[bigtrucks]

LOL That was the fastest test/scan I've ran since we started. Doesn't look like it finished before it popped up with the file. Should I do it again?

 

 

The type of the file system is NTFS.
Volume label is SQ004981V02.

WARNING!  F parameter not specified.
Running CHKDSK in read-only mode.

CHKDSK is verifying files (stage 1 of 3)...
File verification completed.
  711 large file records processed.                            

  0 bad file records processed.                              

  0 EA records processed.                                    

  60 reparse records processed.                               

CHKDSK is verifying indexes (stage 2 of 3)...

[Advertisements]

Yes please. It needs to go through the 3 stages. When it runs to completion, the end of the log will say either that the hard drive has errors and chkdsk needs to by run without the /f switch or that no errors were found on the hard drive.

[godawgs]

Yes please. It needs to go through the 3 stages. When it runs to completion, the end of the log will say either that the hard drive has errors and chkdsk needs to by run without the /f switch or that no errors were found on the hard drive.

[bigtrucks]

When I run it the DOS command window pops up and there's a flashing courser and that's it. I don;t see anything else. This thing has been a real pain in the butt tonight. I'll try running it again and post in the morning.

[bigtrucks]

I let it go last night and when I looked this morning the gear Icon was in the recycle bin and the notepad was on the dsktp. Finally ran all 3.

 

The type of the file system is NTFS.
The type of the file system is NTFS.
The volume is in use by another process. Chkdsk
might report errors when no corruption is present.
Volume label is SQ004981V02.

WARNING!  F parameter not specified.
Running CHKDSK in read-only mode.

CHKDSK is verifying files (stage 1 of 3)...
File verification completed.
  728 large file records processed.                            

  0 bad file records processed.                              

  0 EA records processed.                                    

  60 reparse records processed.                               

CHKDSK is verifying indexes (stage 2 of 3)...
Index verification completed.
CHKDSK is verifying security descriptors (stage 3 of 3)...
Security descriptor verification completed.
  25608 data files processed.                                    

CHKDSK is verifying Usn Journal...
Usn Journal verification completed.
Windows has checked the file system and found no problems.

 147186687 KB total disk space.
  83033800 KB in 168741 files.
     98244 KB in 25609 indexes.
         0 KB in bad sectors.
    345131 KB in use by the system.
     65536 KB occupied by the log file.
  63709512 KB available on disk.

      4096 bytes in each allocation unit.
  36796671 total allocation units on disk.
  15927378 allocation units available on disk.

[godawgs]

The file system is ok. Let's check the system files.

Delete Old SFC Log and run SFC

• Open an elevated command prompt. To do that:
  • Click Start, click on All Programs and Accessories, then right click on Command Prompt and click on Run as administrator. (See screenshot below)
  
• A command window will open like the image below:
  
  
   
• Type the following and press ENTER after each line:
  

  cd  \windows\Logs\cbs
  copy  cbs.log  cbs.old
  del  cbs.log
  

  Back at the blinking cursor:
• Type or copy and paste the following command and press Enter:
  

  sfc /scannow

  
  
  The sfc /scannow command scans all protected system files and replaces incorrect versions with correct Microsoft versions. Note: This may take awhile to finish. Do not close this Command Prompt window until the verification is 100% complete.
• When the scan has finished you should get one of the following messages in the Command window:
  • Windows Resource Protection did not find any integrity violations.
  • Windows Resource Protection could not perform the requested operation.
  • Windows Resource Protection found corrupt files and successfully repaired them. Details are included in the CBS.Log %WinDir%\Logs\CBS\CBS.log.
  • Windows Resource Protection found corrupt files but was unable to fix some of them. Details are included in the CBS.Log %WinDir%\Logs\CBS\CBS.log.
• Write down the results of the scan so you can post them in your next reply.
• Type exit and press the ENTER key to close the command window.

[bigtrucks]

When you say a while are you talking 1/2 a day, a day or a few hours. I have some bad storms that will be going through in layers (I figure about an hour between storms if they hold up ) and didn't want to start and have the power go out in the middle of it. if it will only take about 2 hours top then I'll run it.Other wise it will have to wait till later tonight to run it.

[godawgs]

It depends. On the number of system files and how many corrupted files it finds. If few or no corrupted files the scan shouldn't take longer that an hour or so. It it encounters lots of corrupted files it could take hours longer. Best wait until the chance of losing power is gone and run the scan then.

[bigtrucks]

Windows Resource Protection found corrupt files but was unable to fix some of them.

Details are included in the CBS.Log WinDir\Logs\CBS\CBS.log. For Example C:\Windows\Logs\CBS\CBS.log

[godawgs]

Hi,
Let's see which files SFC couldn't repair.

• Open an elevated command prompt. To do that:
  • Click on All Programs and Accessories, then right click on Command Prompt and click on Run as administrator. (See screenshot below)
  
• Type the following command, and then press ENTER:
       

  findstr /c:"[SR]" %windir%\Logs\CBS\CBS.log >%userprofile%\Desktop\sfcdetails.txt

A file named sfcdetails.txt will now be on the desktop. Copy and Paste the contents of this file in your next reply.
 

 

[bigtrucks]

Wow that's long.What is "Microsoft-Windows-Sidebar" ? I know I have Google Side Bar. but never heard of Microsoft having one. Unless it's not the same.

 

2014-04-16 14:50:51, Info                  CSI    00000006 [SR] Verifying 100 (0x00000064) components
2014-04-16 14:50:51, Info                  CSI    00000007 [SR] Beginning Verify and Repair transaction
2014-04-16 14:51:04, Info                  CSI    00000009 [SR] Verify complete
2014-04-16 14:51:05, Info                  CSI    0000000a [SR] Verifying 100 (0x00000064) components
2014-04-16 14:51:05, Info                  CSI    0000000b [SR] Beginning Verify and Repair transaction
2014-04-16 14:51:14, Info                  CSI    0000000d [SR] Verify complete
2014-04-16 14:51:14, Info                  CSI    0000000e [SR] Verifying 100 (0x00000064) components
2014-04-16 14:51:14, Info                  CSI    0000000f [SR] Beginning Verify and Repair transaction
2014-04-16 14:51:17, Info                  CSI    00000011 [SR] Verify complete
2014-04-16 14:51:17, Info                  CSI    00000012 [SR] Verifying 100 (0x00000064) components
2014-04-16 14:51:17, Info                  CSI    00000013 [SR] Beginning Verify and Repair transaction
2014-04-16 14:51:19, Info                  CSI    00000015 [SR] Verify complete
2014-04-16 14:51:20, Info                  CSI    00000016 [SR] Verifying 100 (0x00000064) components
2014-04-16 14:51:20, Info                  CSI    00000017 [SR] Beginning Verify and Repair transaction
2014-04-16 14:51:22, Info                  CSI    00000019 [SR] Verify complete
2014-04-16 14:51:22, Info                  CSI    0000001a [SR] Verifying 100 (0x00000064) components
2014-04-16 14:51:22, Info                  CSI    0000001b [SR] Beginning Verify and Repair transaction
2014-04-16 14:51:24, Info                  CSI    0000001d [SR] Verify complete
2014-04-16 14:51:25, Info                  CSI    0000001e [SR] Verifying 100 (0x00000064) components
2014-04-16 14:51:25, Info                  CSI    0000001f [SR] Beginning Verify and Repair transaction
2014-04-16 14:51:27, Info                  CSI    00000021 [SR] Verify complete
2014-04-16 14:51:28, Info                  CSI    00000022 [SR] Verifying 100 (0x00000064) components
2014-04-16 14:51:28, Info                  CSI    00000023 [SR] Beginning Verify and Repair transaction
2014-04-16 14:51:30, Info                  CSI    00000025 [SR] Verify complete
2014-04-16 14:51:30, Info                  CSI    00000026 [SR] Verifying 100 (0x00000064) components
2014-04-16 14:51:30, Info                  CSI    00000027 [SR] Beginning Verify and Repair transaction
2014-04-16 14:51:32, Info                  CSI    00000029 [SR] Verify complete
2014-04-16 14:51:33, Info                  CSI    0000002a [SR] Verifying 100 (0x00000064) components
2014-04-16 14:51:33, Info                  CSI    0000002b [SR] Beginning Verify and Repair transaction
2014-04-16 14:51:35, Info                  CSI    0000002d [SR] Verify complete
2014-04-16 14:51:35, Info                  CSI    0000002e [SR] Verifying 100 (0x00000064) components
2014-04-16 14:51:35, Info                  CSI    0000002f [SR] Beginning Verify and Repair transaction
2014-04-16 14:51:38, Info                  CSI    00000031 [SR] Verify complete
2014-04-16 14:51:39, Info                  CSI    00000032 [SR] Verifying 100 (0x00000064) components
2014-04-16 14:51:39, Info                  CSI    00000033 [SR] Beginning Verify and Repair transaction
2014-04-16 14:51:41, Info                  CSI    00000035 [SR] Verify complete
2014-04-16 14:51:42, Info                  CSI    00000036 [SR] Verifying 100 (0x00000064) components
2014-04-16 14:51:42, Info                  CSI    00000037 [SR] Beginning Verify and Repair transaction
2014-04-16 14:51:46, Info                  CSI    00000039 [SR] Verify complete
2014-04-16 14:51:47, Info                  CSI    0000003a [SR] Verifying 100 (0x00000064) components
2014-04-16 14:51:47, Info                  CSI    0000003b [SR] Beginning Verify and Repair transaction
2014-04-16 14:51:49, Info                  CSI    0000003d [SR] Verify complete
2014-04-16 14:51:50, Info                  CSI    0000003e [SR] Verifying 100 (0x00000064) components
2014-04-16 14:51:50, Info                  CSI    0000003f [SR] Beginning Verify and Repair transaction
2014-04-16 14:51:52, Info                  CSI    00000041 [SR] Verify complete
2014-04-16 14:51:52, Info                  CSI    00000042 [SR] Verifying 100 (0x00000064) components
2014-04-16 14:51:52, Info                  CSI    00000043 [SR] Beginning Verify and Repair transaction
2014-04-16 14:51:54, Info                  CSI    00000045 [SR] Verify complete
2014-04-16 14:51:55, Info                  CSI    00000046 [SR] Verifying 100 (0x00000064) components
2014-04-16 14:51:55, Info                  CSI    00000047 [SR] Beginning Verify and Repair transaction
2014-04-16 14:51:58, Info                  CSI    00000049 [SR] Verify complete
2014-04-16 14:51:59, Info                  CSI    0000004a [SR] Verifying 100 (0x00000064) components
2014-04-16 14:51:59, Info                  CSI    0000004b [SR] Beginning Verify and Repair transaction
2014-04-16 14:52:01, Info                  CSI    0000004d [SR] Verify complete
2014-04-16 14:52:02, Info                  CSI    0000004e [SR] Verifying 100 (0x00000064) components
2014-04-16 14:52:02, Info                  CSI    0000004f [SR] Beginning Verify and Repair transaction
2014-04-16 14:52:05, Info                  CSI    00000051 [SR] Verify complete
2014-04-16 14:52:06, Info                  CSI    00000052 [SR] Verifying 100 (0x00000064) components
2014-04-16 14:52:06, Info                  CSI    00000053 [SR] Beginning Verify and Repair transaction
2014-04-16 14:52:08, Info                  CSI    00000055 [SR] Verify complete
2014-04-16 14:52:09, Info                  CSI    00000056 [SR] Verifying 100 (0x00000064) components
2014-04-16 14:52:09, Info                  CSI    00000057 [SR] Beginning Verify and Repair transaction
2014-04-16 14:52:12, Info                  CSI    00000059 [SR] Verify complete
2014-04-16 14:52:12, Info                  CSI    0000005a [SR] Verifying 100 (0x00000064) components
2014-04-16 14:52:12, Info                  CSI    0000005b [SR] Beginning Verify and Repair transaction
2014-04-16 14:52:16, Info                  CSI    0000005d [SR] Verify complete
2014-04-16 14:52:17, Info                  CSI    0000005e [SR] Verifying 100 (0x00000064) components
2014-04-16 14:52:17, Info                  CSI    0000005f [SR] Beginning Verify and Repair transaction
2014-04-16 14:52:19, Info                  CSI    00000061 [SR] Verify complete
2014-04-16 14:52:20, Info                  CSI    00000062 [SR] Verifying 100 (0x00000064) components
2014-04-16 14:52:20, Info                  CSI    00000063 [SR] Beginning Verify and Repair transaction
2014-04-16 14:52:22, Info                  CSI    00000065 [SR] Verify complete
2014-04-16 14:52:23, Info                  CSI    00000066 [SR] Verifying 100 (0x00000064) components
2014-04-16 14:52:23, Info                  CSI    00000067 [SR] Beginning Verify and Repair transaction
2014-04-16 14:52:27, Info                  CSI    00000069 [SR] Verify complete
2014-04-16 14:52:28, Info                  CSI    0000006a [SR] Verifying 100 (0x00000064) components
2014-04-16 14:52:28, Info                  CSI    0000006b [SR] Beginning Verify and Repair transaction
2014-04-16 14:52:35, Info                  CSI    0000006d [SR] Verify complete
2014-04-16 14:52:36, Info                  CSI    0000006e [SR] Verifying 100 (0x00000064) components
2014-04-16 14:52:36, Info                  CSI    0000006f [SR] Beginning Verify and Repair transaction
2014-04-16 14:52:42, Info                  CSI    00000071 [SR] Verify complete
2014-04-16 14:52:43, Info                  CSI    00000072 [SR] Verifying 100 (0x00000064) components
2014-04-16 14:52:43, Info                  CSI    00000073 [SR] Beginning Verify and Repair transaction
2014-04-16 14:52:53, Info                  CSI    00000076 [SR] Verify complete
2014-04-16 14:52:54, Info                  CSI    00000077 [SR] Verifying 100 (0x00000064) components
2014-04-16 14:52:54, Info                  CSI    00000078 [SR] Beginning Verify and Repair transaction
2014-04-16 14:53:02, Info                  CSI    0000007b [SR] Verify complete
2014-04-16 14:53:03, Info                  CSI    0000007c [SR] Verifying 100 (0x00000064) components
2014-04-16 14:53:03, Info                  CSI    0000007d [SR] Beginning Verify and Repair transaction
2014-04-16 14:53:10, Info                  CSI    0000007f [SR] Verify complete
2014-04-16 14:53:12, Info                  CSI    00000080 [SR] Verifying 100 (0x00000064) components
2014-04-16 14:53:12, Info                  CSI    00000081 [SR] Beginning Verify and Repair transaction
2014-04-16 14:53:25, Info                  CSI    00000088 [SR] Verify complete
2014-04-16 14:53:26, Info                  CSI    00000089 [SR] Verifying 100 (0x00000064) components
2014-04-16 14:53:26, Info                  CSI    0000008a [SR] Beginning Verify and Repair transaction
2014-04-16 14:53:38, Info                  CSI    0000008f [SR] Verify complete
2014-04-16 14:53:39, Info                  CSI    00000090 [SR] Verifying 100 (0x00000064) components
2014-04-16 14:53:39, Info                  CSI    00000091 [SR] Beginning Verify and Repair transaction
2014-04-16 14:53:48, Info                  CSI    00000093 [SR] Verify complete
2014-04-16 14:53:49, Info                  CSI    00000094 [SR] Verifying 100 (0x00000064) components
2014-04-16 14:53:49, Info                  CSI    00000095 [SR] Beginning Verify and Repair transaction
2014-04-16 14:53:57, Info                  CSI    00000097 [SR] Verify complete
2014-04-16 14:53:58, Info                  CSI    00000098 [SR] Verifying 100 (0x00000064) components
2014-04-16 14:53:58, Info                  CSI    00000099 [SR] Beginning Verify and Repair transaction
2014-04-16 14:54:08, Info                  CSI    0000009b [SR] Verify complete
2014-04-16 14:54:09, Info                  CSI    0000009c [SR] Verifying 100 (0x00000064) components
2014-04-16 14:54:09, Info                  CSI    0000009d [SR] Beginning Verify and Repair transaction
2014-04-16 14:54:24, Info                  CSI    000000a1 [SR] Verify complete
2014-04-16 14:54:25, Info                  CSI    000000a2 [SR] Verifying 100 (0x00000064) components
2014-04-16 14:54:25, Info                  CSI    000000a3 [SR] Beginning Verify and Repair transaction
2014-04-16 14:54:47, Info                  CSI    000000a5 [SR] Verify complete
2014-04-16 14:54:48, Info                  CSI    000000a6 [SR] Verifying 100 (0x00000064) components
2014-04-16 14:54:48, Info                  CSI    000000a7 [SR] Beginning Verify and Repair transaction
2014-04-16 14:55:14, Info                  CSI    000000a9 [SR] Verify complete
2014-04-16 14:55:14, Info                  CSI    000000aa [SR] Verifying 100 (0x00000064) components
2014-04-16 14:55:14, Info                  CSI    000000ab [SR] Beginning Verify and Repair transaction
2014-04-16 14:55:25, Info                  CSI    000000ad [SR] Verify complete
2014-04-16 14:55:26, Info                  CSI    000000ae [SR] Verifying 100 (0x00000064) components
2014-04-16 14:55:26, Info                  CSI    000000af [SR] Beginning Verify and Repair transaction
2014-04-16 14:55:30, Info                  CSI    000000b1 [SR] Verify complete
2014-04-16 14:55:30, Info                  CSI    000000b2 [SR] Verifying 100 (0x00000064) components
2014-04-16 14:55:30, Info                  CSI    000000b3 [SR] Beginning Verify and Repair transaction
2014-04-16 14:55:35, Info                  CSI    000000b5 [SR] Verify complete
2014-04-16 14:55:35, Info                  CSI    000000b6 [SR] Verifying 100 (0x00000064) components
2014-04-16 14:55:35, Info                  CSI    000000b7 [SR] Beginning Verify and Repair transaction
2014-04-16 14:55:57, Info                  CSI    000000d5 [SR] Verify complete
2014-04-16 14:55:58, Info                  CSI    000000d6 [SR] Verifying 100 (0x00000064) components
2014-04-16 14:55:58, Info                  CSI    000000d7 [SR] Beginning Verify and Repair transaction
2014-04-16 14:56:02, Info                  CSI    000000d9 [SR] Verify complete
2014-04-16 14:56:03, Info                  CSI    000000da [SR] Verifying 100 (0x00000064) components
2014-04-16 14:56:03, Info                  CSI    000000db [SR] Beginning Verify and Repair transaction
2014-04-16 14:56:10, Info                  CSI    000000dd [SR] Verify complete
2014-04-16 14:56:11, Info                  CSI    000000de [SR] Verifying 100 (0x00000064) components
2014-04-16 14:56:11, Info                  CSI    000000df [SR] Beginning Verify and Repair transaction
2014-04-16 14:56:17, Info                  CSI    000000e1 [SR] Verify complete
2014-04-16 14:56:18, Info                  CSI    000000e2 [SR] Verifying 100 (0x00000064) components
2014-04-16 14:56:18, Info                  CSI    000000e3 [SR] Beginning Verify and Repair transaction
2014-04-16 14:56:31, Info                  CSI    000000e5 [SR] Verify complete
2014-04-16 14:56:32, Info                  CSI    000000e6 [SR] Verifying 100 (0x00000064) components
2014-04-16 14:56:32, Info                  CSI    000000e7 [SR] Beginning Verify and Repair transaction
2014-04-16 14:56:46, Info                  CSI    000000ea [SR] Verify complete
2014-04-16 14:56:47, Info                  CSI    000000eb [SR] Verifying 100 (0x00000064) components
2014-04-16 14:56:47, Info                  CSI    000000ec [SR] Beginning Verify and Repair transaction
2014-04-16 14:56:51, Info                  CSI    000000ee [SR] Verify complete
2014-04-16 14:56:52, Info                  CSI    000000ef [SR] Verifying 100 (0x00000064) components
2014-04-16 14:56:52, Info                  CSI    000000f0 [SR] Beginning Verify and Repair transaction
2014-04-16 14:57:04, Info                  CSI    000000f2 [SR] Verify complete
2014-04-16 14:57:05, Info                  CSI    000000f3 [SR] Verifying 100 (0x00000064) components
2014-04-16 14:57:05, Info                  CSI    000000f4 [SR] Beginning Verify and Repair transaction
2014-04-16 14:57:14, Info                  CSI    000000f6 [SR] Verify complete
2014-04-16 14:57:15, Info                  CSI    000000f7 [SR] Verifying 100 (0x00000064) components
2014-04-16 14:57:15, Info                  CSI    000000f8 [SR] Beginning Verify and Repair transaction
2014-04-16 14:57:25, Info                  CSI    000000fa [SR] Verify complete
2014-04-16 14:57:26, Info                  CSI    000000fb [SR] Verifying 100 (0x00000064) components
2014-04-16 14:57:26, Info                  CSI    000000fc [SR] Beginning Verify and Repair transaction
2014-04-16 14:57:48, Info                  CSI    00000121 [SR] Verify complete
2014-04-16 14:57:48, Info                  CSI    00000122 [SR] Verifying 100 (0x00000064) components
2014-04-16 14:57:48, Info                  CSI    00000123 [SR] Beginning Verify and Repair transaction
2014-04-16 14:58:05, Info                  CSI    00000125 [SR] Verify complete
2014-04-16 14:58:06, Info                  CSI    00000126 [SR] Verifying 100 (0x00000064) components
2014-04-16 14:58:06, Info                  CSI    00000127 [SR] Beginning Verify and Repair transaction
2014-04-16 14:58:49, Info                  CSI    00000129 [SR] Verify complete
2014-04-16 14:58:50, Info                  CSI    0000012a [SR] Verifying 100 (0x00000064) components
2014-04-16 14:58:50, Info                  CSI    0000012b [SR] Beginning Verify and Repair transaction
2014-04-16 14:59:01, Info                  CSI    0000012d [SR] Verify complete
2014-04-16 14:59:02, Info                  CSI    0000012e [SR] Verifying 100 (0x00000064) components
2014-04-16 14:59:02, Info                  CSI    0000012f [SR] Beginning Verify and Repair transaction
2014-04-16 14:59:17, Info                  CSI    00000131 [SR] Verify complete
2014-04-16 14:59:18, Info                  CSI    00000132 [SR] Verifying 100 (0x00000064) components
2014-04-16 14:59:18, Info                  CSI    00000133 [SR] Beginning Verify and Repair transaction
2014-04-16 14:59:31, Info                  CSI    00000135 [SR] Verify complete
2014-04-16 14:59:32, Info                  CSI    00000136 [SR] Verifying 100 (0x00000064) components
2014-04-16 14:59:32, Info                  CSI    00000137 [SR] Beginning Verify and Repair transaction
2014-04-16 14:59:40, Info                  CSI    00000139 [SR] Verify complete
2014-04-16 14:59:41, Info                  CSI    0000013a [SR] Verifying 100 (0x00000064) components
2014-04-16 14:59:41, Info                  CSI    0000013b [SR] Beginning Verify and Repair transaction
2014-04-16 14:59:50, Info                  CSI    0000013e [SR] Verify complete
2014-04-16 14:59:51, Info                  CSI    0000013f [SR] Verifying 100 (0x00000064) components
2014-04-16 14:59:51, Info                  CSI    00000140 [SR] Beginning Verify and Repair transaction
2014-04-16 15:00:22, Info                  CSI    00000142 [SR] Verify complete
2014-04-16 15:00:22, Info                  CSI    00000143 [SR] Verifying 100 (0x00000064) components
2014-04-16 15:00:22, Info                  CSI    00000144 [SR] Beginning Verify and Repair transaction
2014-04-16 15:00:38, Info                  CSI    00000146 [SR] Verify complete
2014-04-16 15:00:39, Info                  CSI    00000147 [SR] Verifying 100 (0x00000064) components
2014-04-16 15:00:39, Info                  CSI    00000148 [SR] Beginning Verify and Repair transaction
2014-04-16 15:00:55, Info                  CSI    0000014a [SR] Verify complete
2014-04-16 15:00:56, Info                  CSI    0000014b [SR] Verifying 100 (0x00000064) components
2014-04-16 15:00:56, Info                  CSI    0000014c [SR] Beginning Verify and Repair transaction
2014-04-16 15:01:04, Info                  CSI    0000014e [SR] Cannot repair member file [l:24{12}]"settings.ini" of Microsoft-Windows-Sidebar, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2014-04-16 15:01:08, Info                  CSI    00000150 [SR] Cannot repair member file [l:24{12}]"settings.ini" of Microsoft-Windows-Sidebar, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2014-04-16 15:01:08, Info                  CSI    00000151 [SR] This component was referenced by [l:158{79}]"Package_16_for_KB948465~31bf3856ad364e35~x86~~6.0.1.18005.948465-49_neutral_GDR"
2014-04-16 15:01:21, Info                  CSI    00000153 [SR] Verify complete
2014-04-16 15:01:22, Info                  CSI    00000154 [SR] Verifying 100 (0x00000064) components
2014-04-16 15:01:22, Info                  CSI    00000155 [SR] Beginning Verify and Repair transaction
2014-04-16 15:01:32, Info                  CSI    00000157 [SR] Verify complete
2014-04-16 15:01:32, Info                  CSI    00000158 [SR] Verifying 100 (0x00000064) components
2014-04-16 15:01:32, Info                  CSI    00000159 [SR] Beginning Verify and Repair transaction
2014-04-16 15:01:41, Info                  CSI    0000015c [SR] Verify complete
2014-04-16 15:01:42, Info                  CSI    0000015d [SR] Verifying 100 (0x00000064) components
2014-04-16 15:01:42, Info                  CSI    0000015e [SR] Beginning Verify and Repair transaction
2014-04-16 15:01:51, Info                  CSI    00000160 [SR] Verify complete
2014-04-16 15:01:52, Info                  CSI    00000161 [SR] Verifying 100 (0x00000064) components
2014-04-16 15:01:52, Info                  CSI    00000162 [SR] Beginning Verify and Repair transaction
2014-04-16 15:02:00, Info                  CSI    00000164 [SR] Verify complete
2014-04-16 15:02:01, Info                  CSI    00000165 [SR] Verifying 100 (0x00000064) components
2014-04-16 15:02:01, Info                  CSI    00000166 [SR] Beginning Verify and Repair transaction
2014-04-16 15:02:12, Info                  CSI    00000168 [SR] Verify complete
2014-04-16 15:02:13, Info                  CSI    00000169 [SR] Verifying 100 (0x00000064) components
2014-04-16 15:02:13, Info                  CSI    0000016a [SR] Beginning Verify and Repair transaction
2014-04-16 15:02:26, Info                  CSI    0000016f [SR] Verify complete
2014-04-16 15:02:27, Info                  CSI    00000170 [SR] Verifying 100 (0x00000064) components
2014-04-16 15:02:27, Info                  CSI    00000171 [SR] Beginning Verify and Repair transaction
2014-04-16 15:02:36, Info                  CSI    00000172 [SR] Repairing corrupted file [ml:58{29},l:56{28}]"\??\C:\Windows\system32\wbem"\[l:42{21}]"Wdf01000Uninstall.mof" from store
2014-04-16 15:02:36, Info                  CSI    00000173 [SR] Repairing corrupted file [ml:58{29},l:56{28}]"\??\C:\Windows\system32\wbem"\[l:24{12}]"Wdf01000.mof" from store
2014-04-16 15:02:38, Info                  CSI    00000175 [SR] Verify complete
2014-04-16 15:02:39, Info                  CSI    00000176 [SR] Verifying 100 (0x00000064) components
2014-04-16 15:02:39, Info                  CSI    00000177 [SR] Beginning Verify and Repair transaction
2014-04-16 15:02:54, Info                  CSI    00000179 [SR] Verify complete
2014-04-16 15:02:55, Info                  CSI    0000017a [SR] Verifying 100 (0x00000064) components
2014-04-16 15:02:55, Info                  CSI    0000017b [SR] Beginning Verify and Repair transaction
2014-04-16 15:03:04, Info                  CSI    0000017d [SR] Verify complete
2014-04-16 15:03:05, Info                  CSI    0000017e [SR] Verifying 100 (0x00000064) components
2014-04-16 15:03:05, Info                  CSI    0000017f [SR] Beginning Verify and Repair transaction
2014-04-16 15:03:10, Info                  CSI    00000181 [SR] Verify complete
2014-04-16 15:03:11, Info                  CSI    00000182 [SR] Verifying 100 (0x00000064) components
2014-04-16 15:03:11, Info                  CSI    00000183 [SR] Beginning Verify and Repair transaction
2014-04-16 15:03:24, Info                  CSI    00000185 [SR] Verify complete
2014-04-16 15:03:25, Info                  CSI    00000186 [SR] Verifying 100 (0x00000064) components
2014-04-16 15:03:25, Info                  CSI    00000187 [SR] Beginning Verify and Repair transaction
2014-04-16 15:03:34, Info                  CSI    00000189 [SR] Verify complete
2014-04-16 15:03:34, Info                  CSI    0000018a [SR] Verifying 100 (0x00000064) components
2014-04-16 15:03:34, Info                  CSI    0000018b [SR] Beginning Verify and Repair transaction
2014-04-16 15:03:44, Info                  CSI    0000018d [SR] Verify complete
2014-04-16 15:03:45, Info                  CSI    0000018e [SR] Verifying 100 (0x00000064) components
2014-04-16 15:03:45, Info                  CSI    0000018f [SR] Beginning Verify and Repair transaction
2014-04-16 15:04:13, Info                  CSI    00000191 [SR] Verify complete
2014-04-16 15:04:14, Info                  CSI    00000192 [SR] Verifying 100 (0x00000064) components
2014-04-16 15:04:14, Info                  CSI    00000193 [SR] Beginning Verify and Repair transaction
2014-04-16 15:04:22, Info                  CSI    00000195 [SR] Verify complete
2014-04-16 15:04:22, Info                  CSI    00000196 [SR] Verifying 100 (0x00000064) components
2014-04-16 15:04:22, Info                  CSI    00000197 [SR] Beginning Verify and Repair transaction
2014-04-16 15:04:30, Info                  CSI    00000199 [SR] Verify complete
2014-04-16 15:04:31, Info                  CSI    0000019a [SR] Verifying 93 (0x0000005d) components
2014-04-16 15:04:31, Info                  CSI    0000019b [SR] Beginning Verify and Repair transaction
2014-04-16 15:04:43, Info                  CSI    000001a6 [SR] Verify complete
2014-04-16 15:04:43, Info                  CSI    000001a7 [SR] Repairing 2 components
2014-04-16 15:04:43, Info                  CSI    000001a8 [SR] Beginning Verify and Repair transaction
2014-04-16 15:04:43, Info                  CSI    000001aa [SR] Cannot repair member file [l:24{12}]"settings.ini" of Microsoft-Windows-Sidebar, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2014-04-16 15:04:43, Info                  CSI    000001ab [SR] Repairing corrupted file [ml:58{29},l:56{28}]"\??\C:\Windows\system32\wbem"\[l:42{21}]"Wdf01000Uninstall.mof" from store
2014-04-16 15:04:43, Info                  CSI    000001ac [SR] Repairing corrupted file [ml:58{29},l:56{28}]"\??\C:\Windows\system32\wbem"\[l:24{12}]"Wdf01000.mof" from store
2014-04-16 15:04:43, Info                  CSI    000001ae [SR] Cannot repair member file [l:24{12}]"settings.ini" of Microsoft-Windows-Sidebar, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2014-04-16 15:04:43, Info                  CSI    000001af [SR] This component was referenced by [l:158{79}]"Package_16_for_KB948465~31bf3856ad364e35~x86~~6.0.1.18005.948465-49_neutral_GDR"
2014-04-16 15:04:43, Info                  CSI    000001b1 [SR] Repair complete
2014-04-16 15:04:43, Info                  CSI    000001b2 [SR] Committing transaction
2014-04-16 15:04:44, Info                  CSI    000001b6 [SR] Verify and Repair Transaction completed. All files and registry keys listed in this transaction  have been successfully repaired

[godawgs]

Click here for an explination of the Windows Sidebar. But Microsoft discovered a security vulnerability in the Sidebar in 2012 and have been adising everyone to disable it. Yours is disabled.

The only other corrupted files that SFC found it repaired. If you're still having the slow boot up issue, it might be the AVG program. Let's disable AVG and see if that helps with the boot up time.

Disable the Resident Shield feature in AVG 2013

To disable this feature under AVG:

• Double-click on the AVG tray icon to access the main interface.
• Click Tools > Advanced Settings > Antivirus > Resident Shield.
• Uncheck the box beside Enable Resident Shield.
  
• Click on Apply and then on OK to validate.

Now reboot the system and see if the start up time is lessened. DON'T forget to re-enable the Resident Shield.

[bigtrucks]

Ok. I did that and no difference. What about programs running in the back ground. I know it would slow the pc down when starting up but would it cause slowness, freezing and/or pixeling when running videos? I have 11 items in my task bar that pop up at start.

1. Defrag

2.Skype

3.a back gadget up of pics by Google

4.My portable camera(none came with lappy)

5. AVG

6 Power Icon

7Connection Icon

8 Volume Control

9 Time

10 IE Icon

11 Show desk Icon

[godawgs]

Get  me a fresh OTL scan and we'll see what it shows as loading at startup.
 
Run OTL again and click the Quick Scan button. Post the log it produces in your next reply.

[bigtrucks]

OTL logfile created on: 4/17/2014 7:17:26 PM - Run 3
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Owner\Desktop
Windows Vista Home Basic Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
 
2.87 Gb Total Physical Memory | 1.30 Gb Available Physical Memory | 45.39% Memory free
5.97 Gb Paging File | 4.32 Gb Available in Paging File | 72.43% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 140.37 Gb Total Space | 63.45 Gb Free Space | 45.20% Space Free | Partition Type: NTFS
 
Computer Name: GERTS-PC | User Name: Owner | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2014/04/04 14:14:38 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Owner\Desktop\OTL.exe
PRC - [2014/04/03 11:31:12 | 000,295,512 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Real\RealPlayer\Update\realsched.exe
PRC - [2014/03/29 09:37:20 | 000,228,744 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Update\1.3.23.9\GoogleCrashHandler.exe
PRC - [2014/03/26 12:08:50 | 003,701,064 | ---- | M] (Google Inc.) -- C:\Users\Owner\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe
PRC - [2014/03/18 13:01:51 | 000,275,568 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2013/12/18 14:42:32 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2013/10/09 10:58:16 | 003,275,136 | ---- | M] (Skype Technologies S.A.) -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
PRC - [2013/08/14 15:19:58 | 000,233,048 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\RealNetworks\RealDownloader\recordingmanager.exe
PRC - [2013/08/14 15:19:24 | 000,039,056 | ---- | M] () -- C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
PRC - [2013/07/03 04:32:44 | 000,660,184 | ---- | M] (Secunia) -- C:\Program Files\Secunia\PSI\sua.exe
PRC - [2012/12/07 15:16:00 | 000,202,328 | ---- | M] (Kaspersky Lab ZAO) -- C:\Program Files\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe
PRC - [2012/09/08 09:00:09 | 000,116,608 | ---- | M] (SUPERAntiSpyware.com) -- C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
PRC - [2012/08/01 04:48:54 | 002,345,592 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgtray.exe
PRC - [2012/01/31 16:02:52 | 007,391,072 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe
PRC - [2012/01/18 02:44:52 | 000,450,848 | ---- | M] (Logitech Inc.) -- C:\Program Files\Common Files\LogiShrd\LVMVFM\UMVPFSrv.exe
PRC - [2011/11/11 14:08:06 | 000,205,336 | ---- | M] (Logitech Inc.) -- C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe
PRC - [2011/09/09 03:10:56 | 001,082,208 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgnsx.exe
PRC - [2011/08/18 01:33:26 | 000,659,296 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgrsx.exe
PRC - [2011/05/23 14:13:04 | 000,657,248 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgchsvx.exe
PRC - [2011/03/28 03:00:52 | 000,351,072 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgcsrvx.exe
PRC - [2011/03/16 16:05:20 | 001,025,888 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgemcx.exe
PRC - [2011/02/11 13:45:54 | 001,295,736 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\Toshiba\TOSHIBA Service Station\ToshibaServiceStation.exe
PRC - [2011/02/11 13:45:52 | 000,054,136 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\Toshiba\TOSHIBA Service Station\TMachInfo.exe
PRC - [2011/02/10 07:55:18 | 001,148,256 | ---- | M] () -- C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSMonitor.exe
PRC - [2011/02/08 05:33:42 | 000,269,520 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgwdsvc.exe
PRC - [2009/04/10 23:27:38 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009/01/26 16:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) -- C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
PRC - [2008/07/18 23:39:30 | 000,083,312 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe
PRC - [2008/05/09 14:49:30 | 000,716,800 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\Toshiba\FlashCards\TCrdMain.exe
PRC - [2008/04/17 03:19:48 | 000,040,960 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\Toshiba\ConfigFree\CFSvcs.exe
PRC - [2008/04/15 20:54:42 | 000,354,840 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
PRC - [2008/04/15 20:54:40 | 000,178,712 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
PRC - [2008/04/08 18:14:50 | 006,037,504 | ---- | M] (Realtek Semiconductor) -- C:\Windows\RtHDVCpl.exe
PRC - [2008/02/06 16:52:52 | 000,431,456 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\Toshiba\Power Saver\TPwrMain.exe
PRC - [2008/02/06 16:52:40 | 000,431,456 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe
PRC - [2007/12/03 20:03:52 | 000,126,976 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\Toshiba\SMARTLogService\TosIPCSrv.exe
PRC - [2007/11/21 20:23:32 | 000,129,632 | ---- | M] (TOSHIBA Corporation) -- C:\Windows\System32\TODDSrv.exe
PRC - [2006/08/23 19:39:48 | 000,049,152 | ---- | M] (Ulead Systems, Inc.) -- C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2014/03/26 12:02:26 | 003,305,472 | ---- | M] () -- C:\Users\Owner\AppData\Local\Programs\Google\Google+ Auto Backup\gpuploader_i18n.dll
MOD - [2014/03/18 13:01:50 | 003,642,480 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2014/02/14 12:54:51 | 000,212,992 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\73726634ae4a00a21279a6a66b081301\System.ServiceProcess.ni.dll
MOD - [2014/02/14 12:53:52 | 000,978,944 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\d17ceca243fabda73eefb21d9bd072df\System.Configuration.ni.dll
MOD - [2014/02/14 12:49:30 | 005,462,016 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\f87e71868aedbc6c4e8fe7160d17c4ab\System.Xml.ni.dll
MOD - [2014/02/14 12:49:12 | 012,434,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\d2b605fc7deda872727d1ed37710420e\System.Windows.Forms.ni.dll
MOD - [2014/02/14 12:49:02 | 001,593,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\8e6265a54260bddfc05951e764f5bc48\System.Drawing.ni.dll
MOD - [2014/02/14 12:47:56 | 007,977,984 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\957628d9dd7b3bf370a56dca7835a997\System.ni.dll
MOD - [2014/02/14 12:47:45 | 011,497,984 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\694a37a84dee2cd2609a1dfab27c0433\mscorlib.ni.dll
MOD - [2012/12/07 15:15:16 | 007,422,392 | ---- | M] () -- C:\Program Files\Kaspersky Lab\Kaspersky Security Scan 2.0\qtgui4.dll
MOD - [2012/12/07 15:15:12 | 002,126,264 | ---- | M] () -- C:\Program Files\Kaspersky Lab\Kaspersky Security Scan 2.0\qtcore4.dll
MOD - [2012/12/07 15:15:12 | 001,270,200 | ---- | M] () -- C:\Program Files\Kaspersky Lab\Kaspersky Security Scan 2.0\qtscript4.dll
MOD - [2012/12/07 15:15:12 | 000,192,952 | ---- | M] () -- C:\Program Files\Kaspersky Lab\Kaspersky Security Scan 2.0\qtsql4.dll
MOD - [2012/12/07 15:15:10 | 002,453,944 | ---- | M] () -- C:\Program Files\Kaspersky Lab\Kaspersky Security Scan 2.0\qtdeclarative4.dll
MOD - [2012/12/07 15:15:10 | 000,795,064 | ---- | M] () -- C:\Program Files\Kaspersky Lab\Kaspersky Security Scan 2.0\qtnetwork4.dll
MOD - [2012/01/01 03:48:26 | 008,007,680 | ---- | M] () -- C:\Windows\assembly\GAC\Microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.mshtml.dll
MOD - [2011/11/11 14:08:18 | 007,956,504 | ---- | M] () -- C:\Program Files\Logitech\LWS\Webcam Software\QTGui4.dll
MOD - [2011/11/11 14:08:18 | 000,342,552 | ---- | M] () -- C:\Program Files\Logitech\LWS\Webcam Software\QTXml4.dll
MOD - [2011/11/11 14:08:18 | 000,128,536 | ---- | M] () -- C:\Program Files\Logitech\LWS\Webcam Software\ImageFormats\QJpeg4.dll
MOD - [2011/11/11 14:08:18 | 000,029,208 | ---- | M] () -- C:\Program Files\Logitech\LWS\Webcam Software\ImageFormats\QGif4.dll
MOD - [2011/11/11 14:08:06 | 002,145,304 | ---- | M] () -- C:\Program Files\Logitech\LWS\Webcam Software\QTCore4.dll
MOD - [2011/02/10 07:55:18 | 001,148,256 | ---- | M] () -- C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSMonitor.exe
MOD - [2010/03/15 11:28:22 | 000,141,824 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll
MOD - [2008/03/06 13:14:54 | 005,121,912 | ---- | M] () -- C:\Program Files\Toshiba\FlashCards\BlackPng.dll
MOD - [2007/12/25 15:03:40 | 000,015,184 | ---- | M] () -- C:\Program Files\Toshiba\PCDiag\NotifyPCD.dll
MOD - [2007/12/15 00:40:00 | 000,090,112 | ---- | M] () -- C:\Program Files\Toshiba\FlashCards\TWarnMsg\TWarnMsg.dll
MOD - [2006/12/01 20:55:42 | 000,009,216 | ---- | M] () -- C:\Program Files\Toshiba\TBS\NotifyTBS.dll
MOD - [2006/10/10 14:44:16 | 000,009,728 | ---- | M] () -- C:\Program Files\Toshiba\TOSHIBA Assist\NotifyX.dll
MOD - [2006/10/07 14:57:04 | 000,053,248 | ---- | M] () -- C:\Program Files\Toshiba\TOSHIBA Disc Creator\NotifyTDC.dll
 
 
========== Services (SafeList) ==========
 
SRV - File not found [Auto | Running] -- C:\Program Files\Spybot -- (SBSDWSCService)
SRV - File not found [Auto | Stopped] -- C:\ProgramData\Geek Squad\Customizer\GSRestartSvc.exe -- (GSRestartSvc)
SRV - [2014/03/18 13:01:50 | 000,119,408 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013/12/18 14:42:32 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2013/10/09 10:58:16 | 003,275,136 | ---- | M] (Skype Technologies S.A.) [Auto | Running] -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe -- (Skype C2C Service)
SRV - [2013/09/05 10:34:30 | 000,171,680 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2013/08/14 15:19:24 | 000,039,056 | ---- | M] () [Auto | Running] -- C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe -- (RealNetworks Downloader Resolver Service)
SRV - [2013/07/03 04:32:44 | 001,228,504 | ---- | M] (Secunia) [On_Demand | Stopped] -- C:\Program Files\Secunia\PSI\psia.exe -- (Secunia PSI Agent)
SRV - [2013/07/03 04:32:44 | 000,660,184 | ---- | M] (Secunia) [Auto | Running] -- C:\Program Files\Secunia\PSI\sua.exe -- (Secunia Update Agent)
SRV - [2012/12/07 15:16:00 | 000,202,328 | ---- | M] (Kaspersky Lab ZAO) [Auto | Running] -- C:\Program Files\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe -- (KSS)
SRV - [2012/09/08 09:00:09 | 000,116,608 | ---- | M] (SUPERAntiSpyware.com) [Auto | Running] -- C:\Program Files\SUPERAntiSpyware\SASCORE.EXE -- (!SASCORE)
SRV - [2012/01/31 16:02:52 | 007,391,072 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe -- (AVGIDSAgent)
SRV - [2012/01/18 02:44:52 | 000,450,848 | ---- | M] (Logitech Inc.) [Auto | Running] -- C:\Program Files\Common Files\LogiShrd\LVMVFM\UMVPFSrv.exe -- (UMVPFSrv)
SRV - [2011/02/11 13:45:52 | 000,054,136 | ---- | M] (TOSHIBA Corporation) [On_Demand | Running] -- C:\Program Files\Toshiba\TOSHIBA Service Station\TMachInfo.exe -- (TMachInfo)
SRV - [2011/02/08 05:33:42 | 000,269,520 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG10\avgwdsvc.exe -- (avgwd)
SRV - [2008/07/18 23:39:30 | 000,083,312 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Program Files\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe -- (TNaviSrv)
SRV - [2008/05/28 19:20:16 | 000,164,600 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files\TOSHIBA Games\TOSHIBA Game Console\GameConsoleService.exe -- (GameConsoleService)
SRV - [2008/04/17 03:19:48 | 000,040,960 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Program Files\Toshiba\ConfigFree\CFSvcs.exe -- (ConfigFree Service)
SRV - [2008/04/15 20:54:42 | 000,354,840 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON)
SRV - [2008/02/06 16:52:40 | 000,431,456 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe -- (TosCoSrv)
SRV - [2008/01/20 22:33:00 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007/12/03 20:03:52 | 000,126,976 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Program Files\Toshiba\SMARTLogService\TosIPCSrv.exe -- (TOSHIBA SMART Log Service)
SRV - [2007/11/21 20:23:32 | 000,129,632 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Windows\System32\TODDSrv.exe -- (TODDSrv)
SRV - [2006/08/23 19:39:48 | 000,049,152 | ---- | M] (Ulead Systems, Inc.) [Auto | Running] -- C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe -- (UleadBurningHelper)
 
 
========== Driver Services (SafeList) ==========
 
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\Drivers\usbaapl.sys -- (USBAAPL)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\SYSPREP\Drivers\ioport.sys -- (IO_Memory)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\Drivers\ANDROIDUSB.sys -- (HTCAND32)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\Drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV - [2013/12/24 10:40:32 | 000,018,624 | ---- | M] (IObit) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\SmartDefragDriver.sys -- (SmartDefragDriver)
DRV - [2013/07/03 04:32:42 | 000,016,024 | ---- | M] (Secunia) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\psi_mf_x86.sys -- (PSI)
DRV - [2012/11/12 05:47:48 | 000,255,968 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\System32\drivers\avgldx86.sys -- (Avgldx86)
DRV - [2012/01/18 02:44:52 | 004,332,960 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lvuvc.sys -- (LVUVC)
DRV - [2012/01/18 02:44:28 | 000,312,096 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lvrs.sys -- (LVRS)
DRV - [2011/08/24 22:00:26 | 000,067,664 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL)
DRV - [2011/08/24 22:00:26 | 000,012,880 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS -- (SASDIFSV)
DRV - [2011/05/27 19:05:18 | 000,134,480 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AVGIDSDriver.sys -- (AVGIDSDriver)
DRV - [2011/04/05 00:59:56 | 000,297,168 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\System32\drivers\avgtdix.sys -- (Avgtdix)
DRV - [2011/03/16 16:03:20 | 000,032,592 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\System32\drivers\avgrkx86.sys -- (Avgrkx86)
DRV - [2011/03/01 14:25:18 | 000,034,896 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\System32\drivers\avgmfx86.sys -- (Avgmfx86)
DRV - [2011/02/22 08:12:38 | 000,022,992 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\AVGIDSEH.sys -- (AVGIDSEH)
DRV - [2011/02/10 07:53:30 | 000,028,624 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AVGIDSShim.sys -- (AVGIDSShim)
DRV - [2011/02/10 07:53:28 | 000,024,144 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AVGIDSFilter.sys -- (AVGIDSFilter)
DRV - [2010/06/23 09:21:32 | 000,259,176 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169)
DRV - [2010/03/23 19:49:43 | 000,012,872 | ---- | M] ( SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | On_Demand | Stopped] -- C:\Program Files\SUPERAntiSpyware\SASENUM.SYS -- (SASENUM)
DRV - [2009/06/10 06:52:58 | 000,347,648 | ---- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\RTL8187B.sys -- (RTL8187B)
DRV - [2008/07/18 21:52:16 | 000,279,376 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\tos_sps32.sys -- (tos_sps32)
DRV - [2008/01/20 22:32:47 | 000,016,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\WSDPrint.sys -- (WSDPrintDevice)
DRV - [2008/01/18 12:22:00 | 000,009,216 | ---- | M] (Inventec Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\sysprep\PEDRV.SYS -- (SVRPEDRV)
DRV - [2007/12/14 14:53:24 | 000,024,200 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tdcmdpst.sys -- (tdcmdpst)
DRV - [2007/11/09 17:00:52 | 000,023,640 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\TVALZ_O.SYS -- (TVALZ)
DRV - [2007/04/23 13:50:50 | 000,025,896 | ---- | M] (Windows ® Codename Longhorn DDK provider) [Kernel | System | Running] -- C:\Windows\System32\drivers\RtlProt.sys -- (RtlProt)
DRV - [2006/11/20 17:11:14 | 000,007,168 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\FwLnk.sys -- (FwLnk)
DRV - [2006/11/09 02:32:00 | 000,219,264 | ---- | M] (TOSHIBA CORPORATION) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\KR10I.sys -- (KR10I)
DRV - [2006/11/09 02:31:00 | 000,211,072 | ---- | M] (TOSHIBA CORPORATION) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\KR10N.sys -- (KR10N)
DRV - [2006/11/02 03:41:50 | 000,983,552 | ---- | M] (Agere Systems) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\AGRSM.sys -- (AgereSoftModem)
DRV - [2005/08/17 07:45:00 | 000,058,352 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sscdbus.sys -- (sscdbus)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co...=TSHB&bmod=TSHB
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{CDEC8529-F897-4AF6-BEDB-4AD135E7A1F0}: "URL" = http://www.google.co...ng}&rlz=1I7TSHB
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/webhp?nord=1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\..\SearchScopes,DefaultScope =
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.co...g}&sourceid=ie7
IE - HKCU\..\SearchScopes\{EE3CA59D-021E-4D77-818D-665E1F427912}: "URL" = http://search.yahoo....p={searchTerms}
IE - HKCU\..\SearchScopes\{F6D13F23-3892-492C-BEFA-72DF84283DB8}: "URL" = http://www.google.co...ie=utf8&oe=utf8
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
========== FireFox ==========
 
FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&ilc=12&type=902615"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.startup.homepage: "http://www.google.com/"
FF - prefs.js..extensions.enabledAddons: %7BDF153AFF-6948-45d7-AC98-4FC4AF8A08E2%7D:1.3.3
FF - prefs.js..extensions.enabledAddons: %7B27c60876-b5c9-4335-b4f3-52b26782220c%7D:0.9.4
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:28.0
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw_1204144.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Picasa2\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.51.2: C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.51.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=16.0.3.51: c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlchromebrowserrecordext;version=1.3.3: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlhtml5videoshim;version=1.3.3: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlpepperflashvideoshim;version=1.3.3: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=16.0.3.51: c:\program files\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF - HKLM\Software\MozillaPlugins\@realnetworks.com/npdlplugin;version=1: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Users\Owner\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O1DPlugin: C:\Users\Owner\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Owner\AppData\Local\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Owner\AppData\Local\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C:\Program Files\AVG\AVG10\Firefox4\ [2013/04/09 14:25:51 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013/09/02 08:16:09 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ [2013/09/02 08:16:09 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 28.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2014/03/18 13:01:28 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 28.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2014/04/03 11:31:51 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 28.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2014/03/18 13:01:28 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 28.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2014/04/03 11:31:51 | 000,000,000 | ---D | M]
 
[2012/01/10 11:56:02 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Owner\AppData\Roaming\Mozilla\Extensions
[2014/04/04 16:02:18 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\u2d28sdg.default\extensions
[2014/04/04 16:02:18 | 000,007,532 | ---- | M] () (No name found) -- C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\u2d28sdg.default\extensions\{27c60876-b5c9-4335-b4f3-52b26782220c}.xpi
[2013/06/21 15:32:48 | 000,000,904 | ---- | M] () -- C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\u2d28sdg.default\searchplugins\yahoo.xml
[2014/03/18 13:01:28 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2014/03/18 13:01:29 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2014/03/18 13:01:28 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions
[2014/03/18 13:01:28 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2014/03/18 13:01:52 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
File not found (No name found) -- C:\PROGRAM FILES\IOBIT APPS TOOLBAR\FF
[2013/09/02 08:16:09 | 000,000,000 | ---D | M] (RealDownloader) -- C:\PROGRAMDATA\REALNETWORKS\REALDOWNLOADER\BROWSERPLUGINS\FIREFOX\EXT
[2014/04/03 11:31:31 | 000,124,504 | ---- | M] (RealPlayer) -- C:\Program Files\mozilla firefox\plugins\nprpplugin.dll
 
O1 HOSTS File: ([2014/04/03 15:24:45 | 000,450,732 | R--- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1             localhost
O1 - Hosts: 127.0.0.1    www.007guard.com
O1 - Hosts: 127.0.0.1    007guard.com
O1 - Hosts: 127.0.0.1    008i.com
O1 - Hosts: 127.0.0.1    www.008k.com
O1 - Hosts: 127.0.0.1    008k.com
O1 - Hosts: 127.0.0.1    www.00hq.com
O1 - Hosts: 127.0.0.1    00hq.com
O1 - Hosts: 127.0.0.1    010402.com
O1 - Hosts: 127.0.0.1    www.032439.com
O1 - Hosts: 127.0.0.1    032439.com
O1 - Hosts: 127.0.0.1    www.0scan.com
O1 - Hosts: 127.0.0.1    0scan.com
O1 - Hosts: 127.0.0.1    1000gratisproben.com
O1 - Hosts: 127.0.0.1    www.1000gratisproben.com
O1 - Hosts: 127.0.0.1    1001namen.com
O1 - Hosts: 127.0.0.1    www.1001namen.com
O1 - Hosts: 127.0.0.1    100888290cs.com
O1 - Hosts: 127.0.0.1    www.100888290cs.com
O1 - Hosts: 127.0.0.1    www.100sexlinks.com
O1 - Hosts: 127.0.0.1    100sexlinks.com
O1 - Hosts: 127.0.0.1    10sek.com
O1 - Hosts: 127.0.0.1    www.10sek.com
O1 - Hosts: 127.0.0.1    www.1-2005-search.com
O1 - Hosts: 15474 more lines...
O2 - BHO: (RealNetworks Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O4 - HKLM..\Run: [00TCrdMain] C:\Program Files\Toshiba\FlashCards\TCrdMain.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG10\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [HSON] C:\Program Files\Toshiba\TBS\HSON.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
O4 - HKLM..\Run: [LWS] C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe (Logitech Inc.)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [TkBellExe] c:\program files\real\realplayer\Update\realsched.exe (RealNetworks, Inc.)
O4 - HKLM..\Run: [ToshibaServiceStation] C:\Program Files\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [TPwrMain] C:\Program Files\Toshiba\Power Saver\TPwrMain.exe (TOSHIBA Corporation)
O4 - HKCU..\Run: [Google+ Auto Backup] C:\Users\Owner\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe (Google Inc.)
O4 - HKCU..\Run: [KSS] C:\Program Files\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe (Kaspersky Lab ZAO)
O4 - Startup: C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote Table Of Contents.onetoc2 ()
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktopCleanupWizard = 1
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr (Google Inc.)
O9 - Extra Button: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files\ieSpell\iespell.dll (Red Egg Software)
O9 - Extra 'Tools' menuitem : ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files\ieSpell\iespell.dll (Red Egg Software)
O9 - Extra 'Tools' menuitem : ieSpell Options - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Program Files\ieSpell\iespell.dll (Red Egg Software)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: localhost ([]http in Local intranet)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 65.32.5.111 65.32.5.112
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0913D5A8-EAAD-4D04-821E-DF2C6404AAB0}: DhcpNameServer = 65.32.5.111 65.32.5.112
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{FE14A92E-9583-403E-B4A8-A6DBF19E6E91}: DhcpNameServer = 65.32.5.111 65.32.5.112
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG10\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - AppInit_DLLs: (c:\progra~1\google\google~1\goec62~1.dll) - c:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork3.dll (Google)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - (C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL) - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll (SUPERAntiSpyware.com)
O24 - Desktop WallPaper: C:\Users\Owner\Pictures\Picasa\My Froggies\IMG_0278.JPG
O24 - Desktop BackupWallPaper: C:\Users\Owner\Pictures\Picasa\My Froggies\IMG_0278.JPG
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 17:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (SmartDefragBootTime.exe)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2014/04/17 12:12:34 | 000,000,000 | ---D | C] -- C:\Users\Owner\Desktop\music
[2014/04/15 18:12:23 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Local\{74B62386-B10E-43FD-BED4-858E450B704C}
[2014/04/11 14:26:27 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kaspersky Security Scan
[2014/04/11 14:25:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Kaspersky Lab
[2014/04/11 14:25:24 | 000,000,000 | ---D | C] -- C:\Program Files\Kaspersky Lab
[2014/04/11 08:41:09 | 000,185,800 | ---- | C] (Лаборатория Касперского) -- C:\Users\Owner\Desktop\kss12.0.1.117abRU_EN_DE_FR_ES_IT_JA_PT_ZH_5203.exe
[2014/04/10 18:42:06 | 000,000,000 | ---D | C] -- C:\Program Files\ESET
[2014/04/10 18:37:58 | 002,347,384 | ---- | C] (ESET) -- C:\Users\Owner\Desktop\esetsmartinstaller_enu.exe
[2014/04/10 09:24:02 | 000,000,000 | ---D | C] -- C:\Windows\ERUNT
[2014/04/09 21:41:29 | 001,016,261 | ---- | C] (Thisisu) -- C:\Users\Owner\Desktop\JRT.exe
[2014/04/07 12:44:44 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2014/04/07 11:22:53 | 000,000,000 | ---D | C] -- C:\_OTL
[2014/04/06 10:15:01 | 000,000,000 | ---D | C] -- C:\Users\Owner\Desktop\OTL FILES
[2014/04/04 14:14:38 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Owner\Desktop\OTL.exe
[2014/04/03 11:32:07 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\xing shared
[2014/04/03 11:31:20 | 000,272,896 | ---- | C] (Progressive Networks) -- C:\Windows\System32\pncrt.dll
[2014/04/02 09:42:16 | 000,000,000 | ---D | C] -- C:\Users\Owner\Documents\Alex & Kari
[2014/03/27 21:18:58 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\Oracle
[2014/03/25 18:42:37 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup
[2014/03/25 18:42:35 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Local\Programs
[2010/03/10 17:19:04 | 001,146,184 | ---- | C] (Microsoft Corporation) -- C:\Users\Owner\wlsetup-web.exe
[2010/03/06 10:47:32 | 012,310,008 | ---- | C] (Google Inc.) -- C:\Users\Owner\picasa36-setup.exe
[1 C:\Program Files\*.tmp files -> C:\Program Files\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2014/04/17 19:27:03 | 000,000,418 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{1BA18A56-2D16-4B05-9EE9-81C1E25677F4}.job
[2014/04/17 18:44:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2014/04/17 18:41:06 | 000,000,908 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-260716111-4067551053-450213070-1000UA.job
[2014/04/17 17:42:53 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2014/04/17 17:42:53 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2014/04/17 15:01:56 | 000,488,013 | ---- | M] () -- C:\Windows\System32\drivers\AVG\iavichjg.avm
[2014/04/17 09:44:21 | 000,000,880 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2014/04/17 07:42:44 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2014/04/16 14:36:45 | 159,736,632 | ---- | M] () -- C:\Windows\System32\drivers\AVG\incavi.avm
[2014/04/16 00:40:00 | 000,000,856 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-260716111-4067551053-450213070-1000Core.job
[2014/04/15 23:13:11 | 000,092,192 | ---- | M] () -- C:\Users\Owner\Desktop\No Privacy IRS.jpg
[2014/04/14 23:00:15 | 000,000,416 | ---- | M] () -- C:\Windows\tasks\Defraggler Volume C Task.job
[2014/04/14 02:02:50 | 000,647,132 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2014/04/14 02:02:50 | 000,122,094 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2014/04/14 01:24:53 | 000,000,423 | -H-- | M] () -- C:\Users\Owner\Documents\.picasa.ini
[2014/04/13 00:31:45 | 000,987,448 | ---- | M] () -- C:\Users\Owner\Desktop\SecurityCheck.exe
[2014/04/12 19:18:51 | 000,000,904 | ---- | M] () -- C:\Users\Owner\Desktop\HtmlReport - Shortcut.lnk
[2014/04/11 14:26:11 | 000,000,965 | ---- | M] () -- C:\Users\Owner\Desktop\Kaspersky Security Scan.lnk
[2014/04/11 09:18:34 | 000,009,675 | ---- | M] () -- C:\Users\Owner\Desktop\T-Shirt.jpg
[2014/04/11 08:41:10 | 000,185,800 | ---- | M] (Лаборатория Касперского) -- C:\Users\Owner\Desktop\kss12.0.1.117abRU_EN_DE_FR_ES_IT_JA_PT_ZH_5203.exe
[2014/04/10 18:37:58 | 002,347,384 | ---- | M] (ESET) -- C:\Users\Owner\Desktop\esetsmartinstaller_enu.exe
[2014/04/09 21:41:30 | 001,016,261 | ---- | M] (Thisisu) -- C:\Users\Owner\Desktop\JRT.exe
[2014/04/06 11:14:33 | 001,426,178 | ---- | M] () -- C:\Users\Owner\Desktop\AdwCleaner.exe
[2014/04/04 20:25:49 | 000,185,344 | ---- | M] () -- C:\Users\Owner\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2014/04/04 14:14:38 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Owner\Desktop\OTL.exe
[2014/04/03 15:24:45 | 000,450,732 | R--- | M] () -- C:\Windows\System32\drivers\etc\hosts
[2014/04/03 11:33:13 | 000,000,847 | ---- | M] () -- C:\Users\Public\Desktop\RealPlayer.lnk
[2014/04/03 11:31:20 | 000,272,896 | ---- | M] (Progressive Networks) -- C:\Windows\System32\pncrt.dll
[2014/03/29 13:52:29 | 000,006,266 | ---- | M] () -- C:\Users\Owner\AppData\Roaming\wklnhst.dat
[2014/03/28 13:47:48 | 000,770,740 | ---- | M] () -- C:\Users\Owner\Documents\Scan001.pdf
[2014/03/27 21:42:22 | 000,015,872 | ---- | M] () -- C:\Users\Owner\Documents\Art Bonebrake-Medication Chart.xlr
[2014/03/27 18:47:50 | 000,022,873 | ---- | M] () -- C:\Users\Owner\Documents\Art Bonebrake-Medication Chart.rtf
[2014/03/27 17:53:25 | 000,015,360 | ---- | M] () -- C:\Users\Owner\Documents\Art Bonebrake-Medication Chart B.xlr
[1 C:\Program Files\*.tmp files -> C:\Program Files\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2014/04/15 23:13:10 | 000,092,192 | ---- | C] () -- C:\Users\Owner\Desktop\No Privacy IRS.jpg
[2014/04/13 00:31:44 | 000,987,448 | ---- | C] () -- C:\Users\Owner\Desktop\SecurityCheck.exe
[2014/04/12 19:18:51 | 000,000,904 | ---- | C] () -- C:\Users\Owner\Desktop\HtmlReport - Shortcut.lnk
[2014/04/11 14:26:27 | 000,000,965 | ---- | C] () -- C:\Users\Owner\Desktop\Kaspersky Security Scan.lnk
[2014/04/11 09:18:33 | 000,009,675 | ---- | C] () -- C:\Users\Owner\Desktop\T-Shirt.jpg
[2014/04/06 11:14:32 | 001,426,178 | ---- | C] () -- C:\Users\Owner\Desktop\AdwCleaner.exe
[2014/04/03 11:33:13 | 000,000,847 | ---- | C] () -- C:\Users\Public\Desktop\RealPlayer.lnk
[2014/03/28 14:46:22 | 000,770,740 | ---- | C] () -- C:\Users\Owner\Documents\Scan001.pdf
[2014/03/27 18:47:49 | 000,022,873 | ---- | C] () -- C:\Users\Owner\Documents\Art Bonebrake-Medication Chart.rtf
[2014/03/27 17:53:25 | 000,015,360 | ---- | C] () -- C:\Users\Owner\Documents\Art Bonebrake-Medication Chart B.xlr
[2014/03/27 11:30:50 | 000,015,872 | ---- | C] () -- C:\Users\Owner\Documents\Art Bonebrake-Medication Chart.xlr
[2013/09/26 07:43:35 | 000,268,968 | ---- | C] () -- C:\Windows\System32\sqlite3.dll
[2013/07/26 17:35:00 | 000,000,991 | ---- | C] () -- C:\Windows\wininit.ini
[2009/11/26 11:39:54 | 000,006,266 | ---- | C] () -- C:\Users\Owner\AppData\Roaming\wklnhst.dat
[2009/11/23 04:03:40 | 000,000,258 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2009/09/27 19:25:33 | 000,185,344 | ---- | C] () -- C:\Users\Owner\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
 
========== ZeroAccess Check ==========
 
[2006/11/02 08:51:16 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012/06/08 13:47:00 | 011,586,048 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009/04/10 23:28:20 | 000,614,912 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009/04/10 23:28:26 | 000,347,648 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
========== LOP Check ==========
 
[2011/07/27 14:15:16 | 000,000,000 | ---D | M] -- C:\Users\Owner\AppData\Roaming\.minecraft
[2011/10/25 15:44:09 | 000,000,000 | ---D | M] -- C:\Users\Owner\AppData\Roaming\Arkadium
[2010/07/15 17:25:17 | 000,000,000 | ---D | M] -- C:\Users\Owner\AppData\Roaming\Ascaron Entertainment
[2010/11/01 23:20:24 | 000,000,000 | ---D | M] -- C:\Users\Owner\AppData\Roaming\AVG10
[2009/11/23 11:45:25 | 000,000,000 | ---D | M] -- C:\Users\Owner\AppData\Roaming\AVG9
[2013/08/01 09:42:05 | 000,000,000 | ---D | M] -- C:\Users\Owner\AppData\Roaming\Blackboard
[2013/08/20 10:15:53 | 000,000,000 | ---D | M] -- C:\Users\Owner\AppData\Roaming\com.connectionsEducation.activityTracker
[2011/02/03 14:33:37 | 000,000,000 | ---D | M] -- C:\Users\Owner\AppData\Roaming\Elluminate
[2014/01/23 09:15:24 | 000,000,000 | ---D | M] -- C:\Users\Owner\AppData\Roaming\IObit
[2011/12/11 10:49:04 | 000,000,000 | ---D | M] -- C:\Users\Owner\AppData\Roaming\iShell
[2012/09/28 21:58:26 | 000,000,000 | ---D | M] -- C:\Users\Owner\AppData\Roaming\Leadertech
[2011/12/28 03:09:03 | 000,000,000 | ---D | M] -- C:\Users\Owner\AppData\Roaming\MusicNet
[2014/03/27 21:18:58 | 000,000,000 | ---D | M] -- C:\Users\Owner\AppData\Roaming\Oracle
[2010/08/26 02:38:46 | 000,000,000 | ---D | M] -- C:\Users\Owner\AppData\Roaming\Philipp Winterberg
[2013/07/27 12:08:41 | 000,000,000 | ---D | M] -- C:\Users\Owner\AppData\Roaming\Serif
[2013/11/26 13:15:16 | 000,000,000 | ---D | M] -- C:\Users\Owner\AppData\Roaming\Template
[2012/01/10 12:03:39 | 000,000,000 | ---D | M] -- C:\Users\Owner\AppData\Roaming\TOSHIBA
[2009/11/11 17:14:24 | 000,000,000 | ---D | M] -- C:\Users\Owner\AppData\Roaming\Ulead Systems
[2009/08/30 22:34:20 | 000,000,000 | ---D | M] -- C:\Users\Owner\AppData\Roaming\WildTangent
[2009/11/24 01:13:19 | 000,000,000 | ---D | M] -- C:\Users\Owner\AppData\Roaming\WinBatch
[2010/10/24 11:58:03 | 000,000,000 | ---D | M] -- C:\Users\Owner\AppData\Roaming\Windows Live Writer
 
========== Purity Check ==========
 
 
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 169 bytes -> C:\ProgramData\TEMP:177313FB
@Alternate Data Stream - 154 bytes -> C:\ProgramData\TEMP:B845F669
@Alternate Data Stream - 129 bytes -> C:\ProgramData\TEMP:91730504
@Alternate Data Stream - 115 bytes -> C:\ProgramData\TEMP:A8ADE5D8
@Alternate Data Stream - 103 bytes -> C:\ProgramData\TEMP:DFC5A2B2
@Alternate Data Stream - 100 bytes -> C:\ProgramData\TEMP:C31F31E6

< End of report >

[godawgs]

Open the Control Panel and click on Programs. The list of installed programs will populate.

Look for Kaspersky Security Scan and uninstall it.