full System Scan - saicoink.job
[2013/06/23 16:28:59 | 002,523,136 | ---- | M] () -- C:\Windows\ocsetup_install_MicrosoftWindowsPowerShell.etl
[2013/06/23 16:28:59 | 000,081,920 | ---- | M] () -- C:\Windows\ocsetup_cbs_install_MicrosoftWindowsPowerShell.perf
[2013/06/23 16:28:59 | 000,016,384 | ---- | M] () -- C:\Windows\ocsetup_cbs_install_MicrosoftWindowsPowerShell.dpx
[2013/06/23 16:03:41 | 000,001,356 | ---- | M] () -- C:\Users\saicoink\AppData\Local\d3d9caps.dat
[2013/06/23 15:44:02 | 000,000,908 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013/06/18 11:29:10 | 000,097,296 | ---- | M] () -- C:\Users\saicoink\Documents\An Nguyen-CV.pdf
[2013/06/18 11:28:34 | 000,006,499 | ---- | M] () -- C:\Users\saicoink\AppData\Roaming\PrimoPDFSet.xml
[2013/06/02 23:02:49 | 000,191,488 | ---- | M] () -- C:\Users\saicoink\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[14 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]
[14 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]

========== Files Created - No Company Name ==========

[2013/06/26 10:44:52 | 000,648,201 | ---- | C] () -- C:\Users\saicoink\Desktop\adwcleaner.exe
[2013/06/25 20:33:04 | 000,004,576 | ---- | C] () -- C:\Users\saicoink\Desktop\winmgmt.reg
[2013/06/25 20:30:37 | 000,001,172 | ---- | C] () -- C:\Users\saicoink\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk
[2013/06/25 20:30:37 | 000,001,152 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk
[2013/06/25 04:07:59 | 014,909,286 | ---- | C] () -- C:\Users\saicoink\Documents\safe130622.reg
[2013/06/23 16:10:15 | 002,523,136 | ---- | C] () -- C:\Windows\ocsetup_install_MicrosoftWindowsPowerShell.etl
[2013/06/23 16:10:15 | 000,081,920 | ---- | C] () -- C:\Windows\ocsetup_cbs_install_MicrosoftWindowsPowerShell.perf
[2013/06/23 16:10:15 | 000,016,384 | ---- | C] () -- C:\Windows\ocsetup_cbs_install_MicrosoftWindowsPowerShell.dpx
[2013/06/23 15:44:02 | 000,000,908 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013/06/23 13:43:46 | 000,002,641 | ---- | C] () -- C:\Windows\System32\drivers\mfencrk.inf
[2013/06/23 13:43:44 | 000,002,951 | ---- | C] () -- C:\Windows\System32\drivers\mfencbdc.inf
[2013/06/18 11:29:10 | 000,097,296 | ---- | C] () -- C:\Users\saicoink\Documents\An Nguyen-CV.pdf
[2012/08/21 03:30:47 | 000,014,244 | ---- | C] () -- C:\Windows\System32\Wacom_Tablet.dat
[2012/02/14 20:37:53 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2012/02/14 19:47:03 | 000,037,376 | ---- | C] () -- C:\Windows\System32\atitmpxx.dll
[2012/02/14 19:47:03 | 000,003,917 | ---- | C] () -- C:\Windows\System32\atipblag.dat
[2012/02/14 19:46:59 | 000,239,869 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
[2012/01/12 05:05:14 | 000,404,356 | -H-- | C] () -- C:\Windows\System32\mlfcache.dat
[2011/10/25 22:21:48 | 000,056,832 | ---- | C] () -- C:\Windows\System32\OpenVideo.dll
[2011/10/25 22:21:34 | 000,056,832 | ---- | C] () -- C:\Windows\System32\OVDecoder.dll
[2011/09/09 14:57:26 | 000,001,356 | ---- | C] () -- C:\Users\saicoink\AppData\Local\d3d9caps.dat
[2010/06/04 10:41:33 | 000,011,892 | ---- | C] () -- C:\ProgramData\LUUnInstall.LiveUpdate
[2009/04/17 08:49:14 | 000,006,499 | ---- | C] () -- C:\Users\saicoink\AppData\Roaming\PrimoPDFSet.xml
[2008/07/15 10:23:26 | 000,000,247 | ---- | C] () -- C:\Users\saicoink\.jupload.properties
[2008/03/25 22:53:00 | 000,000,032 | ---- | C] () -- C:\ProgramData\ezsid.dat
[2007/11/05 14:01:06 | 000,191,488 | ---- | C] () -- C:\Users\saicoink\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2007/11/05 01:49:55 | 000,030,638 | ---- | C] () -- C:\Users\saicoink\AppData\Roaming\wklnhst.dat
[1999/07/06 20:00:00 | 000,000,006 | RHS- | C] () -- C:\ProgramData\D81EDBF9-D167-4011-B77D-211DF920EB80

========== ZeroAccess Check ==========

[2006/11/02 08:54:22 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2008/11/06 08:57:06 | 011,315,712 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009/03/03 00:16:12 | 000,614,912 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2006/11/02 05:46:13 | 000,348,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== Hard Links - Junction Points - Mount Points - Symbolic Links ==========
[C:\Windows\$NtUninstallKB53243$] -> Error: Cannot create file handle -> Unknown point type

========== Alternate Data Streams ==========

@Alternate Data Stream - 192 bytes -> C:\Windows:nlsPreferences

< End of report >

Edited by lillie_nemo, 28 June 2013 - 06:50 PM.

  • 0

#35
Buddierdl

Buddierdl

    Trusted Helper

  • Malware Removal
  • 2,524 posts
Okay, let's run another fix. Could you check for the Windows Security Center icon in Safe Mode after this? Also, if McAfee is disabled, try to enable it and let me know what happens.

Do you have any personal files that seem to be missing on your computer?


Start OTL
  • Under the Custom Scans/Fixes box at the bottom, paste in the following
    :Commands
    [createrestorepoint]
    
    :Files
    C:\ProgramData\sdaksda.txt
    C:\ProgramData\Spybot - Search & Destroy\Recovery\CoolWWWSearchCtfmon1.zip
    C:\Users\All Users\sdaksda.txt
    C:\Users\All Users\Spybot - Search & Destroy\Recovery\CoolWWWSearchCtfmon1.zip
    C:\Users\saicoink\AppData\Local\Temp\tratra.lnk
    C:\Windows\Temp\tratra.lnk
    
    winmgmt /salvagerepositoryn /c
    
    :Commands
    [emptyjava]
  • Then click the Run Fix button at the top
  • Let the program run unhindered.
  • Post the log it produces in your next reply. The log should be saved in C:\_OTL\MovedFiles and should be named with numbers describing the date and time it was run.

  • 0

#36
lillie_nemo

lillie_nemo

    Member

  • Topic Starter
  • Member
  • PipPip
  • 66 posts
Security Center still shows up in Safe Mode even after running the OTL fix.
McAfee real time scanning is turned off and I am unable to turn it back on.

I can't seem to find any missing files, but I will take another look as it's difficult to determine in safe mode.

FYI, I will out most of the day on Sunday from early morning and won't be back until the late evening.

Here is the OTL log:

========== COMMANDS ==========
Restore point Set: OTL Restore Point
========== FILES ==========
C:\ProgramData\sdaksda.txt moved successfully.
C:\ProgramData\Spybot - Search & Destroy\Recovery\CoolWWWSearchCtfmon1.zip moved successfully.
File\Folder C:\Users\All Users\sdaksda.txt not found.
File\Folder C:\Users\All Users\Spybot - Search & Destroy\Recovery\CoolWWWSearchCtfmon1.zip not found.
C:\Users\saicoink\AppData\Local\Temp\tratra.lnk moved successfully.
C:\Windows\Temp\tratra.lnk moved successfully.
< winmgmt /salvagerepositoryn /c >
WMI repository is consistent
E:\cmd.bat deleted successfully.
E:\cmd.txt deleted successfully.
========== COMMANDS ==========

[EMPTYJAVA]

User: All Users

User: Default

User: Default User

User: IUSR_NMPR

User: Public

User: saicoink
->Java cache emptied: 264059 bytes

Total Java Files Cleaned = 0.00 mb


OTL by OldTimer - Version 3.2.69.0 log created on 06292013_103649
  • 0

#37
Buddierdl

Buddierdl

    Trusted Helper

  • Malware Removal
  • 2,524 posts
I just want to make sure I have this correctly:

In Normal Mode, McAfee works and there is no Security Center alert.

In Safe Mode, McAfee wont turn on and there is a Security Center alert. Is this the official windows alert, or does it seem like a rogue (fake) warning? Does McAfee give any error when you try to enable it?
  • 0

#38
lillie_nemo

lillie_nemo

    Member

  • Topic Starter
  • Member
  • PipPip
  • 66 posts
Yes, that's correct. When I try to enable McAfee by pressing a button to turn on real-time scanning, it only lasts for a 1-2 seconds before reverting to 'real-time scanning turned off.' The Security Center alert looks like a rogue fake warning. I'm weary to click on the icon as I've been infected on another computer before and it looks a lot like the same icon. I don't know if I have the authentic Windows Security on this computer or not, but I do have Windows Defender. I'm in normal mode at the moment. I'll log in to safe mode again and try to check out of Defender is running or not.

That said, everything seems to be running fine when in normal mode.

edit: Now in safe mode. Windows Defender seems to be working fine. McAfee is the only program that has a problem. The icon is still there and says 'Windows Security Alerts' when I hover my mouse over it.

Edited by lillie_nemo, 01 July 2013 - 09:23 AM.

  • 0

#39
Buddierdl

Buddierdl

    Trusted Helper

  • Malware Removal
  • 2,524 posts
Ok. I think we may need to go with a reinstall of McAfee, as I think it has been broken. Do you have the product key handy?

Also, could you attach a screen shot of the Security Center icon in your next post (if you need instructions, let me know).

Before fixing McAfee, we need to get your computer up to date. Your OS is behind by 2 service packs. Please install the windows updates on your computer, instructions here. You will probably need to install some updates, and check again, because more will be available once you install the first set. It will probably take a few cycles. Make sure you get both Service Pack 1 and Service Pack 2 and Internet Explorer 9. This is very important for the security of your computer. Let me know if you encounter problems.
  • 0

#40
lillie_nemo

lillie_nemo

    Member

  • Topic Starter
  • Member
  • PipPip
  • 66 posts
Sorry for the late reply - I've been having trouble completing the Windows updates.

I updated whatever I could in Windows Updates but ran into trouble with four files, getting an error: 8E5E0147

The files that won't update:
Cumulative Security Update for IE7
KB975560
KB978338
KB979306

The last three are all Windows Vista related updates.
It appears that out of the updates installed thus far, none of them are the Service Pack 1 or 2. I tried to install IE9 but it looks like I need SP1 and SP2 before doing so!

I should be able to reinstall McAfee from my online account with them if I need to uninstall it. I haven't tried a reinstall yet as I'm still trying to work the updates.

Attaching an image of the icon in Safe Mode in this message.

edit: I just realized that the image is really poor quality since I used MSpaint. If you need a better image let me know...

Attached Thumbnails

  • windowssecurity.jpg

Edited by lillie_nemo, 01 July 2013 - 04:35 PM.

  • 0

Advertisements


#41
Buddierdl

Buddierdl

    Trusted Helper

  • Malware Removal
  • 2,524 posts
Ok, let's do this a little at a time. First, we will try to install Service Pack 1.

Please download SP1 from here and try to install it. Let me know if it works and we will move on.
  • 0

#42
lillie_nemo

lillie_nemo

    Member

  • Topic Starter
  • Member
  • PipPip
  • 66 posts
I tried to run the .exe but ended up with an error: 0x8E5E0147.
The dialog told me to go to this website:
go.microsoft.com/fwlink/?LinkId=101139

Following the instructions for troubleshooting I'm trying to install the System Update Readiness Tool for Windows Vista (KB947821) but it is still running and taking forever.

Will keep you updated!
  • 0

#43
Buddierdl

Buddierdl

    Trusted Helper

  • Malware Removal
  • 2,524 posts
Ok. Please post the SURT log when it finished, located at:

C:\Windows\\Logs\CBS\CheckSUR.log
  • 0

#44
lillie_nemo

lillie_nemo

    Member

  • Topic Starter
  • Member
  • PipPip
  • 66 posts
Hi there! Thanks for keep on sticking with me all this time! I really appreciate your help.

I'm still getting the same error even after installing the System Readiness Tool and disabling McAfee. One of the options given by the troubleshooting page was to uninstall the anti-virus. I thought since we're going to have to reinstall McAfee anyway, I decided to uninstall it. The update still won't work but now the Windows Security Alert icon is showing up on the right hand side even in normal mode. Maybe the McAfee was repressing but did not get rid of the problem of the Windows Security Alert. Sorry if I did something I wasn't supposed to! :blush:

Here is the CheckSUR log:

=================================
Checking System Update Readiness.
Binary Version 6.0.6001.22375
Package Version 5.0
2013-07-02 17:37

Checking Deployment Packages

Checking Package Manifests and catalogs.

Checking package watchlist.

Checking component watchlist.

Checking packages.

Checking component store
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: _ServiceModelOperationPerfCounters.ini From: C:\Windows\winsxs\x86_wcf-m_svc_mod_op_perf_c_ini_31bf3856ad364e35_6.0.6000.16708_none_c1843fad322b4004\_ServiceModelOperationPerfCounters.ini
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 _ServiceModelOperationPerfCounters.ini x86_wcf-m_svc_mod_op_perf_c_ini_31bf3856ad364e35_6.0.6001.18000_none_c3627a1d2f590916
(f) CSI F Mark Missing 0x00000002 f!_servicemodeloperationper_3da28447a0260284 x86_wcf-m_svc_mod_op_perf_c_ini_31bf3856ad364e35_6.0.6001.18000_none_c3627a1d2f590916
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_wcf-m_svc_mod_op_perf_c_ini_31bf3856ad364e35_6.0.6001.18000_none_c3627a1d2f590916\f!_servicemodeloperationper_3da28447a0260284: _ServiceModelOperationPerfCounters.ini
(f) CSI Store Directory Missing 0x00000002 WinSxS\x86_wpf-system.speech_31bf3856ad364e35_6.0.6001.18000_none_81bcf03b1c8dd006\ x86_wpf-system.speech_31bf3856ad364e35_6.0.6001.18000_none_81bcf03b1c8dd006
(fix) CSI Store Directory Missing CSI Store Directory Created C:\Windows\WinSxS\x86_wpf-system.speech_31bf3856ad364e35_6.0.6001.18000_none_81bcf03b1c8dd006\
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: System.Speech.dll From: C:\Windows\winsxs\x86_wpf-system.speech_31bf3856ad364e35_6.0.6000.16708_none_7fdeb5cb1f6006f4\System.Speech.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 System.Speech.dll x86_wpf-system.speech_31bf3856ad364e35_6.0.6001.18000_none_81bcf03b1c8dd006
(f) CSI F Mark Missing 0x00000002 f!system.speech.dll x86_wpf-system.speech_31bf3856ad364e35_6.0.6001.18000_none_81bcf03b1c8dd006
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_wpf-system.speech_31bf3856ad364e35_6.0.6001.18000_none_81bcf03b1c8dd006\f!system.speech.dll: System.Speech.dll
(f) CSI Store Directory Missing 0x00000002 WinSxS\x86_microsoft-windows-p..ooler-networkclient_31bf3856ad364e35_6.0.6001.18000_none_39733ab970ea03f2\ x86_microsoft-windows-p..ooler-networkclient_31bf3856ad364e35_6.0.6001.18000_none_39733ab970ea03f2
(fix) CSI Store Directory Missing CSI Store Directory Created C:\Windows\WinSxS\x86_microsoft-windows-p..ooler-networkclient_31bf3856ad364e35_6.0.6001.18000_none_39733ab970ea03f2\
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: printcom.dll From: C:\Windows\winsxs\x86_microsoft-windows-p..ooler-networkclient_31bf3856ad364e35_6.0.6001.18119_none_39716f4d70ea0119\printcom.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 printcom.dll x86_microsoft-windows-p..ooler-networkclient_31bf3856ad364e35_6.0.6001.18000_none_39733ab970ea03f2
(f) CSI F Mark Missing 0x00000002 f!printcom.dll x86_microsoft-windows-p..ooler-networkclient_31bf3856ad364e35_6.0.6001.18000_none_39733ab970ea03f2
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-p..ooler-networkclient_31bf3856ad364e35_6.0.6001.18000_none_39733ab970ea03f2\f!printcom.dll: printcom.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: polstore.dll From: C:\Windows\winsxs\x86_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.0.6001.18094_none_43b129adec4a9f41\polstore.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 polstore.dll x86_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.0.6001.18000_none_440e77d1ec053e6c
(f) CSI F Mark Missing 0x00000002 f!polstore.dll x86_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.0.6001.18000_none_440e77d1ec053e6c
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.0.6001.18000_none_440e77d1ec053e6c\f!polstore.dll: polstore.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: winipsec.dll From: C:\Windows\winsxs\x86_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.0.6001.18094_none_43b129adec4a9f41\winipsec.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 winipsec.dll x86_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.0.6001.18000_none_440e77d1ec053e6c
(f) CSI F Mark Missing 0x00000002 f!winipsec.dll x86_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.0.6001.18000_none_440e77d1ec053e6c
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.0.6001.18000_none_440e77d1ec053e6c\f!winipsec.dll: winipsec.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: FwRemoteSvr.dll From: C:\Windows\winsxs\x86_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.0.6001.18094_none_43b129adec4a9f41\FwRemoteSvr.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 FwRemoteSvr.dll x86_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.0.6001.18000_none_440e77d1ec053e6c
(f) CSI F Mark Missing 0x00000002 f!fwremotesvr.dll x86_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.0.6001.18000_none_440e77d1ec053e6c
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.0.6001.18000_none_440e77d1ec053e6c\f!fwremotesvr.dll: FwRemoteSvr.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: _ServiceModelEndpointPerfCounters.ini From: C:\Windows\winsxs\x86_wcf-m_svc_mod_end_perf_ini_31bf3856ad364e35_6.0.6000.16708_none_c8df4fb390304286\_ServiceModelEndpointPerfCounters.ini
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 _ServiceModelEndpointPerfCounters.ini x86_wcf-m_svc_mod_end_perf_ini_31bf3856ad364e35_6.0.6001.18000_none_cabd8a238d5e0b98
(f) CSI F Mark Missing 0x00000002 f!_servicemodelendpointperf_202e42635da8952c x86_wcf-m_svc_mod_end_perf_ini_31bf3856ad364e35_6.0.6001.18000_none_cabd8a238d5e0b98
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_wcf-m_svc_mod_end_perf_ini_31bf3856ad364e35_6.0.6001.18000_none_cabd8a238d5e0b98\f!_servicemodelendpointperf_202e42635da8952c: _ServiceModelEndpointPerfCounters.ini
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: Mpeg2Data.ax From: C:\Windows\winsxs\x86_microsoft-windows-v..e-filters-tvdigital_31bf3856ad364e35_6.0.6001.18061_none_dbbd58ec573f657a\Mpeg2Data.ax
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 Mpeg2Data.ax x86_microsoft-windows-v..e-filters-tvdigital_31bf3856ad364e35_6.0.6001.18000_none_dbfd382a570fa47d
(f) CSI F Mark Missing 0x00000002 f!mpeg2data.ax x86_microsoft-windows-v..e-filters-tvdigital_31bf3856ad364e35_6.0.6001.18000_none_dbfd382a570fa47d
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-v..e-filters-tvdigital_31bf3856ad364e35_6.0.6001.18000_none_dbfd382a570fa47d\f!mpeg2data.ax: Mpeg2Data.ax
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: MSNP.ax From: C:\Windows\winsxs\x86_microsoft-windows-v..e-filters-tvdigital_31bf3856ad364e35_6.0.6001.18061_none_dbbd58ec573f657a\MSNP.ax
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 MSNP.ax x86_microsoft-windows-v..e-filters-tvdigital_31bf3856ad364e35_6.0.6001.18000_none_dbfd382a570fa47d
(f) CSI F Mark Missing 0x00000002 f!msnp.ax x86_microsoft-windows-v..e-filters-tvdigital_31bf3856ad364e35_6.0.6001.18000_none_dbfd382a570fa47d
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-v..e-filters-tvdigital_31bf3856ad364e35_6.0.6001.18000_none_dbfd382a570fa47d\f!msnp.ax: MSNP.ax
(f) CSI Store Directory Missing 0x00000002 WinSxS\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6001.18000_none_64a26c9fae1f0949\ x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6001.18000_none_64a26c9fae1f0949
(fix) CSI Store Directory Missing CSI Store Directory Created C:\Windows\WinSxS\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6001.18000_none_64a26c9fae1f0949\
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: ieui.dll From: C:\Windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6001.18099_none_644a1fedae5fe8d1\ieui.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 ieui.dll x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6001.18000_none_64a26c9fae1f0949
(f) CSI F Mark Missing 0x00000002 f!ieui.dll x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6001.18000_none_64a26c9fae1f0949
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6001.18000_none_64a26c9fae1f0949\f!ieui.dll: ieui.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: InstallCommon.sql From: C:\Windows\winsxs\x86_netfx-aspnet_common_sql_b03f5f7f11d50a3a_6.0.6000.16720_none_0ea9296b9063c95e\InstallCommon.sql
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 InstallCommon.sql x86_netfx-aspnet_common_sql_b03f5f7f11d50a3a_6.0.6001.18000_none_0e8324c390b6a2b6
(f) CSI F Mark Missing 0x00000002 f!installcommon.sql x86_netfx-aspnet_common_sql_b03f5f7f11d50a3a_6.0.6001.18000_none_0e8324c390b6a2b6
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_netfx-aspnet_common_sql_b03f5f7f11d50a3a_6.0.6001.18000_none_0e8324c390b6a2b6\f!installcommon.sql: InstallCommon.sql
(f) CSI Store Directory Missing 0x00000002 WinSxS\x86_microsoft-windows-n..n_service_datastore_31bf3856ad364e35_6.0.6001.18000_none_d12e90ac35ffb753\ x86_microsoft-windows-n..n_service_datastore_31bf3856ad364e35_6.0.6001.18000_none_d12e90ac35ffb753
(fix) CSI Store Directory Missing CSI Store Directory Created C:\Windows\WinSxS\x86_microsoft-windows-n..n_service_datastore_31bf3856ad364e35_6.0.6001.18000_none_d12e90ac35ffb753\
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: dnary.xsd From: C:\Windows\winsxs\x86_microsoft-windows-n..n_service_datastore_31bf3856ad364e35_6.0.6001.18226_none_d11ef65c360a818d\dnary.xsd
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 dnary.xsd x86_microsoft-windows-n..n_service_datastore_31bf3856ad364e35_6.0.6001.18000_none_d12e90ac35ffb753
(f) CSI F Mark Missing 0x00000002 f!dnary.xsd x86_microsoft-windows-n..n_service_datastore_31bf3856ad364e35_6.0.6001.18000_none_d12e90ac35ffb753
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-n..n_service_datastore_31bf3856ad364e35_6.0.6001.18000_none_d12e90ac35ffb753\f!dnary.xsd: dnary.xsd
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: FX_schema.xml From: C:\Windows\winsxs\x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6001.18428_none_10dbdcd4b4db4e82\FX_schema.xml
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 FX_schema.xml x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6001.18000_none_10e972c4b4d2574c
(f) CSI F Mark Missing 0x00000002 f!fx_schema.xml_b7002c5951efa007 x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6001.18000_none_10e972c4b4d2574c
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6001.18000_none_10e972c4b4d2574c\f!fx_schema.xml_b7002c5951efa007: FX_schema.xml
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: rscaext.xml From: C:\Windows\winsxs\x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6001.18428_none_10dbdcd4b4db4e82\rscaext.xml
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 rscaext.xml x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6001.18000_none_10e972c4b4d2574c
(f) CSI F Mark Missing 0x00000002 f!rscaext.xml x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6001.18000_none_10e972c4b4d2574c
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6001.18000_none_10e972c4b4d2574c\f!rscaext.xml: rscaext.xml
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: redirection.config From: C:\Windows\winsxs\x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6001.18428_none_10dbdcd4b4db4e82\redirection.config
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 redirection.config x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6001.18000_none_10e972c4b4d2574c
(f) CSI F Mark Missing 0x00000002 f!redirection.config x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6001.18000_none_10e972c4b4d2574c
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6001.18000_none_10e972c4b4d2574c\f!redirection.config: redirection.config
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: applicationHost.config From: C:\Windows\winsxs\x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6001.18428_none_10dbdcd4b4db4e82\applicationHost.config
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 applicationHost.config x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6001.18000_none_10e972c4b4d2574c
(f) CSI F Mark Missing 0x00000002 f!applicationhost.config x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6001.18000_none_10e972c4b4d2574c
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6001.18000_none_10e972c4b4d2574c\f!applicationhost.config: applicationHost.config
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: ASPNET_schema.xml From: C:\Windows\winsxs\x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6001.18428_none_10dbdcd4b4db4e82\ASPNET_schema.xml
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 ASPNET_schema.xml x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6001.18000_none_10e972c4b4d2574c
(f) CSI F Mark Missing 0x00000002 f!aspnet_schema.xml_ed1643f9f8d38d50 x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6001.18000_none_10e972c4b4d2574c
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6001.18000_none_10e972c4b4d2574c\f!aspnet_schema.xml_ed1643f9f8d38d50: ASPNET_schema.xml
(f) CSI Store Directory Missing 0x00000002 WinSxS\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6001.18000_none_47a3aa598c843043\ x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6001.18000_none_47a3aa598c843043
(fix) CSI Store Directory Missing CSI Store Directory Created C:\Windows\WinSxS\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6001.18000_none_47a3aa598c843043\
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: sqmapi.dll From: C:\Windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6001.18148_none_47806edf8c9d67e6\sqmapi.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 sqmapi.dll x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6001.18000_none_47a3aa598c843043
(f) CSI F Mark Missing 0x00000002 f!sqmapi.dll x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6001.18000_none_47a3aa598c843043
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6001.18000_none_47a3aa598c843043\f!sqmapi.dll: sqmapi.dll
(f) CSI Store Directory Missing 0x00000002 WinSxS\x86_netfx-msbuild_targetfiles_b03f5f7f11d50a3a_6.0.6001.18000_none_8d317e837d56cf39\ x86_netfx-msbuild_targetfiles_b03f5f7f11d50a3a_6.0.6001.18000_none_8d317e837d56cf39
(fix) CSI Store Directory Missing CSI Store Directory Created C:\Windows\WinSxS\x86_netfx-msbuild_targetfiles_b03f5f7f11d50a3a_6.0.6001.18000_none_8d317e837d56cf39\
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: Microsoft.VisualBasic.targets From: C:\Windows\winsxs\x86_netfx-msbuild_targetfiles_b03f5f7f11d50a3a_6.0.6000.16720_none_8d57832b7d03f5e1\Microsoft.VisualBasic.targets
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 Microsoft.VisualBasic.targets x86_netfx-msbuild_targetfiles_b03f5f7f11d50a3a_6.0.6001.18000_none_8d317e837d56cf39
(f) CSI F Mark Missing 0x00000002 f!microsoft.visualbasic.tar_e2737f7862db653e x86_netfx-msbuild_targetfiles_b03f5f7f11d50a3a_6.0.6001.18000_none_8d317e837d56cf39
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_netfx-msbuild_targetfiles_b03f5f7f11d50a3a_6.0.6001.18000_none_8d317e837d56cf39\f!microsoft.visualbasic.tar_e2737f7862db653e: Microsoft.VisualBasic.targets
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: Microsoft.CSharp.targets From: C:\Windows\winsxs\x86_netfx-msbuild_targetfiles_b03f5f7f11d50a3a_6.0.6000.16720_none_8d57832b7d03f5e1\Microsoft.CSharp.targets
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 Microsoft.CSharp.targets x86_netfx-msbuild_targetfiles_b03f5f7f11d50a3a_6.0.6001.18000_none_8d317e837d56cf39
(f) CSI F Mark Missing 0x00000002 f!microsoft.csharp.targets x86_netfx-msbuild_targetfiles_b03f5f7f11d50a3a_6.0.6001.18000_none_8d317e837d56cf39
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_netfx-msbuild_targetfiles_b03f5f7f11d50a3a_6.0.6001.18000_none_8d317e837d56cf39\f!microsoft.csharp.targets: Microsoft.CSharp.targets
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: Microsoft.Common.targets From: C:\Windows\winsxs\x86_netfx-msbuild_targetfiles_b03f5f7f11d50a3a_6.0.6000.16720_none_8d57832b7d03f5e1\Microsoft.Common.targets
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 Microsoft.Common.targets x86_netfx-msbuild_targetfiles_b03f5f7f11d50a3a_6.0.6001.18000_none_8d317e837d56cf39
(f) CSI F Mark Missing 0x00000002 f!microsoft.common.targets x86_netfx-msbuild_targetfiles_b03f5f7f11d50a3a_6.0.6001.18000_none_8d317e837d56cf39
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_netfx-msbuild_targetfiles_b03f5f7f11d50a3a_6.0.6001.18000_none_8d317e837d56cf39\f!microsoft.common.targets: Microsoft.Common.targets
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: Tracking_Logic.sql From: C:\Windows\winsxs\x86_microsoft-windows-wwfcorecomp.resources_31bf3856ad364e35_6.0.6000.16708_en-us_b9851a92245b1b73\Tracking_Logic.sql
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 Tracking_Logic.sql x86_microsoft-windows-wwfcorecomp.resources_31bf3856ad364e35_6.0.6001.18000_en-us_bb6355022188e485
(f) CSI F Mark Missing 0x00000002 f!tracking_logic.sql_ec76587a51cb8a52 x86_microsoft-windows-wwfcorecomp.resources_31bf3856ad364e35_6.0.6001.18000_en-us_bb6355022188e485
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-wwfcorecomp.resources_31bf3856ad364e35_6.0.6001.18000_en-us_bb6355022188e485\f!tracking_logic.sql_ec76587a51cb8a52: Tracking_Logic.sql
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: machine.config.comments From: C:\Windows\winsxs\x86_netfx-machine_config_ocm_b03f5f7f11d50a3a_6.0.6000.16720_none_f570e12815568682\machine.config.comments
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 machine.config.comments x86_netfx-machine_config_ocm_b03f5f7f11d50a3a_6.0.6001.18000_none_f54adc8015a95fda
(f) CSI F Mark Missing 0x00000002 f!machine.config.comments x86_netfx-machine_config_ocm_b03f5f7f11d50a3a_6.0.6001.18000_none_f54adc8015a95fda
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_netfx-machine_config_ocm_b03f5f7f11d50a3a_6.0.6001.18000_none_f54adc8015a95fda\f!machine.config.comments: machine.config.comments
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: _TransactionBridgePerfCounters.ini From: C:\Windows\winsxs\x86_wcf-m_tx_bridge_perf_c_ini_31bf3856ad364e35_6.0.6000.16708_none_7ea10e5931166775\_TransactionBridgePerfCounters.ini
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 _TransactionBridgePerfCounters.ini x86_wcf-m_tx_bridge_perf_c_ini_31bf3856ad364e35_6.0.6001.18000_none_807f48c92e443087
(f) CSI F Mark Missing 0x00000002 f!_transactionbridgeperfcou_54e566a138ea808a x86_wcf-m_tx_bridge_perf_c_ini_31bf3856ad364e35_6.0.6001.18000_none_807f48c92e443087
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_wcf-m_tx_bridge_perf_c_ini_31bf3856ad364e35_6.0.6001.18000_none_807f48c92e443087\f!_transactionbridgeperfcou_54e566a138ea808a: _TransactionBridgePerfCounters.ini
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: PortableDeviceTypes.dll From: C:\Windows\winsxs\x86_microsoft-windows-wpd-portabledeviceapi_31bf3856ad364e35_6.0.6001.18160_none_4abfe8a3ec3a94fa\PortableDeviceTypes.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 PortableDeviceTypes.dll x86_microsoft-windows-wpd-portabledeviceapi_31bf3856ad364e35_6.0.6001.18000_none_4b00c645ec09f02d
(f) CSI F Mark Missing 0x00000002 f!portabledevicetypes.dll x86_microsoft-windows-wpd-portabledeviceapi_31bf3856ad364e35_6.0.6001.18000_none_4b00c645ec09f02d
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-wpd-portabledeviceapi_31bf3856ad364e35_6.0.6001.18000_none_4b00c645ec09f02d\f!portabledevicetypes.dll: PortableDeviceTypes.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: PortableDeviceClassExtension.dll From: C:\Windows\winsxs\x86_microsoft-windows-wpd-portabledeviceapi_31bf3856ad364e35_6.0.6001.18160_none_4abfe8a3ec3a94fa\PortableDeviceClassExtension.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 PortableDeviceClassExtension.dll x86_microsoft-windows-wpd-portabledeviceapi_31bf3856ad364e35_6.0.6001.18000_none_4b00c645ec09f02d
(f) CSI F Mark Missing 0x00000002 f!portabledeviceclassextens_6f4f1ea70a3d4f22 x86_microsoft-windows-wpd-portabledeviceapi_31bf3856ad364e35_6.0.6001.18000_none_4b00c645ec09f02d
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-wpd-portabledeviceapi_31bf3856ad364e35_6.0.6001.18000_none_4b00c645ec09f02d\f!portabledeviceclassextens_6f4f1ea70a3d4f22: PortableDeviceClassExtension.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: admparse.dll From: C:\Windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.18226_none_ae22877d06d0b3c6\admparse.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 admparse.dll x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.18000_none_ae3221cd06c5e98c
(f) CSI F Mark Missing 0x00000002 f!admparse.dll x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.18000_none_ae3221cd06c5e98c
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.18000_none_ae3221cd06c5e98c\f!admparse.dll: admparse.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: tsgqec.dll From: C:\Windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6001.18266_none_2fb32dbcc5d3707b\tsgqec.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 tsgqec.dll x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6001.18000_none_2fee07bcc5a8367d
(f) CSI F Mark Missing 0x00000002 f!tsgqec.dll x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6001.18000_none_2fee07bcc5a8367d
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6001.18000_none_2fee07bcc5a8367d\f!tsgqec.dll: tsgqec.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: aaclient.dll From: C:\Windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6001.18266_none_2fb32dbcc5d3707b\aaclient.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 aaclient.dll x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6001.18000_none_2fee07bcc5a8367d
(f) CSI F Mark Missing 0x00000002 f!aaclient.dll x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6001.18000_none_2fee07bcc5a8367d
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6001.18000_none_2fee07bcc5a8367d\f!aaclient.dll: aaclient.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: mozilla.browser From: C:\Windows\winsxs\x86_netfx-aspnet_regbrowser_files_b03f5f7f11d50a3a_6.0.6000.16720_none_712a3d9ccb71e1f6\mozilla.browser
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 mozilla.browser x86_netfx-aspnet_regbrowser_files_b03f5f7f11d50a3a_6.0.6001.18000_none_710438f4cbc4bb4e
(f) CSI F Mark Missing 0x00000002 f!mozilla.browser x86_netfx-aspnet_regbrowser_files_b03f5f7f11d50a3a_6.0.6001.18000_none_710438f4cbc4bb4e
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_netfx-aspnet_regbrowser_files_b03f5f7f11d50a3a_6.0.6001.18000_none_710438f4cbc4bb4e\f!mozilla.browser: mozilla.browser
(f) CSI Store Directory Missing 0x00000002 WinSxS\x86_wwf-cwetargets_i_31bf3856ad364e35_6.0.6001.18000_none_a05bc702d8d89d41\ x86_wwf-cwetargets_i_31bf3856ad364e35_6.0.6001.18000_none_a05bc702d8d89d41
(fix) CSI Store Directory Missing CSI Store Directory Created C:\Windows\WinSxS\x86_wwf-cwetargets_i_31bf3856ad364e35_6.0.6001.18000_none_a05bc702d8d89d41\
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: Workflow.Targets From: C:\Windows\winsxs\x86_wwf-cwetargets_i_31bf3856ad364e35_6.0.6000.16708_none_9e7d8c92dbaad42f\Workflow.Targets
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 Workflow.Targets x86_wwf-cwetargets_i_31bf3856ad364e35_6.0.6001.18000_none_a05bc702d8d89d41
(f) CSI F Mark Missing 0x00000002 f!workflow.targets x86_wwf-cwetargets_i_31bf3856ad364e35_6.0.6001.18000_none_a05bc702d8d89d41
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_wwf-cwetargets_i_31bf3856ad364e35_6.0.6001.18000_none_a05bc702d8d89d41\f!workflow.targets: Workflow.Targets
(f) CSI Store Directory Missing 0x00000002 WinSxS\x86_microsoft-windows-netfx3-core_31bf3856ad364e35_6.0.6001.18000_none_67a0cf09da20e560\ x86_microsoft-windows-netfx3-core_31bf3856ad364e35_6.0.6001.18000_none_67a0cf09da20e560
(fix) CSI Store Directory Missing CSI Store Directory Created C:\Windows\WinSxS\x86_microsoft-windows-netfx3-core_31bf3856ad364e35_6.0.6001.18000_none_67a0cf09da20e560\
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: FrameworkList.xml From: C:\Windows\winsxs\x86_microsoft-windows-netfx3-core_31bf3856ad364e35_6.0.6000.16708_none_65c29499dcf31c4e\FrameworkList.xml
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 FrameworkList.xml x86_microsoft-windows-netfx3-core_31bf3856ad364e35_6.0.6001.18000_none_67a0cf09da20e560
(f) CSI F Mark Missing 0x00000002 f!frameworklist.xml x86_microsoft-windows-netfx3-core_31bf3856ad364e35_6.0.6001.18000_none_67a0cf09da20e560
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-netfx3-core_31bf3856ad364e35_6.0.6001.18000_none_67a0cf09da20e560\f!frameworklist.xml: FrameworkList.xml
(f) CSI Store Directory Missing 0x00000002 WinSxS\x86_microsoft-windows-mediaplayer-mp3_31bf3856ad364e35_6.0.6001.18000_none_547eab00d54d9880\ x86_microsoft-windows-mediaplayer-mp3_31bf3856ad364e35_6.0.6001.18000_none_547eab00d54d9880
(fix) CSI Store Directory Missing CSI Store Directory Created C:\Windows\WinSxS\x86_microsoft-windows-mediaplayer-mp3_31bf3856ad364e35_6.0.6001.18000_none_547eab00d54d9880\
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: l3codecp.acm From: C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-mp3_31bf3856ad364e35_6.0.6001.18409_none_5487b532d545712b\l3codecp.acm
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 l3codecp.acm x86_microsoft-windows-mediaplayer-mp3_31bf3856ad364e35_6.0.6001.18000_none_547eab00d54d9880
(f) CSI F Mark Missing 0x00000002 f!l3codecp.acm x86_microsoft-windows-mediaplayer-mp3_31bf3856ad364e35_6.0.6001.18000_none_547eab00d54d9880
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-mediaplayer-mp3_31bf3856ad364e35_6.0.6001.18000_none_547eab00d54d9880\f!l3codecp.acm: l3codecp.acm
(f) CSI Store Directory Missing 0x00000002 WinSxS\msil_system.speech_31bf3856ad364e35_6.0.6001.18000_none_09ecab3f8087f6d5\ msil_system.speech_31bf3856ad364e35_6.0.6001.18000_none_09ecab3f8087f6d5
(fix) CSI Store Directory Missing CSI Store Directory Created C:\Windows\WinSxS\msil_system.speech_31bf3856ad364e35_6.0.6001.18000_none_09ecab3f8087f6d5\
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: System.Speech.dll From: C:\Windows\winsxs\msil_system.speech_31bf3856ad364e35_6.0.6000.16708_none_080e70cf835a2dc3\System.Speech.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 System.Speech.dll msil_system.speech_31bf3856ad364e35_6.0.6001.18000_none_09ecab3f8087f6d5
(f) CSI F Mark Missing 0x00000002 f!system.speech.dll msil_system.speech_31bf3856ad364e35_6.0.6001.18000_none_09ecab3f8087f6d5
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote msil_system.speech_31bf3856ad364e35_6.0.6001.18000_none_09ecab3f8087f6d5\f!system.speech.dll: System.Speech.dll
(f) CSI Store Directory Missing 0x00000002 WinSxS\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6001.18000_none_8618e4f778db4273\ x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6001.18000_none_8618e4f778db4273
(fix) CSI Store Directory Missing CSI Store Directory Created C:\Windows\WinSxS\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6001.18000_none_8618e4f778db4273\
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: L2SecHC.mof From: C:\Windows\winsxs\x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6000.21082_none_8467a03e95119112\L2SecHC.mof
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 L2SecHC.mof x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6001.18000_none_8618e4f778db4273
(f) CSI F Mark Missing 0x00000002 f!l2sechc.mof x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6001.18000_none_8618e4f778db4273
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-l..securityhelperclass_31bf3856ad364e35_6.0.6001.18000_none_8618e4f778db4273\f!l2sechc.mof: L2SecHC.mof
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: msvidc32.dll From: C:\Windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6001.18270_none_91e6450388fad1ce\msvidc32.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 msvidc32.dll x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6001.18000_none_9231f0ab88c213e9
(f) CSI F Mark Missing 0x00000002 f!msvidc32.dll x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6001.18000_none_9231f0ab88c213e9
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6001.18000_none_9231f0ab88c213e9\f!msvidc32.dll: msvidc32.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: msvfw32.dll From: C:\Windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6001.18270_none_91e6450388fad1ce\msvfw32.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 msvfw32.dll x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6001.18000_none_9231f0ab88c213e9
(f) CSI F Mark Missing 0x00000002 f!msvfw32.dll x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6001.18000_none_9231f0ab88c213e9
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6001.18000_none_9231f0ab88c213e9\f!msvfw32.dll: msvfw32.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: gatherWirelessInfo.vbs From: C:\Windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6001.18288_none_9bf5c90f051fc5c6\gatherWirelessInfo.vbs
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 gatherWirelessInfo.vbs x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6001.18000_none_9c44425304e62138
(f) CSI F Mark Missing 0x00000002 f!gatherwirelessinfo.vbs x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6001.18000_none_9c44425304e62138
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6001.18000_none_9c44425304e62138\f!gatherwirelessinfo.vbs: gatherWirelessInfo.vbs
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: wlanhlp.dll From: C:\Windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6001.18288_none_9bf5c90f051fc5c6\wlanhlp.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 wlanhlp.dll x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6001.18000_none_9c44425304e62138
(f) CSI F Mark Missing 0x00000002 f!wlanhlp.dll x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6001.18000_none_9c44425304e62138
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6001.18000_none_9c44425304e62138\f!wlanhlp.dll: wlanhlp.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: wlanapi.dll From: C:\Windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6001.18288_none_9bf5c90f051fc5c6\wlanapi.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 wlanapi.dll x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6001.18000_none_9c44425304e62138
(f) CSI F Mark Missing 0x00000002 f!wlanapi.dll x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6001.18000_none_9c44425304e62138
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6001.18000_none_9c44425304e62138\f!wlanapi.dll: wlanapi.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: Rules.System.Wireless.xml From: C:\Windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6001.18288_none_9bf5c90f051fc5c6\Rules.System.Wireless.xml
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 Rules.System.Wireless.xml x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6001.18000_none_9c44425304e62138
(f) CSI F Mark Missing 0x00000002 f!rules.system.wireless.xml x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6001.18000_none_9c44425304e62138
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6001.18000_none_9c44425304e62138\f!rules.system.wireless.xml: Rules.System.Wireless.xml
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: Wireless Diagnostics.xml From: C:\Windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6001.18288_none_9bf5c90f051fc5c6\Wireless Diagnostics.xml
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 Wireless Diagnostics.xml x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6001.18000_none_9c44425304e62138
(f) CSI F Mark Missing 0x00000002 f!wireless_diagnostics.xml_9b2e11f9a834c69f x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6001.18000_none_9c44425304e62138
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6001.18000_none_9c44425304e62138\f!wireless_diagnostics.xml_9b2e11f9a834c69f: Wireless Diagnostics.xml
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: _ServiceModelServicePerfCounters.ini From: C:\Windows\winsxs\x86_wcf-m_svc_mod_svc_perf_ini_31bf3856ad364e35_6.0.6000.16708_none_78c5c5708f85fc49\_ServiceModelServicePerfCounters.ini
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 _ServiceModelServicePerfCounters.ini x86_wcf-m_svc_mod_svc_perf_ini_31bf3856ad364e35_6.0.6001.18000_none_7aa3ffe08cb3c55b
(f) CSI F Mark Missing 0x00000002 f!_servicemodelserviceperfc_5fa9189480caa670 x86_wcf-m_svc_mod_svc_perf_ini_31bf3856ad364e35_6.0.6001.18000_none_7aa3ffe08cb3c55b
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_wcf-m_svc_mod_svc_perf_ini_31bf3856ad364e35_6.0.6001.18000_none_7aa3ffe08cb3c55b\f!_servicemodelserviceperfc_5fa9189480caa670: _ServiceModelServicePerfCounters.ini
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: mfpmp.exe From: C:\Windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6001.18096_none_9c03e1ac0d053e06\mfpmp.exe
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 mfpmp.exe x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6001.18000_none_9c5f2f3c0cc1aa83
(f) CSI F Mark Missing 0x00000002 f!mfpmp.exe x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6001.18000_none_9c5f2f3c0cc1aa83
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6001.18000_none_9c5f2f3c0cc1aa83\f!mfpmp.exe: mfpmp.exe
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: rrinstaller.exe From: C:\Windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6001.18096_none_9c03e1ac0d053e06\rrinstaller.exe
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 rrinstaller.exe x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6001.18000_none_9c5f2f3c0cc1aa83
(f) CSI F Mark Missing 0x00000002 f!rrinstaller.exe x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6001.18000_none_9c5f2f3c0cc1aa83
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6001.18000_none_9c5f2f3c0cc1aa83\f!rrinstaller.exe: rrinstaller.exe
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: mfps.dll From: C:\Windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6001.18096_none_9c03e1ac0d053e06\mfps.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 mfps.dll x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6001.18000_none_9c5f2f3c0cc1aa83
(f) CSI F Mark Missing 0x00000002 f!mfps.dll x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6001.18000_none_9c5f2f3c0cc1aa83
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6001.18000_none_9c5f2f3c0cc1aa83\f!mfps.dll: mfps.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: _SMSvcHostPerfCounters.ini From: C:\Windows\winsxs\x86_wcf-m_smsvchost_perf_c_ini_31bf3856ad364e35_6.0.6000.16708_none_325856a50f01ab0d\_SMSvcHostPerfCounters.ini
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 _SMSvcHostPerfCounters.ini x86_wcf-m_smsvchost_perf_c_ini_31bf3856ad364e35_6.0.6001.18000_none_343691150c2f741f
(f) CSI F Mark Missing 0x00000002 f!_smsvchostperfcounters.in_3b5f9bee10e111a1 x86_wcf-m_smsvchost_perf_c_ini_31bf3856ad364e35_6.0.6001.18000_none_343691150c2f741f
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_wcf-m_smsvchost_perf_c_ini_31bf3856ad364e35_6.0.6001.18000_none_343691150c2f741f\f!_smsvchostperfcounters.in_3b5f9bee10e111a1: _SMSvcHostPerfCounters.ini
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: NlsData0c1a.dll From: C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18098_none_9d81873e2afd9b5e\NlsData0c1a.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 NlsData0c1a.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(f) CSI F Mark Missing 0x00000002 f!nlsdata0c1a.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\f!nlsdata0c1a.dll: NlsData0c1a.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: NlsData081a.dll From: C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18098_none_9d81873e2afd9b5e\NlsData081a.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 NlsData081a.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(f) CSI F Mark Missing 0x00000002 f!nlsdata081a.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\f!nlsdata081a.dll: NlsData081a.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: NlsData0816.dll From: C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18098_none_9d81873e2afd9b5e\NlsData0816.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 NlsData0816.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(f) CSI F Mark Missing 0x00000002 f!nlsdata0816.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\f!nlsdata0816.dll: NlsData0816.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: NlsData0416.dll From: C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18098_none_9d81873e2afd9b5e\NlsData0416.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 NlsData0416.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(f) CSI F Mark Missing 0x00000002 f!nlsdata0416.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\f!nlsdata0416.dll: NlsData0416.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: NlsData0414.dll From: C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18098_none_9d81873e2afd9b5e\NlsData0414.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 NlsData0414.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(f) CSI F Mark Missing 0x00000002 f!nlsdata0414.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\f!nlsdata0414.dll: NlsData0414.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: NlsData000f.dll From: C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18098_none_9d81873e2afd9b5e\NlsData000f.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 NlsData000f.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(f) CSI F Mark Missing 0x00000002 f!nlsdata000f.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\f!nlsdata000f.dll: NlsData000f.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: NlsData000d.dll From: C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18098_none_9d81873e2afd9b5e\NlsData000d.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 NlsData000d.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(f) CSI F Mark Missing 0x00000002 f!nlsdata000d.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\f!nlsdata000d.dll: NlsData000d.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: NlsData000c.dll From: C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18098_none_9d81873e2afd9b5e\NlsData000c.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 NlsData000c.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(f) CSI F Mark Missing 0x00000002 f!nlsdata000c.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\f!nlsdata000c.dll: NlsData000c.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: NlsData000a.dll From: C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18098_none_9d81873e2afd9b5e\NlsData000a.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 NlsData000a.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(f) CSI F Mark Missing 0x00000002 f!nlsdata000a.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\f!nlsdata000a.dll: NlsData000a.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: NlsData001d.dll From: C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18098_none_9d81873e2afd9b5e\NlsData001d.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 NlsData001d.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(f) CSI F Mark Missing 0x00000002 f!nlsdata001d.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\f!nlsdata001d.dll: NlsData001d.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: NlsData001b.dll From: C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18098_none_9d81873e2afd9b5e\NlsData001b.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 NlsData001b.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(f) CSI F Mark Missing 0x00000002 f!nlsdata001b.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\f!nlsdata001b.dll: NlsData001b.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: NlsData001a.dll From: C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18098_none_9d81873e2afd9b5e\NlsData001a.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 NlsData001a.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(f) CSI F Mark Missing 0x00000002 f!nlsdata001a.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\f!nlsdata001a.dll: NlsData001a.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: NlsData002a.dll From: C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18098_none_9d81873e2afd9b5e\NlsData002a.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 NlsData002a.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(f) CSI F Mark Missing 0x00000002 f!nlsdata002a.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\f!nlsdata002a.dll: NlsData002a.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: NlsData003e.dll From: C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18098_none_9d81873e2afd9b5e\NlsData003e.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 NlsData003e.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(f) CSI F Mark Missing 0x00000002 f!nlsdata003e.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\f!nlsdata003e.dll: NlsData003e.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: NlsData004e.dll From: C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18098_none_9d81873e2afd9b5e\NlsData004e.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 NlsData004e.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(f) CSI F Mark Missing 0x00000002 f!nlsdata004e.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\f!nlsdata004e.dll: NlsData004e.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: NlsData004c.dll From: C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18098_none_9d81873e2afd9b5e\NlsData004c.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 NlsData004c.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(f) CSI F Mark Missing 0x00000002 f!nlsdata004c.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\f!nlsdata004c.dll: NlsData004c.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: NlsData004b.dll From: C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18098_none_9d81873e2afd9b5e\NlsData004b.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 NlsData004b.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(f) CSI F Mark Missing 0x00000002 f!nlsdata004b.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\f!nlsdata004b.dll: NlsData004b.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: NlsData004a.dll From: C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18098_none_9d81873e2afd9b5e\NlsData004a.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 NlsData004a.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(f) CSI F Mark Missing 0x00000002 f!nlsdata004a.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\f!nlsdata004a.dll: NlsData004a.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: NlsData0009.dll From: C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18098_none_9d81873e2afd9b5e\NlsData0009.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 NlsData0009.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(f) CSI F Mark Missing 0x00000002 f!nlsdata0009.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\f!nlsdata0009.dll: NlsData0009.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: NlsData0007.dll From: C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18098_none_9d81873e2afd9b5e\NlsData0007.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 NlsData0007.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(f) CSI F Mark Missing 0x00000002 f!nlsdata0007.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\f!nlsdata0007.dll: NlsData0007.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: NlsData0003.dll From: C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18098_none_9d81873e2afd9b5e\NlsData0003.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 NlsData0003.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(f) CSI F Mark Missing 0x00000002 f!nlsdata0003.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\f!nlsdata0003.dll: NlsData0003.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: NlsData0002.dll From: C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18098_none_9d81873e2afd9b5e\NlsData0002.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 NlsData0002.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(f) CSI F Mark Missing 0x00000002 f!nlsdata0002.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\f!nlsdata0002.dll: NlsData0002.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: NlsData0001.dll From: C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18098_none_9d81873e2afd9b5e\NlsData0001.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 NlsData0001.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(f) CSI F Mark Missing 0x00000002 f!nlsdata0001.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\f!nlsdata0001.dll: NlsData0001.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: NlsData0019.dll From: C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18098_none_9d81873e2afd9b5e\NlsData0019.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 NlsData0019.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(f) CSI F Mark Missing 0x00000002 f!nlsdata0019.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\f!nlsdata0019.dll: NlsData0019.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: NlsData0000.dll From: C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18098_none_9d81873e2afd9b5e\NlsData0000.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 NlsData0000.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(f) CSI F Mark Missing 0x00000002 f!nlsdata0000.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\f!nlsdata0000.dll: NlsData0000.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: NlsData0018.dll From: C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18098_none_9d81873e2afd9b5e\NlsData0018.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 NlsData0018.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(f) CSI F Mark Missing 0x00000002 f!nlsdata0018.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\f!nlsdata0018.dll: NlsData0018.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: NlsData0013.dll From: C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18098_none_9d81873e2afd9b5e\NlsData0013.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 NlsData0013.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(f) CSI F Mark Missing 0x00000002 f!nlsdata0013.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\f!nlsdata0013.dll: NlsData0013.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: NlsData0011.dll From: C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18098_none_9d81873e2afd9b5e\NlsData0011.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 NlsData0011.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(f) CSI F Mark Missing 0x00000002 f!nlsdata0011.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\f!nlsdata0011.dll: NlsData0011.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: NlsData0010.dll From: C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18098_none_9d81873e2afd9b5e\NlsData0010.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 NlsData0010.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(f) CSI F Mark Missing 0x00000002 f!nlsdata0010.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\f!nlsdata0010.dll: NlsData0010.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: NlsData0027.dll From: C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18098_none_9d81873e2afd9b5e\NlsData0027.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 NlsData0027.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(f) CSI F Mark Missing 0x00000002 f!nlsdata0027.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\f!nlsdata0027.dll: NlsData0027.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: NlsData0026.dll From: C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18098_none_9d81873e2afd9b5e\NlsData0026.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 NlsData0026.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(f) CSI F Mark Missing 0x00000002 f!nlsdata0026.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\f!nlsdata0026.dll: NlsData0026.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: NlsData0024.dll From: C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18098_none_9d81873e2afd9b5e\NlsData0024.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 NlsData0024.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(f) CSI F Mark Missing 0x00000002 f!nlsdata0024.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\f!nlsdata0024.dll: NlsData0024.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: NlsData0022.dll From: C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18098_none_9d81873e2afd9b5e\NlsData0022.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 NlsData0022.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(f) CSI F Mark Missing 0x00000002 f!nlsdata0022.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\f!nlsdata0022.dll: NlsData0022.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: NlsData0021.dll From: C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18098_none_9d81873e2afd9b5e\NlsData0021.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 NlsData0021.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(f) CSI F Mark Missing 0x00000002 f!nlsdata0021.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\f!nlsdata0021.dll: NlsData0021.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: NlsData0020.dll From: C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18098_none_9d81873e2afd9b5e\NlsData0020.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 NlsData0020.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(f) CSI F Mark Missing 0x00000002 f!nlsdata0020.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\f!nlsdata0020.dll: NlsData0020.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: NlsData0039.dll From: C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18098_none_9d81873e2afd9b5e\NlsData0039.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 NlsData0039.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(f) CSI F Mark Missing 0x00000002 f!nlsdata0039.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\f!nlsdata0039.dll: NlsData0039.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: NlsData0049.dll From: C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18098_none_9d81873e2afd9b5e\NlsData0049.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 NlsData0049.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(f) CSI F Mark Missing 0x00000002 f!nlsdata0049.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\f!nlsdata0049.dll: NlsData0049.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: NlsData0047.dll From: C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18098_none_9d81873e2afd9b5e\NlsData0047.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 NlsData0047.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(f) CSI F Mark Missing 0x00000002 f!nlsdata0047.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\f!nlsdata0047.dll: NlsData0047.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: NlsData0046.dll From: C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18098_none_9d81873e2afd9b5e\NlsData0046.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 NlsData0046.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(f) CSI F Mark Missing 0x00000002 f!nlsdata0046.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\f!nlsdata0046.dll: NlsData0046.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: NlsData0045.dll From: C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18098_none_9d81873e2afd9b5e\NlsData0045.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 NlsData0045.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(f) CSI F Mark Missing 0x00000002 f!nlsdata0045.dll x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\f!nlsdata0045.dll: NlsData0045.dll
(f) CSI Store Directory Missing 0x00000002 WinSxS\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.18000_none_a64a8ac25ccb3836\ x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.18000_none_a64a8ac25ccb3836
(fix) CSI Store Directory Missing CSI Store Directory Created C:\Windows\WinSxS\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.18000_none_a64a8ac25ccb3836\
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: lsasrv.mof From: C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.18215_none_a644c0145ccecd28\lsasrv.mof
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 lsasrv.mof x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.18000_none_a64a8ac25ccb3836
(f) CSI F Mark Missing 0x00000002 f!lsasrv.mof x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.18000_none_a64a8ac25ccb3836
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.18000_none_a64a8ac25ccb3836\f!lsasrv.mof: lsasrv.mof
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: lsass.exe From: C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.18215_none_a644c0145ccecd28\lsass.exe
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 lsass.exe x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.18000_none_a64a8ac25ccb3836
(f) CSI F Mark Missing 0x00000002 f!lsass.exe x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.18000_none_a64a8ac25ccb3836
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.18000_none_a64a8ac25ccb3836\f!lsass.exe: lsass.exe
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: ksecdd.sys From: C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.18215_none_a644c0145ccecd28\ksecdd.sys
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 ksecdd.sys x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.18000_none_a64a8ac25ccb3836
(f) CSI F Mark Missing 0x00000002 f!ksecdd.sys x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.18000_none_a64a8ac25ccb3836
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.18000_none_a64a8ac25ccb3836\f!ksecdd.sys: ksecdd.sys
(f) CSI Store Directory Missing 0x00000002 WinSxS\x86_microsoft-windows-network-security_31bf3856ad364e35_6.0.6001.18000_none_cd246fe92a8ad809\ x86_microsoft-windows-network-security_31bf3856ad364e35_6.0.6001.18000_none_cd246fe92a8ad809
(fix) CSI Store Directory Missing CSI Store Directory Created C:\Windows\WinSxS\x86_microsoft-windows-network-security_31bf3856ad364e35_6.0.6001.18000_none_cd246fe92a8ad809\
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: WFP.MOF From: C:\Windows\winsxs\x86_microsoft-windows-network-security_31bf3856ad364e35_6.0.6001.22497_none_cd53c52043eb1c22\WFP.MOF
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 WFP.MOF x86_microsoft-windows-network-security_31bf3856ad364e35_6.0.6001.18000_none_cd246fe92a8ad809
(f) CSI F Mark Missing 0x00000002 f!wfp.mof x86_microsoft-windows-network-security_31bf3856ad364e35_6.0.6001.18000_none_cd246fe92a8ad809
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-network-security_31bf3856ad364e35_6.0.6001.18000_none_cd246fe92a8ad809\f!wfp.mof: WFP.MOF
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: WMM2AE.dll From: C:\Windows\winsxs\x86_microsoft-windows-moviemaker_31bf3856ad364e35_6.0.6001.18341_none_f237b28c0d3d2768\WMM2AE.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 WMM2AE.dll x86_microsoft-windows-moviemaker_31bf3856ad364e35_6.0.6001.18000_none_f261ec400d1da6d8
(f) CSI F Mark Missing 0x00000002 f!wmm2ae.dll x86_microsoft-windows-moviemaker_31bf3856ad364e35_6.0.6001.18000_none_f261ec400d1da6d8
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-moviemaker_31bf3856ad364e35_6.0.6001.18000_none_f261ec400d1da6d8\f!wmm2ae.dll: WMM2AE.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: lpk.dll From: C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.18272_none_a9896d645abd4ddf\lpk.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 lpk.dll x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.18000_none_a9d318785a865d4c
(f) CSI F Mark Missing 0x00000002 f!lpk.dll x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.18000_none_a9d318785a865d4c
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.18000_none_a9d318785a865d4c\f!lpk.dll: lpk.dll
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: tzupd.exe From: C:\Windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6001.18108_none_154f5aac098ad8c2\tzupd.exe
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 tzupd.exe x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6001.18000_none_15475676099210e3
(f) CSI F Mark Missing 0x00000002 f!tzupd.exe x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6001.18000_none_15475676099210e3
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6001.18000_none_15475676099210e3\f!tzupd.exe: tzupd.exe
(f) CSI Store Directory Missing 0x00000002 WinSxS\x86_netfx-msbuild_commontypes_schema_b03f5f7f11d50a3a_6.0.6001.18000_none_705b3bf5eea4bc2f\ x86_netfx-msbuild_commontypes_schema_b03f5f7f11d50a3a_6.0.6001.18000_none_705b3bf5eea4bc2f
(fix) CSI Store Directory Missing CSI Store Directory Created C:\Windows\WinSxS\x86_netfx-msbuild_commontypes_schema_b03f5f7f11d50a3a_6.0.6001.18000_none_705b3bf5eea4bc2f\
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: Microsoft.Build.Commontypes.xsd From: C:\Windows\winsxs\x86_netfx-msbuild_commontypes_schema_b03f5f7f11d50a3a_6.0.6000.16720_none_7081409dee51e2d7\Microsoft.Build.Commontypes.xsd
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 Microsoft.Build.Commontypes.xsd x86_netfx-msbuild_commontypes_schema_b03f5f7f11d50a3a_6.0.6001.18000_none_705b3bf5eea4bc2f
(f) CSI F Mark Missing 0x00000002 f!microsoft.build.commontyp_fa4e04522b130111 x86_netfx-msbuild_commontypes_schema_b03f5f7f11d50a3a_6.0.6001.18000_none_705b3bf5eea4bc2f
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_netfx-msbuild_commontypes_schema_b03f5f7f11d50a3a_6.0.6001.18000_none_705b3bf5eea4bc2f\f!microsoft.build.commontyp_fa4e04522b130111: Microsoft.Build.Commontypes.xsd
(f) CSI Store Directory Missing 0x00000002 WinSxS\x86_netfx-msbuild_data_files_b03f5f7f11d50a3a_6.0.6001.18000_none_7c8a736142707d89\ x86_netfx-msbuild_data_files_b03f5f7f11d50a3a_6.0.6001.18000_none_7c8a736142707d89
(fix) CSI Store Directory Missing CSI Store Directory Created C:\Windows\WinSxS\x86_netfx-msbuild_data_files_b03f5f7f11d50a3a_6.0.6001.18000_none_7c8a736142707d89\
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: Microsoft.Common.Tasks From: C:\Windows\winsxs\x86_netfx-msbuild_data_files_b03f5f7f11d50a3a_6.0.6000.16720_none_7cb07809421da431\Microsoft.Common.Tasks
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 Microsoft.Common.Tasks x86_netfx-msbuild_data_files_b03f5f7f11d50a3a_6.0.6001.18000_none_7c8a736142707d89
(f) CSI F Mark Missing 0x00000002 f!microsoft.common.tasks x86_netfx-msbuild_data_files_b03f5f7f11d50a3a_6.0.6001.18000_none_7c8a736142707d89
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_netfx-msbuild_data_files_b03f5f7f11d50a3a_6.0.6001.18000_none_7c8a736142707d89\f!microsoft.common.tasks: Microsoft.Common.Tasks
(f) CSI Store Directory Missing 0x00000002 WinSxS\x86_microsoft-windows-ehome-devices-mcrmgr_31bf3856ad364e35_6.0.6001.18000_none_3429e869d9fa322b\ x86_microsoft-windows-ehome-devices-mcrmgr_31bf3856ad364e35_6.0.6001.18000_none_3429e869d9fa322b
(fix) CSI Store Directory Missing CSI Store Directory Created C:\Windows\WinSxS\x86_microsoft-windows-ehome-devices-mcrmgr_31bf3856ad364e35_6.0.6001.18000_none_3429e869d9fa322b\
(fix) CSI SP1 File Not Yet Pre-Installed CSI File Replaced File: McrMgr.dll From: C:\Windows\winsxs\x86_microsoft-windows-ehome-devices-mcrmgr_31bf3856ad364e35_6.0.6001.18115_none_34241bd5d9fdc9f6\McrMgr.dll
(f) CSI SP1 File Not Yet Pre-Installed 0x00000000 McrMgr.dll x86_microsoft-windows-ehome-devices-mcrmgr_31bf3856ad364e35_6.0.6001.18000_none_3429e869d9fa322b
(f) CSI F Mark Missing 0x00000002 f!mcrmgr.dll x86_microsoft-windows-ehome-devices-mcrmgr_31bf3856ad364e35_6.0.6001.18000_none_3429e869d9fa322b
(fix) CSI F Mark Missing CSI Registry Item Repaired Wrote x86_microsoft-windows-ehome-devices-mcrmgr_31bf3856ad364e35_6.0.6001.18000_none_3429e869d9fa322b\f!mcrmgr.dll: McrMgr.dll
Summary:
Seconds executed: 6867
Found 210 errors
Fixed 210 errors
CSI F Mark Missing Total Count: 97
Fixed: CSI F Mark Missing. Total Count: 97
CSI SP1 File Not Yet Pre-Installed Total Count: 97
Fixed: CSI SP1 File Not Yet Pre-Installed. Total Count: 97
CSI Store Directory Missing Total Count: 16
Fixed: CSI Store Directory Missing. Total Count: 16

Looking forward to your further instructions! Thank you!
  • 0

#45
Buddierdl

Buddierdl

    Trusted Helper

  • Malware Removal
  • 2,524 posts
Ok. It looks like it fixed all the errors. Could you please run it one more time and paste the new log?

Please don't browse the internet until we reinstall McAfee. I would actually recommend not connecting the internet except when needed for now.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP