since a couple of days my desktop seems to have been taken over and a mirror version has been created in c\windows\system32\config\systemprofile
I still have my old files but can only access them thorugh c\users\me. When i download something it goes to the download file of teh mirror profile and when i go to the folder ther s just nothing.
couldnt run housecall, avg, bitdefender, OTL, but was able to get MBAM working and attaching files here
Tnx for any help
Eric
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013
Ran by eric (administrator) on ERIC-HOME-SLI on 08-10-2013 21:32:12
Running from C:\downloads
Windows 7 Professional Service Pack 1 (X64) OS Language: English(US)
Internet Explorer Version 10
Boot Mode: Safe Mode (with Networking)
==================== Processes (Whitelisted) =================
(Google Inc.) C:\Users\eric\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\eric\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\eric\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\eric\AppData\Local\Google\Chrome\Application\chrome.exe
(Orbitdownloader.com) C:\Program Files (x86)\Orbitdownloader\orbitdm.exe
(Orbitdownloader.com) C:\Program Files (x86)\Orbitdownloader\orbitnet.exe
(Google Inc.) C:\Users\eric\AppData\Local\Google\Chrome\Application\chrome.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgui.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgscana.exe
(Google Inc.) C:\Users\eric\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\eric\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\eric\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\eric\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\eric\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\eric\AppData\Local\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [PrnStatusMX] - C:\Program Files\Hewlett-Packard\PrnStatusMX\PrnStatusMX.exe [1240064 2012-07-04] (Marvell Semiconductor, Inc.)
HKCU\...\Run: [CtxfiReg] - CTXFIREG.exe /FAIL2
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [106496 2010-01-22] (NEC Electronics Corporation)
HKLM-x32\...\Run: [VolPanel] - C:\Program Files (x86)\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe [241789 2009-07-07] (Creative Technology Ltd)
HKLM-x32\...\Run: [CTxfiHlp] - C:\Windows\\SysWOW64\CTXFIHLP.EXE [24576 2011-08-11] (Creative Technology Ltd)
HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2013\avgui.exe [4411440 2013-08-15] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [BrStsMon00] - C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [2621440 2010-06-10] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [LWS] - C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-13] (Logitech Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-09-17] (Apple Inc.)
HKLM-x32\...\Run: [vProt] - C:\Program Files (x86)\AVG Nation toolbar\vprot.exe [2403144 2013-10-01] ()
==================== Internet (Whitelisted) ====================
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.portaldos...V&ts=1372200703
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.portaldos...V&ts=1372200703
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.portaldos...V&ts=1372200703
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.portaldos...V&ts=1372200703
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.portaldos...V&ts=1372200703
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.portal...HKMV&ts=4456497
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.portal...HKMV&ts=4456497
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.portal...HKMV&ts=4456497
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.portal...HKMV&ts=4456497
BHO: AVG Safe Search - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssiea.dll No File
BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Octh Class - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files (x86)\Orbitdownloader\orbitcth.dll (Orbitdownloader.com)
BHO-x32: AVG Safe Search - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssie.dll No File
BHO-x32: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: PSafe ClikSeguro - {802D2971-E7C7-4219-8D5C-AFDCD0DA939E} - C:\Program Files (x86)\PSafe\ClikSeguro\ClikSeguro.dll No File
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: No Name - {95B7759C-8C7F-4BF1-B163-73684A933233} - No File
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: GbIehObj Class - {C41A1C0E-EA6C-11D4-B1B8-444553540007} - C:\Program Files (x86)\GbPlugin\gbiehabn.dll (Banco Real)
BHO-x32: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - Grab Pro - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files (x86)\Orbitdownloader\GrabPro.dll ()
Toolbar: HKLM-x32 - No Name - {95B7759C-8C7F-4BF1-B163-73684A933233} - No File
DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.m...ash/swflash.cab
DPF: HKLM-x32 {17492023-C23A-453E-A040-C7C580BBF700} http://download.micr...heckControl.cab
DPF: HKLM-x32 {6C269571-C6D7-4818-BCA4-32A035E8C884} http://ccfiles.creat...102/CTSUEng.cab
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} http://ccfiles.creat...13/CTPIDPDE.cab
DPF: HKLM-x32 {E705A591-DA3C-4228-B0D5-A356DBA42FBF} http://ccfiles.creat...015/CTSUEng.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} http://ccfiles.creat...30321/CTPID.cab
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgppa.dll No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll No File
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler-x32: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\17.0.12\ViProtocol.dll (AVG Secure Search)
Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - No File
ShellExecuteHooks-x32: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399007} - C:\Program Files (x86)\GbPlugin\gbiehabn.dll [1529400 2013-08-19] (Banco Real)
Hosts: Hosts file not detected in the default directory
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
==================== Services (Whitelisted) =================
S2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe [4939312 2013-07-04] (AVG Technologies CZ, s.r.o.)
S2 avgwd; C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe [283136 2013-07-23] (AVG Technologies CZ, s.r.o.)
S2 Diskeeper; C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe [2627920 2011-03-03] (Diskeeper Corporation)
S2 GbpSv; C:\PROGRA~2\GbPlugin\GbpSv.exe [409144 2013-08-19] (GAS Tecnologia)
S2 OneTouch 4.0 Monitor; C:\Program Files (x86)\Visioneer\OneTouch 4.0\OtService.exe [221184 2010-11-02] (Visioneer Inc.)
S2 RelevantKnowledge; C:\Program Files (x86)\RelevantKnowledge\rlservice.exe [186136 2013-08-16] (TMRG, Inc.)
S2 vToolbarUpdater17.0.12; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.0.12\ToolbarUpdater.exe [1733448 2013-10-01] (AVG Secure Search)
==================== Drivers (Whitelisted) ====================
S1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [246072 2013-07-20] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [71480 2013-07-20] (AVG Technologies CZ, s.r.o.)
S1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [206648 2013-07-20] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [311608 2013-07-20] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [116536 2013-07-01] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [45880 2013-09-05] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [240952 2013-03-21] (AVG Technologies CZ, s.r.o.)
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [46368 2013-10-01] (AVG Technologies)
S3 DKRtWrt; C:\Windows\System32\DRIVERS\DKRtWrt.sys [44624 2011-02-14] (Diskeeper Corporation)
S0 GbpKm; C:\Windows\SysWow64\drivers\gbpkm.sys [47856 2012-09-18] (GAS Tecnologia)
S3 PcaSp50; C:\Windows\System32\Drivers\PcaSp50.sys [45624 2009-08-24] (Printing Communications Assoc., Inc. (PCAUSA))
S3 prwntdrv; C:\Windows\system32\prwntdrv.sys [16776 2010-08-25] ()
S3 prwntdrv; C:\Windows\system32\prwntdrv.sys [16776 2010-08-25] ()
S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Research In Motion Limited)
S3 SaiH075C; C:\Windows\System32\DRIVERS\SaiH075C.sys [326784 2006-07-27] (Saitek)
S3 SynasUSB; C:\Windows\System32\drivers\SynUSB64.sys [31248 2006-11-16] (SIA Syncrosoft)
S3 ECSIoDriver_1_1_0_0; \??\D:\ECSIoDriverX64.sys [x]
S0 GbpKm; system32\drivers\gbpkm.sys [x]
S3 IntcAzAudAddService; system32\drivers\RTKVHD64.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-10-08 21:31 - 2013-10-08 21:31 - 00000000 ____D C:\FRST
2013-10-08 21:26 - 2013-10-08 21:26 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-08 21:08 - 2013-10-08 21:10 - 00000426 _____ C:\Windows\system32\avgrep.txt
2013-10-07 10:58 - 2013-09-30 19:32 - 00130403 _____ C:\Windows\system32\config\systemprofile\Desktop\Bookmarks.bak
2013-10-07 10:56 - 2013-10-01 20:49 - 00130403 _____ C:\Windows\system32\config\systemprofile\Desktop\Bookmarks
2013-10-07 09:43 - 2013-09-25 10:52 - 69092352 _____ C:\Windows\system32\config\systemprofile\Desktop\Outlook.pst
2013-10-07 09:41 - 2013-10-08 17:59 - 00000000 ____D C:\Windows\SysWOW64\cache
2013-10-07 09:40 - 2013-10-08 08:33 - 00000168 _____ C:\Windows\setupact.log
2013-10-07 09:40 - 2013-10-07 09:40 - 00000000 _____ C:\Windows\setuperr.log
2013-10-03 12:31 - 2013-10-03 12:31 - 00000000 ____D C:\Windows\system32\%LOCALAPPDATA%
2013-09-27 22:14 - 2013-10-01 20:47 - 00046368 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx64.sys
2013-09-27 22:14 - 2013-10-01 20:47 - 00000000 ____D C:\Program Files (x86)\AVG Nation toolbar
2013-09-22 10:58 - 2013-09-22 10:58 - 00000000 ____D C:\Program Files\iTunes
2013-09-22 10:58 - 2013-09-22 10:58 - 00000000 ____D C:\Program Files\iPod
2013-09-22 10:58 - 2013-09-22 10:58 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-09-21 21:42 - 2013-09-21 21:42 - 00000000 ____D C:\Windows\System32\Tasks\NCH Software
2013-09-21 21:42 - 2013-09-21 21:42 - 00000000 ____D C:\Program Files (x86)\NCH Software
2013-09-21 21:41 - 2013-09-21 21:41 - 00000000 ____D C:\Program Files (x86)\NCH Swift Sound
2013-09-17 10:52 - 2013-08-10 02:22 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-17 10:52 - 2013-08-10 02:22 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-17 10:52 - 2013-08-10 02:22 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-09-17 10:52 - 2013-08-10 02:21 - 19246592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-17 10:52 - 2013-08-10 02:21 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-17 10:52 - 2013-08-10 02:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-17 10:52 - 2013-08-10 02:20 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-17 10:52 - 2013-08-10 02:20 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-17 10:52 - 2013-08-10 02:20 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-17 10:52 - 2013-08-10 02:20 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-17 10:52 - 2013-08-10 02:20 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-17 10:52 - 2013-08-10 02:20 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-09-17 10:52 - 2013-08-10 02:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-09-17 10:52 - 2013-08-10 02:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-09-17 10:52 - 2013-08-10 00:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-17 10:52 - 2013-08-10 00:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-17 10:52 - 2013-08-10 00:58 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-17 10:52 - 2013-08-10 00:58 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-17 10:52 - 2013-08-10 00:58 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-17 10:52 - 2013-08-10 00:58 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-17 10:52 - 2013-08-10 00:58 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-17 10:52 - 2013-08-10 00:58 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-17 10:52 - 2013-08-10 00:58 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-09-17 10:52 - 2013-08-10 00:58 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-09-17 10:52 - 2013-08-10 00:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-09-17 10:52 - 2013-08-10 00:58 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-17 10:52 - 2013-08-10 00:58 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-09-17 10:52 - 2013-08-10 00:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-17 10:52 - 2013-08-10 00:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-17 10:52 - 2013-08-09 23:27 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-09-17 10:52 - 2013-08-09 23:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-17 10:44 - 2013-08-07 22:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-09-17 10:44 - 2013-08-04 23:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2013-09-17 10:44 - 2013-08-01 23:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-09-17 10:44 - 2013-08-01 23:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-09-17 10:44 - 2013-08-01 23:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2013-09-17 10:44 - 2013-08-01 23:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-09-17 10:44 - 2013-08-01 23:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2013-09-17 10:44 - 2013-08-01 23:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-09-17 10:44 - 2013-08-01 23:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2013-09-17 10:44 - 2013-08-01 23:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-09-17 10:44 - 2013-08-01 23:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-09-17 10:44 - 2013-08-01 23:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2013-09-17 10:44 - 2013-08-01 23:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2013-09-17 10:44 - 2013-08-01 23:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 23:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 23:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 23:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 23:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 23:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 23:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 23:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 23:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 23:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 23:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 23:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 23:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 23:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 23:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 23:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 22:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-09-17 10:44 - 2013-08-01 22:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-09-17 10:44 - 2013-08-01 22:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-09-17 10:44 - 2013-08-01 22:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-09-17 10:44 - 2013-08-01 22:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-09-17 10:44 - 2013-08-01 22:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-09-17 10:44 - 2013-08-01 22:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-09-17 10:44 - 2013-08-01 22:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 22:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 22:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 22:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 22:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 22:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 22:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 22:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 22:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 22:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 22:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 22:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 22:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 22:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 22:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 22:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 22:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 22:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 22:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 22:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 22:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 22:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 22:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 22:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 22:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-09-17 10:44 - 2013-08-01 21:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2013-09-17 10:44 - 2013-08-01 21:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-09-17 10:44 - 2013-08-01 21:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-09-17 10:44 - 2013-08-01 21:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-09-17 10:44 - 2013-08-01 21:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-09-17 10:44 - 2013-08-01 21:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 21:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 21:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-09-17 10:44 - 2013-08-01 21:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-09-17 10:44 - 2013-07-25 23:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-09-17 10:44 - 2013-07-25 23:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-09-17 10:44 - 2013-07-25 22:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-09-17 10:44 - 2013-07-25 22:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-09-15 20:35 - 2013-09-15 20:35 - 00000000 ____D C:\Program Files (x86)\Audacity 1.3 Beta (Unicode)
2013-09-12 16:37 - 2013-08-16 19:02 - 00859416 _____ (TMRG, Inc.) C:\Windows\system32\rlls64.dll
2013-09-12 16:37 - 2013-08-16 19:02 - 00593688 _____ (TMRG, Inc.) C:\Windows\SysWOW64\rlls.dll
2013-09-10 23:07 - 2013-09-12 17:55 - 00000000 ____D C:\Program Files (x86)\RelevantKnowledge
2013-09-09 20:15 - 2013-09-09 20:15 - 00003423 _____ C:\Windows\LDPINST.LOG
2013-09-09 20:15 - 2013-09-09 20:15 - 00000000 ____D C:\Program Files (x86)\Logitech
2013-09-09 19:46 - 2013-09-13 19:32 - 00010930 _____ C:\Windows\system32\lvcoinst.log
2013-09-09 19:46 - 2013-09-09 20:15 - 00000000 ____D C:\Program Files\Common Files\logishrd
2013-09-09 16:43 - 2013-09-09 16:43 - 00000000 ____D C:\Windows\SysWOW64\spool
==================== One Month Modified Files and Folders =======
2013-10-08 21:31 - 2013-10-08 21:31 - 00000000 ____D C:\FRST
2013-10-08 21:26 - 2013-10-08 21:26 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-08 21:10 - 2013-10-08 21:08 - 00000426 _____ C:\Windows\system32\avgrep.txt
2013-10-08 21:02 - 2012-05-19 20:41 - 02029963 _____ C:\Windows\WindowsUpdate.log
2013-10-08 20:53 - 2012-05-19 17:14 - 00001074 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1668779431-2791829902-819445095-1001UA.job
2013-10-08 20:51 - 2009-07-14 02:13 - 00730596 _____ C:\Windows\system32\PerfStringBackup.INI
2013-10-08 20:35 - 2012-09-13 17:36 - 00001064 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-08 20:35 - 2012-06-29 11:26 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-08 20:35 - 2012-05-19 17:14 - 00001022 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1668779431-2791829902-819445095-1001Core.job
2013-10-08 18:33 - 2012-08-23 15:28 - 00000924 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1668779431-2791829902-819445095-1001UA.job
2013-10-08 18:18 - 2012-06-29 11:26 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-10-08 18:18 - 2012-05-19 20:18 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-10-08 18:18 - 2012-05-19 20:18 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-10-08 18:11 - 2012-09-13 17:36 - 00001060 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-08 17:59 - 2013-10-07 09:41 - 00000000 ____D C:\Windows\SysWOW64\cache
2013-10-08 17:59 - 2012-08-23 15:28 - 00000902 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1668779431-2791829902-819445095-1001Core.job
2013-10-08 08:41 - 2009-07-14 01:45 - 00020528 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-08 08:41 - 2009-07-14 01:45 - 00020528 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-08 08:33 - 2013-10-07 09:40 - 00000168 _____ C:\Windows\setupact.log
2013-10-08 08:33 - 2013-07-05 01:48 - 00031088 _____ (GbPlugin NDIS Device Driver) C:\Windows\SysWOW64\Drivers\gbpndisrd.sys
2013-10-08 08:33 - 2013-07-05 01:48 - 00010266 _____ C:\Windows\SysWOW64\Drivers\ndisrd.cat
2013-10-08 08:33 - 2013-07-05 01:48 - 00001402 _____ C:\Windows\SysWOW64\Drivers\gas.cer
2013-10-08 08:33 - 2009-07-14 02:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-07 16:53 - 2012-08-15 08:19 - 00000000 ____D C:\Program Files (x86)\Origin
2013-10-07 13:16 - 2012-05-19 20:38 - 30556160 _____ C:\Windows\system32\config\RegBack\SYSTEM
2013-10-07 13:16 - 2012-05-19 20:38 - 01015808 _____ C:\Windows\system32\config\RegBack\DEFAULT
2013-10-07 13:16 - 2012-05-19 20:38 - 00028672 _____ C:\Windows\system32\config\RegBack\SAM
2013-10-07 13:15 - 2012-05-19 20:38 - 72974336 _____ C:\Windows\system32\config\RegBack\SOFTWARE
2013-10-07 13:15 - 2012-05-19 20:38 - 00028672 _____ C:\Windows\system32\config\RegBack\SECURITY
2013-10-07 12:48 - 2009-07-14 02:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2013-10-07 09:40 - 2013-10-07 09:40 - 00000000 _____ C:\Windows\setuperr.log
2013-10-07 08:32 - 2012-05-22 15:54 - 00003246 _____ C:\Windows\System32\Tasks\SidebarExecute
2013-10-07 08:18 - 2012-06-29 11:08 - 00000000 ____D C:\Program Files (x86)\GbPlugin
2013-10-03 12:50 - 2012-05-28 15:39 - 00000418 _____ C:\Windows\ODBC.INI
2013-10-03 12:33 - 2013-08-17 18:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-03 12:31 - 2013-10-03 12:31 - 00000000 ____D C:\Windows\system32\%LOCALAPPDATA%
2013-10-01 20:49 - 2013-10-07 10:56 - 00130403 _____ C:\Windows\system32\config\systemprofile\Desktop\Bookmarks
2013-10-01 20:47 - 2013-09-27 22:14 - 00046368 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx64.sys
2013-10-01 20:47 - 2013-09-27 22:14 - 00000000 ____D C:\Program Files (x86)\AVG Nation toolbar
2013-09-30 19:32 - 2013-10-07 10:58 - 00130403 _____ C:\Windows\system32\config\systemprofile\Desktop\Bookmarks.bak
2013-09-27 22:23 - 2013-01-23 08:53 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-09-25 10:52 - 2013-10-07 09:43 - 69092352 _____ C:\Windows\system32\config\systemprofile\Desktop\Outlook.pst
2013-09-22 10:58 - 2013-09-22 10:58 - 00000000 ____D C:\Program Files\iTunes
2013-09-22 10:58 - 2013-09-22 10:58 - 00000000 ____D C:\Program Files\iPod
2013-09-22 10:58 - 2013-09-22 10:58 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-09-21 21:42 - 2013-09-21 21:42 - 00000000 ____D C:\Windows\System32\Tasks\NCH Software
2013-09-21 21:42 - 2013-09-21 21:42 - 00000000 ____D C:\Program Files (x86)\NCH Software
2013-09-21 21:41 - 2013-09-21 21:41 - 00000000 ____D C:\Program Files (x86)\NCH Swift Sound
2013-09-21 21:37 - 2009-07-13 23:34 - 00000512 _____ C:\Windows\win.ini
2013-09-21 15:01 - 2013-03-14 18:36 - 00000000 ____D C:\Program Files (x86)\Brother
2013-09-20 11:03 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\rescache
2013-09-17 21:10 - 2012-07-21 14:24 - 00735282 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-09-17 10:56 - 2009-07-14 01:45 - 02312136 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-17 10:52 - 2013-07-17 08:12 - 00000000 ____D C:\Windows\system32\MRT
2013-09-17 10:48 - 2012-07-23 18:00 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-09-15 20:35 - 2013-09-15 20:35 - 00000000 ____D C:\Program Files (x86)\Audacity 1.3 Beta (Unicode)
2013-09-13 19:32 - 2013-09-09 19:46 - 00010930 _____ C:\Windows\system32\lvcoinst.log
2013-09-12 17:59 - 2010-11-21 00:47 - 00193548 _____ C:\Windows\PFRO.log
2013-09-12 17:55 - 2013-09-10 23:07 - 00000000 ____D C:\Program Files (x86)\RelevantKnowledge
2013-09-09 20:15 - 2013-09-09 20:15 - 00003423 _____ C:\Windows\LDPINST.LOG
2013-09-09 20:15 - 2013-09-09 20:15 - 00000000 ____D C:\Program Files (x86)\Logitech
2013-09-09 20:15 - 2013-09-09 19:46 - 00000000 ____D C:\Program Files\Common Files\logishrd
2013-09-09 16:47 - 2013-01-01 17:01 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-09-09 16:43 - 2013-09-09 16:43 - 00000000 ____D C:\Windows\SysWOW64\spool
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-10-07 13:15
==================== End Of Log ============================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-10-2013
Ran by eric at 2013-10-08 21:33:48
Running from C:\downloads
Boot Mode: Safe Mode (with Networking)
==========================================================
==================== Security Center ========================
AV: AVG AntiVirus Free Edition 2013 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG AntiVirus Free Edition 2013 (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}
==================== Installed Programs ======================
Adobe Anchor Service CS3 (x32 Version: 1.0)
Adobe Asset Services CS3 (x32 Version: 3)
Adobe Bridge CS3 (x32 Version: 2)
Adobe Bridge Start Meeting (x32 Version: 1.0)
Adobe Camera Raw 4.0 (x32 Version: 4.0)
Adobe CMaps (x32 Version: 1.0)
Adobe Color - Photoshop Specific (x32 Version: 1.0)
Adobe Color Common Settings (x32 Version: 1.0)
Adobe Color EU Extra Settings (x32 Version: 1.0)
Adobe Color JA Extra Settings (x32 Version: 1.0)
Adobe Color NA Recommended Settings (x32 Version: 1.0)
Adobe Default Language CS3 (x32 Version: 1.0)
Adobe Device Central CS3 (x32 Version: 1.0)
Adobe Digital Editions 2.0 (x32 Version: 2.0)
Adobe ExtendScript Toolkit 2 (x32 Version: 2.0)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.117)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.168)
Adobe Fonts All (x32 Version: 1.0)
Adobe Help Viewer CS3 (x32 Version: 1)
Adobe Linguistics CS3 (x32 Version: 3.0.0)
Adobe PDF Library Files (x32 Version: 8.0)
Adobe Photoshop CS3 (x32 Version: 10)
Adobe Photoshop CS3 (x32 Version: 10.0)
Adobe Setup (x32 Version: 1.0)
Adobe Stock Photos CS3 (x32 Version: 1.5)
Adobe Type Support (x32 Version: 1.0)
Adobe Update Manager CS3 (x32 Version: 5.1.0)
Adobe Version Cue CS3 Client (x32 Version: 3)
Adobe WinSoft Linguistics Plugin (x32 Version: 1.0)
Adobe XMP Panels CS3 (x32 Version: 1.0)
aerosoft's - Brussels 2007 (x32 Version: 1.10)
Aerosoft's - Mega Airport Brussels X (x32 Version: 1.01)
Apple Mobile Device Support (Version: 7.0.0.117)
Apple Software Update (x32 Version: 2.1.3.127)
ASIO4ALL (x32 Version: 2.11 Beta1)
aTube Catcher (x32 Version: 2.9.4272)
Audacity 1.3.12 (Unicode) (x32)
AVG 2013 (Version: 13.0.3222)
AVG 2013 (Version: 13.0.3408)
AVG 2013 (Version: 2013.0.3408)
AVG Nation toolbar (x32 Version: 17.0.1.12)
AVI & MPEG Splitter 1.48 (x32)
Avi to Mpeg 3.5 (x32 Version: 3.5)
BassBang Demo (x32 Version: 1.3)
BeCyPDFMetaEdit (x32 Version: 2.37.0)
BitTorrent (x32 Version: 7.8.0.29626)
Boilsoft Video Splitter 6.11 (x32)
Bonjour (Version: 3.0.0.10)
Bundled software uninstaller (x32)
CameraHelperMsi (x32 Version: 13.51.815.0)
ChordPulse (x32)
Compatibility Pack for the 2007 Office system (x32 Version: 12.0.6514.5001)
Creative 3DMIDI Player (x32 Version: 1.11)
Creative Media Toolbox 6 (Shared Components) (x32 Version: 2.80.12)
Creative Media Toolbox 6 (x32 Version: 6.02)
Creative MediaSource 5 (x32 Version: 5.26)
Creative Software AutoUpdate (x32 Version: 1.40)
Creative Sound Blaster Properties x64 Edition (x32 Version: 1.02)
Creative WaveStudio 7 (x32 Version: 7.14)
D3DX10 (x32 Version: 15.4.2368.0902)
Diagnósticos Creative (x32 Version: 5.11)
DigiTech RP500 ASIO (remove only) (x32)
DigiTech X-Edit 2.4.1 (x32 Version: 2.4.1.2)
Diskeeper 2011 Home (Version: 15.0.951.64)
Driver Xerox 7600 (x32 Version: 4.6.10306)
Drumaxx (x32)
DTS Connect Pack (x32 Version: 1.00)
EASEUS Data Recovery Wizard 5.5.1 (x32)
EaseUS Data Recovery Wizard 6.1 (x32)
EASEUS Partition Recovery 5.0.1 (x32)
eLicenser Control (x32)
erLT (x32 Version: 1.20.138.34)
Facebook Video Calling 1.2.0.287 (x32 Version: 1.2.287)
FIFA 13 (x32 Version: 1.3.0.0)
FL Studio 10 (x32)
FL Studio 9 (x32)
Flight Simulator X (x32)
Flight Simulator X Service Pack 1 (x32)
FM Screen Capture Codec (Remove Only) (x32)
Foxit Reader (x32 Version: 6.0.3.524)
Galeria de Fotos (x32 Version: 16.4.3508.0205)
Garmin Lifetime Updater (x32 Version: 2.1.11)
GCF (x32)
GetDataBack for FAT (x32 Version: 4.25.000)
GetDataBack for NTFS (x32 Version: 4.25.000)
Google Update Helper (x32 Version: 1.3.21.153)
Guitar Pro 6 (x32)
Hardcore (x32)
HL-2130 (x32 Version: 1.0.7.0)
HP Color LaserJet CP1210 Series
HP Color LaserJet CP1210 Series (Version: 1.0.0)
HP LaserJet Toolbox (Version: 1.0.58)
hppusgCP1215 (x32 Version: 000.000.00006)
iCloud (Version: 3.0.2.163)
IL Download Manager (x32)
IL Shared Libraries (x32)
Informações do Sistema Creative (x32 Version: 1.10)
IsoBuster 2.5 (x32 Version: 2.5)
iTunes (Version: 11.1.0.126)
JAMMER Professional 6 v6.0.4.1 (x32 Version: 6.0.4.1)
JamVOX (Version: 3.03.0)
JamVOX (x32 Version: 1.0.1)
Java 7 Update 25 (x32 Version: 7.0.250)
Java Auto Updater (x32 Version: 2.1.9.5)
Java™ 6 Update 31 (64-bit) (Version: 6.0.310)
Java™ 6 Update 31 (x32 Version: 6.0.310)
JavaFX 2.1.1 (x32 Version: 2.1.1)
Junk Mail filter update (x32 Version: 16.4.3508.0205)
K-Lite Codec Pack 9.9.9 (64-bit) (Version: 9.9.9)
Live Lite Alesis Edition (x32)
Llcon (remove only) (x32)
Logitech Webcam Software (x32 Version: 2.51)
LWS Facebook (x32 Version: 13.50.854.0)
LWS Gallery (x32 Version: 13.51.827.0)
LWS Help_main (x32 Version: 13.51.828.0)
LWS Launcher (x32 Version: 13.51.828.0)
LWS Motion Detection (x32 Version: 13.51.815.0)
LWS Pictures And Video (x32 Version: 13.51.815.0)
LWS Twitter (x32 Version: 13.30.1346.0)
LWS Webcam Software (x32 Version: 13.51.815.0)
LWS WLM Plugin (x32 Version: 1.30.1201.0)
LWS YouTube Plugin (x32 Version: 13.31.1038.0)
MarketResearch (x32 Version: 90.0.142.000)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Flight (x32 Version: 1.0.0000.129)
Microsoft Flight Simulator X (x32 Version: 10.0.61355.0)
Microsoft Flight Simulator X Service Pack 1 (x32 Version: 10.0.61355.0)
Microsoft Flight Simulator X: Acceleration (x32 Version: 10.0.61637.0)
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0)
Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0)
Microsoft Mouse and Keyboard Center (Version: 2.2.173.0)
Microsoft Office Professional Edição 2003 (x32 Version: 11.0.8173.0)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Movie Maker (x32 Version: 16.4.3508.0205)
Mozilla Firefox 23.0.1 (x86 pt-BR) (x32 Version: 23.0.1)
Mozilla Maintenance Service (x32 Version: 23.0.1)
MPC-HC 1.6.8 (64-bit) (Version: 1.6.8.7417)
MPC-HC 1.6.8 (x32 Version: 1.6.8.7417)
MrvlUsgTracking64 (Version: 1.0.7)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSVCRT110 (x32 Version: 16.4.1108.0727)
MSVCRT110_amd64 (Version: 16.4.1109.0912)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
MSXML 4.0 SP2 Parser and SDK (x32 Version: 4.20.9818.0)
NEC Electronics USB 3.0 Host Controller Driver (x32 Version: 1.0.19.0)
Need for Speed™ Hot Pursuit (x32 Version: 1.0.0.0)
Need For Speed™ World (x32 Version: 1.0.0.1398)
NETGEAR Powerline Utility (x32 Version: 2.0.0.8)
NVIDIA 3D Vision Controller Driver 314.22 (Version: 314.22)
NVIDIA 3D Vision Driver 314.22 (Version: 314.22)
NVIDIA Control Panel 314.22 (Version: 314.22)
NVIDIA Graphics Driver 314.22 (Version: 314.22)
NVIDIA HD Audio Driver 1.3.23.1 (Version: 1.3.23.1)
NVIDIA Install Application (Version: 2.1002.115.743)
NVIDIA PhysX (x32 Version: 9.12.1031)
NVIDIA PhysX System Software 9.12.1031 (Version: 9.12.1031)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.1422)
NVIDIA Update 1.12.12 (Version: 1.12.12)
NVIDIA Update Components (Version: 1.12.12)
OpenAL (x32)
Orbit Downloader (x32)
Origin (x32 Version: 9.0.2.2064)
Pacote Dolby Digital Live (x32 Version: 3.00)
Painel de controle de áudio da Creative (x32 Version: 3.00)
PDF Settings (x32 Version: 1.0)
Photo Common (x32 Version: 16.4.3508.0205)
Photo Gallery (x32 Version: 16.4.3508.0205)
PoiZone (x32)
Power Tab Editor 1.7 (x32 Version: 1.7.0)
Realtek Ethernet Controller Driver For Windows 7 (x32 Version: 7.12.1218.2009)
Recover My Files (x32 Version: 4.9.6.1541)
RelevantKnowledge (x32 Version: 1.3.336.320)
Restorer2000 Professional (x32)
Riffstation Trial 1.21 (x32 Version: 1.21)
Riffstation Trial version 1.1 (x32 Version: 1.1)
Sakura (x32)
Sawer (x32)
ScreenVirtuoso PRO 4.61 (x32)
Sibelius Scorch (all browsers) (x32 Version: 5.2.1)
Skype Click to Call (x32 Version: 6.12.13601)
Skype™ 6.6 (x32 Version: 6.6.106)
Slice Audio File Splitter (x32)
Sound Blaster X-Fi (x32 Version: 1.0)
Steinberg Cubase LE 4 (x32 Version: 4.1.2.851)
Suporte para Aplicativos Apple (x32 Version: 2.3.6)
TEFView 2.69 (x32)
Toxic Biohazard (x32)
Transcribe! 7.40 (x32 Version: 7.40)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0)
Visual Studio 2008 x64 Redistributables (x32 Version: 10.0.0.2)
Visual Studio 2010 x64 Redistributables (Version: 13.0.0.1)
VLC media player 2.0.7 (x32 Version: 2.0.7)
WavePad Sound Editor (x32 Version: 5.55)
Winamp (x32 Version: 5.64 )
Windows Live Communications Platform (x32 Version: 16.4.3508.0205)
Windows Live Essentials (x32 Version: 16.4.3508.0205)
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0)
Windows Live Installer (x32 Version: 16.4.3508.0205)
Windows Live Mail (x32 Version: 16.4.3508.0205)
Windows Live MIME IFilter (Version: 16.4.3508.0205)
Windows Live Photo Common (x32 Version: 16.4.3508.0205)
Windows Live PIMT Platform (x32 Version: 16.4.3508.0205)
Windows Live SOXE (x32 Version: 16.4.3508.0205)
Windows Live SOXE Definitions (x32 Version: 16.4.3508.0205)
Windows Live UX Platform (x32 Version: 16.4.3508.0205)
Windows Live UX Platform Language Pack (x32 Version: 16.4.3508.0205)
Windows Live Writer (x32 Version: 16.4.3508.0205)
Windows Live Writer Resources (x32 Version: 16.4.3508.0205)
Windows Media Player Firefox Plugin (x32 Version: 1.0.0.8)
Windows Movie Maker 2.6 (x32 Version: 2.6.4037.0)
WinRAR 4.20 (64-bit) (Version: 4.20.0)
==================== Restore Points =========================
22-09-2013 03:29:26 Scheduled Checkpoint
29-09-2013 13:46:35 Scheduled Checkpoint
07-10-2013 16:22:55 Scheduled Checkpoint
==================== Scheduled Tasks (whitelisted) =============
Task: {09B12301-36AF-4F2A-B377-8DF932CC0A51} - System32\Tasks\NCH Software\WavePadSevenDays => C:\Program Files (x86)\NCH Software\WavePad\WavePad.exe [2013-08-23] (NCH Software)
Task: {0BFA96ED-36FA-4F60-9F00-564325579E51} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation)
Task: {15A02632-7A5F-4F66-AC28-685BC4CE0A50} - System32\Tasks\Desk 365 RunAsStdUser => C:\Program Files (x86)\Desk 365\desk365.exe
Task: {24F52024-B589-43C0-8A83-68F3C2C9DFD0} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation)
Task: {36350CD7-9351-442F-A606-14EC6DDF163D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-08] (Adobe Systems Incorporated)
Task: {504CD3E9-B0AE-4E72-8AAD-981B39F6E0ED} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2013-05-13] (Microsoft)
Task: {541D92A1-FA52-4892-8813-1F58B636346A} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-03-12] (Oracle Corporation)
Task: {5C38B008-2C09-4C7C-9B49-EFC8C5AFC1D7} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-09-13] (Google Inc.)
Task: {631DBCDD-6112-4780-8574-3F0B62A380DA} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation)
Task: {7879703A-43D1-48D4-8C9D-A4C70BCD0B0E} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1668779431-2791829902-819445095-1001Core => C:\Users\eric\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-08-23] (Facebook Inc.)
Task: {79B884EF-F4B8-446B-9B87-703F6B08D933} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1668779431-2791829902-819445095-1001UA => C:\Users\eric\AppData\Local\Google\Update\GoogleUpdate.exe [2012-05-19] (Google Inc.)
Task: {84198167-8BDB-4D33-B497-B4A5E9B5125A} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1668779431-2791829902-819445095-1001Core => C:\Users\eric\AppData\Local\Google\Update\GoogleUpdate.exe [2012-05-19] (Google Inc.)
Task: {865BEDA4-2924-4F44-B07C-7D64ABCBE766} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation)
Task: {9EC0B31F-DBC3-4F6F-8B93-5FF2D7EF0FFF} - System32\Tasks\EVGA CD Installer => D:\autorun.exe
Task: {A88D5D7B-940D-4B79-8359-CA1EEF2B7B2F} - System32\Tasks\Google Updater and Installer => C:\Users\eric\AppData\Local\Google\Update\GoogleUpdate.exe [2012-05-19] (Google Inc.)
Task: {B545A4E2-07FD-4175-8079-40DCF8638F81} - System32\Tasks\HP online update program => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
Task: {C9D3FAEB-12D5-4E06-85A7-CEA1CC20C3C9} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {CF61E665-F49C-4B22-B80D-F02FA1AF63CB} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-09-13] (Google Inc.)
Task: {E5173927-E8AE-4868-9288-2FFC33CAAECA} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1668779431-2791829902-819445095-1001UA => C:\Users\eric\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-08-23] (Facebook Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1668779431-2791829902-819445095-1001Core.job => C:\Users\eric\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1668779431-2791829902-819445095-1001UA.job => C:\Users\eric\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1668779431-2791829902-819445095-1001Core.job => C:\Users\eric\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1668779431-2791829902-819445095-1001UA.job => C:\Users\eric\AppData\Local\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\Windows\System32:FC2D230A_Abn.gbp
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="2"
==================== Faulty Device Manager Devices =============
Name: Marvell 91xx Config ATA Device
Description: Marvell 91xx Config ATA Device
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Security Processor Loader Driver
Description: Security Processor Loader Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: spldr
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
==================== Event log errors: =========================
Application errors:
==================
Error: (10/08/2013 09:05:56 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (10/08/2013 09:05:12 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/08/2013 09:04:23 PM) (Source: Microsoft-Windows-User Profiles Service) (User: eric-home-sli)
Description: Windows cannot load the user's profile but has logged you on with the default profile for the system.
DETAIL - Access is denied.
Error: (10/08/2013 08:48:51 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (10/08/2013 08:37:17 AM) (Source: Microsoft-Windows-User Profiles Service) (User: eric-home-sli)
Description: Windows cannot load the user's profile but has logged you on with the default profile for the system.
DETAIL - Access is denied.
Error: (10/08/2013 08:37:17 AM) (Source: Microsoft-Windows-User Profiles Service) (User: eric-home-sli)
Description: Windows cannot load the user's profile but has logged you on with the default profile for the system.
DETAIL - Access is denied.
Error: (10/08/2013 08:35:25 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/07/2013 04:33:02 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "1".Error in manifest or policy file "2" on line 3.
Multiple requestedPrivileges elements are not allowed in manifest.
Error: (10/07/2013 01:22:55 PM) (Source: VSS) (User: )
Description: Volume Shadow Copy Service error: Unexpected error calling routine ConvertStringSidToSid(S-1-5-21-1668779431-2791829902-819445095-1001.bak). hr = 0x80070539, The security ID structure is invalid.
.
Operation:
OnIdentify event
Gathering Writer Data
Context:
Execution Context: Shadow Copy Optimization Writer
Writer Class Id: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Writer Name: Shadow Copy Optimization Writer
Writer Instance ID: {5a2c70ac-0365-4874-9cd2-954a576eea28}
Error: (10/07/2013 11:17:44 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
System errors:
=============
Error: (10/08/2013 09:32:14 PM) (Source: Service Control Manager) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error:
%%1068
Error: (10/08/2013 09:32:14 PM) (Source: Service Control Manager) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error:
%%1068
Error: (10/08/2013 09:32:14 PM) (Source: Service Control Manager) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error:
%%1068
Error: (10/08/2013 09:31:49 PM) (Source: Service Control Manager) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error:
%%1068
Error: (10/08/2013 09:31:49 PM) (Source: Service Control Manager) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error:
%%1068
Error: (10/08/2013 09:31:49 PM) (Source: Service Control Manager) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error:
%%1068
Error: (10/08/2013 09:31:49 PM) (Source: Service Control Manager) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error:
%%1068
Error: (10/08/2013 09:31:49 PM) (Source: Service Control Manager) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error:
%%1068
Error: (10/08/2013 09:31:49 PM) (Source: Service Control Manager) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error:
%%1068
Error: (10/08/2013 09:27:14 PM) (Source: Service Control Manager) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error:
%%1068
Microsoft Office Sessions:
=========================
Error: (10/08/2013 09:05:56 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\eric\Downloads\SoftonicDownloader_for_winamp.exe
Error: (10/08/2013 09:05:12 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/08/2013 09:04:23 PM) (Source: Microsoft-Windows-User Profiles Service)(User: eric-home-sli)
Description: Access is denied.
Error: (10/08/2013 08:48:51 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\eric\Downloads\SoftonicDownloader_for_winamp.exe
Error: (10/08/2013 08:37:17 AM) (Source: Microsoft-Windows-User Profiles Service)(User: eric-home-sli)
Description: Access is denied.
Error: (10/08/2013 08:37:17 AM) (Source: Microsoft-Windows-User Profiles Service)(User: eric-home-sli)
Description: Access is denied.
Error: (10/08/2013 08:35:25 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/07/2013 04:33:02 PM) (Source: SideBySide)(User: )
Description: C:\Program Files (x86)\Creative\Audio Device Selection Unicode\CTAudSeu.exeC:\Program Files (x86)\Creative\Audio Device Selection Unicode\CTAudSeu.exe2
Error: (10/07/2013 01:22:55 PM) (Source: VSS)(User: )
Description: ConvertStringSidToSid(S-1-5-21-1668779431-2791829902-819445095-1001.bak)0x80070539, The security ID structure is invalid.
Operation:
OnIdentify event
Gathering Writer Data
Context:
Execution Context: Shadow Copy Optimization Writer
Writer Class Id: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Writer Name: Shadow Copy Optimization Writer
Writer Instance ID: {5a2c70ac-0365-4874-9cd2-954a576eea28}
Error: (10/07/2013 11:17:44 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
CodeIntegrity Errors:
===================================
Date: 2012-06-10 10:49:27.401
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\nvd3dumx.dll because the set of per-page image hashes could not be found on the system.
Date: 2012-06-10 10:49:27.388
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\nvd3dumx.dll because the set of per-page image hashes could not be found on the system.
Date: 2012-06-10 10:49:27.377
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\nvd3dumx.dll because the set of per-page image hashes could not be found on the system.
Date: 2012-06-10 10:49:27.345
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\nvd3dumx.dll because the set of per-page image hashes could not be found on the system.
Date: 2012-06-10 01:10:47.699
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\nvd3dumx.dll because the set of per-page image hashes could not be found on the system.
Date: 2012-06-10 01:10:47.690
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\nvd3dumx.dll because the set of per-page image hashes could not be found on the system.
Date: 2012-06-10 01:10:47.680
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\nvd3dumx.dll because the set of per-page image hashes could not be found on the system.
Date: 2012-06-10 01:10:47.664
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\nvd3dumx.dll because the set of per-page image hashes could not be found on the system.
Date: 2012-06-10 01:02:45.040
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\nvd3dumx.dll because the set of per-page image hashes could not be found on the system.
Date: 2012-06-10 01:02:45.031
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\nvd3dumx.dll because the set of per-page image hashes could not be found on the system.
==================== Memory info ===========================
Percentage of memory in use: 23%
Total physical RAM: 16375.18 MB
Available physical RAM: 12608.65 MB
Total Pagefile: 32748.54 MB
Available Pagefile: 29367.57 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB
==================== Drives ================================
Drive c: (BOOT 1T) (Fixed) (Total:931.41 GB) (Free:295.55 GB) NTFS
Drive e: (MUSIC) (Fixed) (Total:931.51 GB) (Free:348.64 GB) NTFS
Drive f: (USB DISK) (Removable) (Total:0.93 GB) (Free:0.37 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 829DD355)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: D8F5A8E9)
Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS)
========================================================
Disk: 2 (MBR Code: Windows XP) (Size: 956 MB) (Disk ID: C3072E18)
Partition 1: (Active) - (Size=956 MB) - (Type=0C)
==================== End Of Log ============================
Attached Files
-
Addition.txt 29.63KB
109 downloads
-
FRST.txt 36.02KB
109 downloads
Sign In
Create Account
