Can you please help me. My Acer laptop doesn't boot up after installing a windows update.
I tried everything within the windows environment. But no success. I can't go to safe mode either.
I read some of your old posts. Downloaded Farbar tool. Here's my log.
Can you please identify what's the pproblem is.
Thank you
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by SYSTEM on MININT-FDQQ63G on 13-03-2014 22:45:11
Running from H:\
Windows 7 Ultimate (X64) OS Language: English(US)
Internet Explorer Version 11
Boot Mode: Recovery
The current controlset is ControlSet001
ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log.
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingc...can-tool/dl/81/
Download link for 64-Bit Version: http://www.bleepingc...can-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo...very-scan-tool/
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1890088 2009-12-10] (Synaptics Incorporated)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-19] (Adobe Systems Incorporated)
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-01] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-20] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] - [X]
HKLM-x32\...\Run: [Acrobat Assistant 8.0] - C:\Program Files (x86)\Adobe Acrobat 11.0\Acrobat\Acrotray.exe [3478392 2013-12-20] (Adobe Systems Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\Home\...\Run: [Google Update] - C:\Users\Home\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-07-19] (Google Inc.)
HKU\Home\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-09-13] (Apple Inc.)
HKU\Home\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-09-15] (Apple Inc.)
HKU\Home\...\Run: [GoogleDriveSync] - C:\Program Files (x86)\Google\Drive\googledrivesync.exe [21822128 2014-01-30] (Google)
HKU\Home\...\Run: [uTorrent] - C:\Users\Home\AppData\Roaming\uTorrent\uTorrent.exe [904272 2013-11-16] (BitTorrent Inc.)
HKU\Home\...\Run: [FreeAC] - C:\Program Files (x86)\Free Alarm Clock\FreeAlarmClock.exe [1339672 2013-10-22] (Comfort Software Group)
HKU\Home\...\Run: [ZedgeToneSync] - C:\Users\Home\AppData\Local\Apps\2.0\Data\P5HO8LXV.321\VH6V0TAC.8B1\zedg..tion_4cd56dcfd1799009_0001.0002_ea3f01849f5e16c3\Data\ZedgeToneSync.appref-ms -startup
==================== Services (Whitelisted) =================
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-08-07] (BlueStack Systems, Inc.)
S2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-08-07] (BlueStack Systems, Inc.)
S2 Connectify; C:\Program Files (x86)\Connectify\ConnectifyService.exe [487936 2013-11-05] (Connectify)
S2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)
S3 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [279848 2007-06-27] (Nero AG)
S2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.)
S2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.)
S2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.)
S2 Virtual Router; C:\Program Files (x86)\Virtual Router\VirtualRouterService.exe [12288 2013-02-10] (Chris Pietschmann (http://pietschsoft.com))
S3 VsEtwService120; C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [87728 2013-10-04] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
S2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-08-07] (BlueStack Systems)
S1 cnnctfy3; C:\Windows\System32\DRIVERS\cnnctfy3.sys [35352 2013-09-27] (Connectify)
S0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
S3 mvusbews; C:\Windows\System32\Drivers\mvusbews.sys [20480 2012-12-23] (Marvell Semiconductor, Inc.)
S2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)
S3 IntcAzAudAddService; system32\drivers\RTKVHD64.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-03-13 22:28 - 2014-03-13 22:45 - 00000000 ____D () C:\FRST
2014-03-12 12:34 - 2014-02-28 22:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2014-03-12 12:34 - 2014-02-28 21:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2014-03-12 12:34 - 2014-02-28 21:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollectorres.dll
2014-03-12 12:34 - 2014-02-28 20:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2014-03-12 12:34 - 2014-02-28 20:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2014-03-12 12:34 - 2014-02-28 20:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\System32\ieetwproxystub.dll
2014-03-12 12:34 - 2014-02-28 20:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2014-03-12 12:34 - 2014-02-28 20:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2014-03-12 12:34 - 2014-02-28 20:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll
2014-03-12 12:34 - 2014-02-28 20:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2014-03-12 12:34 - 2014-02-28 20:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollector.exe
2014-03-12 12:34 - 2014-02-28 20:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\System32\jscript9diag.dll
2014-03-12 12:34 - 2014-02-28 20:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-12 12:34 - 2014-02-28 20:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2014-03-12 12:34 - 2014-02-28 20:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2014-03-12 12:34 - 2014-02-28 20:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-12 12:34 - 2014-02-28 20:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\System32\msrating.dll
2014-03-12 12:34 - 2014-02-28 19:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2014-03-12 12:34 - 2014-02-28 19:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-12 12:34 - 2014-02-28 19:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-12 12:34 - 2014-02-28 19:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-12 12:34 - 2014-02-28 19:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-12 12:34 - 2014-02-28 19:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-12 12:34 - 2014-02-28 19:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2014-03-12 12:34 - 2014-02-28 19:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-12 12:34 - 2014-02-28 19:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-12 12:34 - 2014-02-28 19:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-12 12:34 - 2014-02-28 19:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2014-03-12 12:34 - 2014-02-28 19:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2014-03-12 12:34 - 2014-02-28 19:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-12 12:34 - 2014-02-28 19:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-12 12:34 - 2014-02-28 19:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2014-03-12 12:34 - 2014-02-28 19:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-12 12:34 - 2014-02-28 19:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-12 12:34 - 2014-02-28 18:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-12 12:34 - 2014-02-28 18:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2014-03-12 12:34 - 2014-02-28 18:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-12 12:34 - 2014-02-28 18:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-12 12:34 - 2014-02-28 18:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2014-03-12 12:34 - 2014-02-28 18:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-12 12:34 - 2014-02-06 17:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\System32\win32k.sys
2014-03-12 12:34 - 2014-02-03 18:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\System32\qedit.dll
2014-03-12 12:34 - 2014-02-03 18:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-12 12:34 - 2014-01-28 18:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\System32\wer.dll
2014-03-12 12:34 - 2014-01-28 18:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-12 12:33 - 2014-01-27 18:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\System32\wwansvc.dll
2014-03-12 12:32 - 2014-02-03 18:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2014-03-12 12:32 - 2014-02-03 18:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-11 19:43 - 2014-01-08 18:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-03-11 19:43 - 2014-01-03 14:44 - 06574592 _____ (Microsoft Corporation) C:\Windows\System32\mstscax.dll
2014-03-11 15:01 - 2014-03-11 15:01 - 05777288 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-03-06 20:05 - 2014-03-06 20:42 - 00000000 ____D () C:\Users\Home\Desktop\Pwnage
2014-03-06 20:04 - 2014-03-06 20:04 - 16969459 _____ () C:\Users\Home\Desktop\evasi0n7-win-1.0.7-633a643e10531c58e7ce18018986b6d14774102d.zip
2014-03-06 19:53 - 2014-03-06 19:54 - 00429832 _____ () C:\Users\Home\Desktop\ToneSyncSetup.exe
2014-03-04 17:42 - 2014-03-04 17:42 - 26188854 _____ () C:\Users\Home\Desktop\Books.bmp
2014-02-24 13:52 - 2014-02-24 14:21 - 00012169 _____ () C:\Users\Home\Downloads\tax-return 2014.xlsx
2014-02-24 06:02 - 2014-02-24 06:02 - 00001146 _____ () C:\Users\Home\Desktop\Remember Every Thing You Read-7 Day Speed Reading Program.lnk
2014-02-24 06:01 - 2014-02-24 06:01 - 00001361 _____ () C:\Users\Home\Desktop\Research Skills Articles.lnk
2014-02-19 06:05 - 2014-02-19 06:05 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-02-18 00:04 - 2014-02-18 00:04 - 00000000 ____D () C:\Users\Home\AppData\Roaming\MPC-HC
2014-02-16 07:24 - 2014-02-16 07:24 - 00004437 _____ () C:\Users\Home\Desktop\Interest in competitions for semester 2.xlsx
2014-02-15 14:03 - 2014-02-15 14:03 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Real
2014-02-15 14:03 - 2014-02-15 14:03 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Media Player Classic
2014-02-15 13:37 - 2014-02-15 13:37 - 00000000 ____D () C:\Program Files (x86)\K-Lite Codec Pack
2014-02-15 13:37 - 2014-02-06 10:00 - 00127488 _____ () C:\Windows\System32\ff_vfw.dll
2014-02-15 13:37 - 2014-02-06 10:00 - 00112640 _____ () C:\Windows\SysWOW64\ff_vfw.dll
2014-02-15 13:37 - 2013-12-01 05:10 - 00257624 _____ () C:\Windows\System32\unrar64.dll
2014-02-15 13:37 - 2013-12-01 05:10 - 00218200 _____ () C:\Windows\SysWOW64\unrar.dll
2014-02-15 13:37 - 2013-03-17 10:22 - 03554304 _____ (x264vfw project) C:\Windows\System32\x264vfw64.dll
2014-02-15 13:37 - 2013-03-17 09:21 - 03649536 _____ (x264vfw project) C:\Windows\SysWOW64\x264vfw.dll
2014-02-15 13:37 - 2012-07-21 03:55 - 00180736 _____ (fccHandler) C:\Windows\System32\ac3acm.acm
2014-02-15 13:37 - 2012-07-21 03:54 - 00122880 _____ (fccHandler) C:\Windows\SysWOW64\ac3acm.acm
2014-02-15 13:37 - 2011-12-07 10:37 - 00148992 _____ ( ) C:\Windows\System32\lagarith.dll
2014-02-15 13:37 - 2011-12-07 10:32 - 00216064 _____ ( ) C:\Windows\SysWOW64\lagarith.dll
2014-02-15 13:37 - 2011-06-24 07:45 - 00258560 _____ () C:\Windows\System32\xvidvfw.dll
2014-02-15 13:37 - 2011-06-24 07:44 - 00243200 _____ () C:\Windows\SysWOW64\xvidvfw.dll
2014-02-15 13:37 - 2011-06-24 07:31 - 00703488 _____ () C:\Windows\System32\xvidcore.dll
2014-02-15 13:37 - 2011-06-24 07:28 - 00650752 _____ () C:\Windows\SysWOW64\xvidcore.dll
2014-02-15 13:37 - 2004-05-18 11:16 - 00039936 _____ (Disappearing Inc.) C:\Windows\SysWOW64\huffyuv.dll
2014-02-15 12:29 - 2014-02-15 12:29 - 00000000 ____D () C:\Program Files (x86)\Real Alternative
2014-02-15 12:29 - 2010-02-15 10:00 - 00278528 _____ (Real Networks, Inc) C:\Windows\SysWOW64\pncrt.dll
2014-02-15 12:29 - 2010-02-15 10:00 - 00185920 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\rmoc3260.dll
2014-02-15 12:29 - 2010-02-15 10:00 - 00006656 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\pndx5016.dll
2014-02-15 12:29 - 2010-02-15 10:00 - 00005632 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\pndx5032.dll
2014-02-15 05:42 - 2014-02-15 05:42 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-14 08:25 - 2013-10-01 18:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\TsUsbFlt.sys
2014-02-14 08:25 - 2013-10-01 18:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\System32\TsUsbRedirectionGroupPolicyControl.exe
2014-02-14 08:25 - 2013-10-01 18:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\System32\TsUsbRedirectionGroupPolicyExtension.dll
2014-02-14 08:25 - 2013-10-01 17:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\System32\MsRdpWebAccess.dll
2014-02-14 08:25 - 2013-10-01 17:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\System32\wksprtPS.dll
2014-02-14 08:25 - 2013-10-01 17:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\System32\tsgqec.dll
2014-02-14 08:25 - 2013-10-01 17:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\System32\TsUsbGDCoInstaller.dll
2014-02-14 08:25 - 2013-10-01 16:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\System32\rdvidcrl.dll
2014-02-14 08:25 - 2013-10-01 16:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2014-02-14 08:25 - 2013-10-01 16:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2014-02-14 08:25 - 2013-10-01 16:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\System32\TSWbPrxy.exe
2014-02-14 08:25 - 2013-10-01 16:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\System32\wksprt.exe
2014-02-14 08:25 - 2013-10-01 15:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-02-14 08:25 - 2013-10-01 15:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\System32\mstsc.exe
2014-02-14 08:25 - 2013-10-01 15:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-02-14 08:25 - 2013-10-01 14:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-02-14 08:23 - 2013-09-24 18:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\System32\TSWorkspace.dll
2014-02-14 08:23 - 2013-09-24 17:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-02-12 20:41 - 2014-03-11 01:00 - 00000000 ____D () C:\Users\Home\Desktop\ScotMUN
2014-02-11 19:03 - 2013-12-21 01:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2014-02-11 19:03 - 2013-12-21 00:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-11 18:01 - 2013-12-31 15:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-11 18:01 - 2013-12-31 15:04 - 00420008 _____ () C:\Windows\System32\locale.nls
2014-02-11 18:01 - 2013-12-24 15:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-11 18:01 - 2013-12-24 14:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2014-02-11 18:01 - 2013-12-05 18:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\System32\msxml3.dll
2014-02-11 18:01 - 2013-12-05 18:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\System32\msxml3r.dll
2014-02-11 18:01 - 2013-12-05 18:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-11 18:01 - 2013-12-05 18:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-11 18:01 - 2013-12-03 18:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\System32\secproc.dll
2014-02-11 18:01 - 2013-12-03 18:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\System32\secproc_isv.dll
2014-02-11 18:01 - 2013-12-03 18:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\System32\secproc_ssp_isv.dll
2014-02-11 18:01 - 2013-12-03 18:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\System32\secproc_ssp.dll
2014-02-11 18:01 - 2013-12-03 18:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\System32\msdrm.dll
2014-02-11 18:01 - 2013-12-03 18:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\System32\RMActivate_isv.exe
2014-02-11 18:01 - 2013-12-03 18:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\System32\RMActivate.exe
2014-02-11 18:01 - 2013-12-03 18:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\System32\RMActivate_ssp.exe
2014-02-11 18:01 - 2013-12-03 18:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\System32\RMActivate_ssp_isv.exe
2014-02-11 18:01 - 2013-12-03 18:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-11 18:01 - 2013-12-03 18:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-11 18:01 - 2013-12-03 18:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-11 18:01 - 2013-12-03 18:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-11 18:01 - 2013-12-03 18:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-11 18:01 - 2013-12-03 17:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-11 18:01 - 2013-12-03 17:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-11 18:01 - 2013-12-03 17:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-11 18:01 - 2013-12-03 17:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-11 18:01 - 2013-11-26 00:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-11 18:01 - 2013-11-22 14:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\System32\d2d1.dll
==================== One Month Modified Files and Folders =======
2014-03-13 22:45 - 2014-03-13 22:28 - 00000000 ____D () C:\FRST
2014-03-12 15:59 - 2009-07-13 20:51 - 00094392 _____ () C:\Windows\setupact.log
2014-03-12 15:37 - 2011-07-19 09:55 - 00000000 ____D () C:\Users\Home\AppData\Roaming\uTorrent
2014-03-12 15:37 - 2011-07-03 12:37 - 01492678 _____ () C:\Windows\WindowsUpdate.log
2014-03-12 15:22 - 2013-10-15 05:00 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-12 15:16 - 2011-07-19 09:54 - 00000904 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3916858173-3311012507-3103084023-1000UA.job
2014-03-12 15:01 - 2012-04-01 10:08 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-12 14:44 - 2011-10-29 16:14 - 00000000 ____D () C:\Users\Home\Documents\Outlook Files
2014-03-12 14:43 - 2013-10-05 08:08 - 00000000 ____D () C:\Users\Home\AppData\Local\A7556476-7D93-4CD4-9247-02AE3C840000.aplzod
2014-03-12 13:14 - 2009-07-13 20:45 - 00014224 ____H () C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-12 13:14 - 2009-07-13 20:45 - 00014224 ____H () C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-12 13:09 - 2013-11-12 12:00 - 00000000 ___RD () C:\Users\Home\Google Drive
2014-03-12 13:09 - 2013-10-15 05:00 - 00000890 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-12 13:09 - 2011-07-19 09:53 - 00000000 ____D () C:\Users\Home\AppData\Local\Deployment
2014-03-12 13:08 - 2011-12-10 10:18 - 00000198 _____ () C:\Windows\Tasks\AutoKMS.job
2014-03-12 13:08 - 2009-07-13 21:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-12 13:08 - 2009-07-13 20:45 - 00413768 _____ () C:\Windows\System32\FNTCACHE.DAT
2014-03-12 13:07 - 2013-03-15 22:00 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-12 13:07 - 2013-03-15 22:00 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-12 12:44 - 2011-10-15 02:59 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-03-12 12:43 - 2013-08-25 08:24 - 00000000 ____D () C:\Windows\System32\MRT
2014-03-12 12:43 - 2011-07-19 16:14 - 00000000 ____D () C:\Users\Home\AppData\Roaming\vlc
2014-03-12 12:39 - 2011-07-05 12:55 - 90015360 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe
2014-03-12 11:52 - 2012-06-22 19:31 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Skype
2014-03-12 10:50 - 2009-07-13 19:20 - 00000000 ____D () C:\Windows\rescache
2014-03-12 10:16 - 2011-07-19 09:54 - 00000852 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3916858173-3311012507-3103084023-1000Core.job
2014-03-12 06:41 - 2011-12-10 10:18 - 00000202 _____ () C:\Windows\Tasks\AutoKMSDaily.job
2014-03-11 19:45 - 2009-07-13 19:20 - 00000000 ____D () C:\Windows\SysWOW64\ar-SA
2014-03-11 19:45 - 2009-07-13 19:20 - 00000000 ____D () C:\Windows\System32\ar-SA
2014-03-11 18:49 - 2013-12-03 23:16 - 00000000 ____D () C:\Users\Home\Desktop\Skype Pics
2014-03-11 15:01 - 2014-03-11 15:01 - 05777288 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-03-11 15:01 - 2012-04-01 10:08 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-11 15:01 - 2012-04-01 10:08 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-11 15:01 - 2011-07-19 02:32 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-11 14:16 - 2011-07-19 10:00 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Mozilla
2014-03-11 01:00 - 2014-02-12 20:41 - 00000000 ____D () C:\Users\Home\Desktop\ScotMUN
2014-03-09 05:00 - 2011-10-13 04:31 - 00713870 _____ () C:\Windows\System32\perfh00C.dat
2014-03-09 05:00 - 2011-10-13 04:31 - 00502260 _____ () C:\Windows\System32\perfh001.dat
2014-03-09 05:00 - 2011-10-13 04:31 - 00138186 _____ () C:\Windows\System32\perfc00C.dat
2014-03-09 05:00 - 2011-10-13 04:31 - 00102726 _____ () C:\Windows\System32\perfc001.dat
2014-03-09 05:00 - 2009-07-13 21:13 - 02250444 _____ () C:\Windows\System32\PerfStringBackup.INI
2014-03-06 20:42 - 2014-03-06 20:05 - 00000000 ____D () C:\Users\Home\Desktop\Pwnage
2014-03-06 20:04 - 2014-03-06 20:04 - 16969459 _____ () C:\Users\Home\Desktop\evasi0n7-win-1.0.7-633a643e10531c58e7ce18018986b6d14774102d.zip
2014-03-06 19:54 - 2014-03-06 19:53 - 00429832 _____ () C:\Users\Home\Desktop\ToneSyncSetup.exe
2014-03-06 00:13 - 2011-11-04 19:25 - 00000000 ___RD () C:\Users\Home\Desktop\Frequenters
2014-03-04 17:42 - 2014-03-04 17:42 - 26188854 _____ () C:\Users\Home\Desktop\Books.bmp
2014-03-02 06:51 - 2013-09-15 12:23 - 00000000 ____D () C:\Program Files (x86)\Connectify
2014-02-28 22:05 - 2014-03-12 12:34 - 23133696 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2014-02-28 21:17 - 2014-03-12 12:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2014-02-28 21:16 - 2014-03-12 12:34 - 00004096 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollectorres.dll
2014-02-28 20:58 - 2014-03-12 12:34 - 02765824 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2014-02-28 20:52 - 2014-03-12 12:34 - 00066048 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2014-02-28 20:51 - 2014-03-12 12:34 - 00048640 _____ (Microsoft Corporation) C:\Windows\System32\ieetwproxystub.dll
2014-02-28 20:42 - 2014-03-12 12:34 - 00053760 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2014-02-28 20:40 - 2014-03-12 12:34 - 00033792 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2014-02-28 20:37 - 2014-03-12 12:34 - 00574976 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll
2014-02-28 20:33 - 2014-03-12 12:34 - 00139264 _____ (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2014-02-28 20:33 - 2014-03-12 12:34 - 00111616 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollector.exe
2014-02-28 20:32 - 2014-03-12 12:34 - 00708608 _____ (Microsoft Corporation) C:\Windows\System32\jscript9diag.dll
2014-02-28 20:30 - 2014-03-12 12:34 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-28 20:23 - 2014-03-12 12:34 - 00940032 _____ (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2014-02-28 20:17 - 2014-03-12 12:34 - 00218624 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2014-02-28 20:11 - 2014-03-12 12:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-28 20:02 - 2014-03-12 12:34 - 00195584 _____ (Microsoft Corporation) C:\Windows\System32\msrating.dll
2014-02-28 19:54 - 2014-03-12 12:34 - 05768704 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2014-02-28 19:52 - 2014-03-12 12:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-28 19:51 - 2014-03-12 12:34 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-28 19:47 - 2014-03-12 12:34 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-28 19:43 - 2014-03-12 12:34 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-28 19:43 - 2014-03-12 12:34 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-28 19:42 - 2014-03-12 12:34 - 00627200 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2014-02-28 19:40 - 2014-03-12 12:34 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-28 19:38 - 2014-03-12 12:34 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-28 19:37 - 2014-03-12 12:34 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-28 19:35 - 2014-03-12 12:34 - 02041856 _____ (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2014-02-28 19:18 - 2014-03-12 12:34 - 13051904 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2014-02-28 19:16 - 2014-03-12 12:34 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-28 19:14 - 2014-03-12 12:34 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-28 19:10 - 2014-03-12 12:34 - 02334208 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2014-02-28 19:03 - 2014-03-12 12:34 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-28 19:00 - 2014-03-12 12:34 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-28 18:57 - 2014-03-12 12:34 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-28 18:38 - 2014-03-12 12:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2014-02-28 18:32 - 2014-03-12 12:34 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-28 18:27 - 2014-03-12 12:34 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-28 18:25 - 2014-03-12 12:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2014-02-28 18:25 - 2014-03-12 12:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-25 04:25 - 2014-01-19 21:07 - 00000000 ____D () C:\Users\Home\Desktop\Toronto Trip
2014-02-24 14:21 - 2014-02-24 13:52 - 00012169 _____ () C:\Users\Home\Downloads\tax-return 2014.xlsx
2014-02-24 06:02 - 2014-02-24 06:02 - 00001146 _____ () C:\Users\Home\Desktop\Remember Every Thing You Read-7 Day Speed Reading Program.lnk
2014-02-24 06:01 - 2014-02-24 06:01 - 00001361 _____ () C:\Users\Home\Desktop\Research Skills Articles.lnk
2014-02-19 06:36 - 2011-07-18 17:46 - 01077478 _____ () C:\Windows\PFRO.log
2014-02-19 06:05 - 2014-02-19 06:05 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-02-19 06:05 - 2012-06-22 19:30 - 00000000 ____D () C:\ProgramData\Skype
2014-02-19 05:23 - 2011-11-04 19:25 - 00000000 ___RD () C:\Users\Home\Desktop\Multimedia
2014-02-18 00:04 - 2014-02-18 00:04 - 00000000 ____D () C:\Users\Home\AppData\Roaming\MPC-HC
2014-02-16 07:24 - 2014-02-16 07:24 - 00004437 _____ () C:\Users\Home\Desktop\Interest in competitions for semester 2.xlsx
2014-02-15 14:03 - 2014-02-15 14:03 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Real
2014-02-15 14:03 - 2014-02-15 14:03 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Media Player Classic
2014-02-15 13:43 - 2012-02-12 09:44 - 00000000 ____D () C:\Users\Home\Desktop\System and Protection
2014-02-15 13:37 - 2014-02-15 13:37 - 00000000 ____D () C:\Program Files (x86)\K-Lite Codec Pack
2014-02-15 13:37 - 2012-02-11 21:11 - 00000000 ____D () C:\Program Files (x86)\DScaler5
2014-02-15 13:33 - 2013-09-13 03:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-15 13:29 - 2012-02-11 21:10 - 00000000 ____D () C:\Program Files (x86)\DirectVobSub
2014-02-15 12:29 - 2014-02-15 12:29 - 00000000 ____D () C:\Program Files (x86)\Real Alternative
2014-02-15 09:56 - 2013-09-14 14:15 - 00000365 _____ () C:\Users\Home\Desktop\UK Address.txt
2014-02-15 08:20 - 2014-02-01 18:13 - 00000000 ____D () C:\Users\Home\AppData\Local\Sony
2014-02-15 05:42 - 2014-02-15 05:42 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-13 10:11 - 2011-07-19 09:54 - 00003872 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3916858173-3311012507-3103084023-1000UA
2014-02-13 10:11 - 2011-07-19 09:54 - 00003476 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3916858173-3311012507-3103084023-1000Core
2014-02-11 19:07 - 2013-09-15 12:16 - 02225056 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-11 19:03 - 2009-07-13 18:34 - 00000478 _____ () C:\Windows\win.ini
Some content of TEMP:
====================
C:\Users\Home\AppData\Local\Temp\avgnt.exe
C:\Users\Home\AppData\Local\Temp\bassmod.dll
C:\Users\Home\AppData\Local\Temp\D3BAE31B-852C-48F2-B978-46F8C3D3E643.exe
C:\Users\Home\AppData\Local\Temp\ICReinstall_ZipOpenerSetup.exe
C:\Users\Home\AppData\Local\Temp\ose00001.exe
C:\Users\Home\AppData\Local\Temp\Risweb32.exe
C:\Users\Home\AppData\Local\Temp\Rocket Reader v811 Setup.exe
C:\Users\Home\AppData\Local\Temp\siinst.exe
C:\Users\Home\AppData\Local\Temp\strings.dll
C:\Users\Home\AppData\Local\Temp\tbuTor.dll
C:\Users\Home\AppData\Local\Temp\vlc-2.1.1-win32.exe
C:\Users\Home\AppData\Local\Temp\vlc-2.1.2-win32.exe
==================== Known DLLs (Whitelisted) ================
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
==================== EXE ASSOCIATION =====================
HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK
==================== Restore Points =========================
==================== Memory info ===========================
Percentage of memory in use: 17%
Total physical RAM: 3766.71 MB
Available physical RAM: 3122.07 MB
Total Pagefile: 3764.86 MB
Available Pagefile: 3116.48 MB
Total Virtual: 8192 MB
Available Virtual: 8191.87 MB
==================== Drives ================================
Drive c: (Zareena) (Fixed) (Total:154.29 GB) (Free:67.36 GB) NTFS
Drive d: (Sweet Home) (Fixed) (Total:72.29 GB) (Free:27.03 GB) NTFS
Drive f: (Manchester) (Fixed) (Total:71.41 GB) (Free:22.73 GB) NTFS
Drive h: () (Removable) (Total:3.88 GB) (Free:3.85 GB) FAT32
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
Drive y: (System Reserved) (Fixed) (Total:0.1 GB) (Free:0.06 GB) NTFS ==>[System with boot components (obtained from reading drive)]
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: B6BAF5DF)
Partition: GPT Partition Type.
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 4 GB) (Disk ID: 00000000)
Partition: GPT Partition Type.
LastRegBack: 2014-03-13 02:35
==================== End Of Log ============================
Sign In
Create Account
