[nofx1728]

I have Windows 7 Pro 64.  I haven't noticed any changes to my computer but over the last week it is becoming almost impossible to work on.  Normally I would just reformat and start from scratch, I want to get an SSD drive anyways for my boot drive.  But I can't find my windows disc so I'm stuck trying to solve this issue.

 

Processor - Intel Core i7-2600 CPU@ 3.4 ghz

Memory - 16GB

GPU - NVIDIA GeForce GTX 570

 

I have 2 RAID setups on the computer and a standalone boot drive.

 

I've run CCleaner.  I've defrag hard drive.  I've run Malwarebytes.  I changed antivirus from AVG to Avira.

 

I have my processor overclocked to 4400mhz.

 

I'm running at 21-25 degrees C

 

Motherboard at 27 degrees

 

I'm trying to run OTL but it keeps freezing.  I'm going to try and boot into safe mode and see if I can get it to give me a report.

 

Help would be very much appreciated.

 

Thanks

Attached Thumbnails

• 
• 
• 
• 

[Advertisements]

Hi there, sorry for the delay

Lets try a different programme

Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

• Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
• Select additions at the bottom
• Press Scan button.
  
• It will produce a log called FRST.txt in the same directory the tool is run from.
• Please attach both logs generated.

[Essexboy]

Hi there, sorry for the delay

Lets try a different programme

Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

• Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
• Select additions at the bottom
• Press Scan button.
  
• It will produce a log called FRST.txt in the same directory the tool is run from.
• Please attach both logs generated.

[nofx1728]

Same thing with Farbar.  It stops responding mid-scan.  It stopped on scanning services tcpip

[nofx1728]

Ok, I finally got it to run.

 

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-08-2014

Ran by Mike at 2014-08-04 15:47:34

Running from C:\Users\Mike\Downloads

Boot Mode: Normal

==========================================================

 

 

==================== Security Center ========================

 

(If an entry is included in the fixlist, it will be removed.)

 

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}

AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}

AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

 

==================== Installed Programs ======================

 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

 

Adobe Acrobat XI Pro (HKLM-x32\...\{23D3F585-AE29-4670-8E3E-64A0EFB29240}) (Version: 11.0 - Adobe Systems Incorporated)

Adobe Acrobat XI Pro (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-000000000006}) (Version: 11.0.07 - Adobe Systems)

Adobe After Effects CC 2014 (HKLM-x32\...\{2B22C750-5C3B-4738-B621-BA786AC7A494}) (Version: 13.0.0 - Adobe Systems Incorporated)

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 13.0.0.111 - Adobe Systems Incorporated)

Adobe AIR (x32 Version: 13.0.0.111 - Adobe Systems Incorporated) Hidden

Adobe Audition CC 2014 (HKLM-x32\...\{F3388E10-EFA9-4A80-B28E-2E647F8D00C4}) (Version: 7.0.0 - Adobe Systems Incorporated)

Adobe Bridge CC (64 Bit) (HKLM-x32\...\{359F8007-6486-429C-A8C5-D67F6897C88C}) (Version: 6.0 - Adobe Systems Incorporated)

Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.4.980 - Adobe Systems Incorporated.)

Adobe Community Help (x32 Version: 3.4.980 - Adobe Systems Incorporated.) Hidden

Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 2.7.1.418 - Adobe Systems Incorporated)

Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.0.3 - Adobe Systems Incorporated)

Adobe Download Assistant (x32 Version: 1.0.3 - Adobe Systems Incorporated) Hidden

Adobe Dreamweaver CC 2014 (HKLM-x32\...\{766255CE-D156-11E3-8DBC-A136EB52ACCF}) (Version: 14.0.0 - Adobe Systems Incorporated)

Adobe Edge Code CC (HKLM-x32\...\{641F742F-1497-51B4-F481-1037096A90A0}) (Version: 0.97 - Adobe Systems Incorporated)

Adobe Edge Inspect CC (HKLM-x32\...\{67D22EA0-4601-4450-9C99-042DABB0A315}) (Version: 1.0.408 - Adobe Systems Incorporated)

Adobe Edge Preview (HKLM-x32\...\{D44D4CC2-8221-4872-840B-BC8575E403B9}) (Version: 1.0 - Adobe Systems Incorporated)

Adobe Extension Manager CC (HKLM-x32\...\{244FD30F-63F1-49B9-9D98-1150FF4FFCB1}) (Version: 7.2.1 - Adobe Systems Incorporated)

Adobe Flash Player 14 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 14.0.0.145 - Adobe Systems Incorporated)

Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated)

Adobe Illustrator CC 2014 (HKLM-x32\...\{2B4B4082-8043-4646-8334-B0A29E641211}) (Version: 18.0 - Adobe Systems Incorporated)

Adobe InDesign CC 2014 (HKLM-x32\...\{CCDCB9C4-72BA-1014-A3F8-D123F2F18BC2}) (Version: 10.0 - Adobe Systems Incorporated)

Adobe Media Encoder CC 2014 (HKLM-x32\...\{663DEEEF-EF34-4DCB-8687-73A7AA146E02}) (Version: 8.0.1 - Adobe Systems Incorporated)

Adobe Photoshop CC 2014 (HKLM-x32\...\{D7A4F897-B20A-42D0-862D-CB5F6DB7391D}) (Version: 15.0 - Adobe Systems Incorporated)

Adobe Photoshop Lightroom 5.3 64-bit (HKLM\...\{2DD71ACB-552D-402C-9529-7906ACB95C30}) (Version: 5.3.1 - Adobe Systems Incorporated)

Adobe Premiere Pro CC 2014 (HKLM-x32\...\{07BE616F-9E42-4C90-AF4F-0F32A5B088E7}) (Version: 8.0.1 - Adobe Systems Incorporated)

Adobe Reader 64-bit fixes (HKLM\...\{6D80AAE7-FF65-4950-B1CA-3A7EA4995574}_is1) (Version:  - Leo Davidson / Pretentious Name)

Adobe Reader X (10.1.10) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AA1000000001}) (Version: 10.1.10 - Adobe Systems Incorporated)

Adobe SpeedGrade CC (HKLM-x32\...\{29AA12E9-934C-485E-A9A1-D823FEB29880}) (Version: 7.2.1 - Adobe Systems Incorporated)

Adobe SpeedGrade CC 2014 (HKLM-x32\...\{8EFF28F0-9DFD-4208-9E04-4D49A4812CF3}) (Version: 8.0.0 - Adobe Systems Incorporated)

Adobe Story (HKLM-x32\...\com.adobe.AdobeStory.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.0.571 - Adobe Systems Incorporated)

Adobe Story (x32 Version: 1.0.571 - Adobe Systems Incorporated) Hidden

Adobe Widget Browser (HKLM-x32\...\com.adobe.WidgetBrowser.E7BED6E5DDA59983786DD72EBFA46B1598278E07.1) (Version: 2.0 Build 230 - Adobe Systems Incorporated.)

Adobe Widget Browser (x32 Version: 2.0.230 - Adobe Systems Incorporated.) Hidden

Adobe® Content Viewer (HKLM-x32\...\com.adobe.dmp.contentviewer) (Version: 3.4.3 - Adobe Systems, Incorporated)

Adobe® Content Viewer (x32 Version: 3.4.3 - Adobe Systems, Incorporated) Hidden

Advertising Center (x32 Version: 0.0.0.2 - Nero AG) Hidden

AI Suite II (HKLM-x32\...\{34D3688E-A737-44C5-9E2A-FF73618728E1}) (Version: 1.02.03 - ASUSTeK Computer Inc.)

Akamai NetSession Interface (HKCU\...\Akamai) (Version:  - Akamai Technologies, Inc)

Apple Application Support (HKLM-x32\...\{D9DAD0FF-495A-472B-9F10-BAE430A26682}) (Version: 3.0.3 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.4.5.0 - Asmedia Technology)

Aspera Connect 3.3.3.81344 (HKCU\...\Aspera Connect 3.3.3.81344) (Version: 3.3.3.81344 - Aspera, Inc.)

Aspera Connect 3.3.3.81344 (x32 Version: 3.3.3.81344 - Aspera, Inc.) Hidden

AVG PC TuneUp 2014 (en-US) (x32 Version: 14.0.1001.204 - AVG) Hidden

Avira (HKLM-x32\...\{675f05e3-1f46-46b3-a95a-4c0a3f7734ed}) (Version: 1.1.18.28431 - Avira Operations GmbH & Co. KG)

Avira (x32 Version: 1.1.18.28431 - Avira Operations GmbH & Co. KG) Hidden

Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.5.464 - Avira)

Belarc Advisor 8.4 (HKLM-x32\...\Belarc Advisor) (Version: 8.4.0.0 - Belarc Inc.)

Bigasoft Total Video Converter 3.7.49.5044 (HKLM-x32\...\{a72ce741-1f32-4d79-bffb-a714375c678d}_is1) (Version:  - Bigasoft Corporation)

bl (x32 Version: 1.0.0 - Your Company Name) Hidden

Bluetooth Win7 Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.2.0.65 - Atheros Communications)

Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)

Boris Continuum Complete 7 Adobe CS5 (HKLM\...\{A31D5812-F0AA-4AFA-B584-C2C4AC141518}) (Version: 7.0.6 - Boris FX, Inc.)

Browser Configuration Utility (HKLM-x32\...\{D793423B-FF18-4A54-B9C9-75B3396BAAC4}) (Version: 1.0.10.0 - DeviceVM Inc.) <==== ATTENTION

Catalina Savings Printer (HKLM-x32\...\{37331C16-3E97-4A20-80D8-BFB43AB0E2FB}) (Version: 1.0.0 - Catalina Marketing Corp) <==== ATTENTION

CCleaner (HKLM\...\CCleaner) (Version: 4.10 - Piriform)

Citrix Online Launcher (HKLM-x32\...\{B025BA0B-64A6-46DE-9D64-32965C83CCA9}) (Version: 1.0.179 - Citrix)

ColorImpact 4.0.3 (HKLM-x32\...\ColorImpact 4_is1) (Version:  - TigerColor)

Compatibility Pack for the 2007 Office system (HKLM-x32\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)

Coupon Printer for Windows (HKLM-x32\...\Coupon Printer for Windows5.0.0.1) (Version: 5.0.0.1 - Coupons.com Incorporated)

Disk Unlocker (HKLM-x32\...\{BA30CBCD-03DA-457A-A34B-3EF637D45D4E}) (Version: 2.0.5 - ASUS)

DivX Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.3.52 - DivX, LLC)

Dropbox (HKCU\...\Dropbox) (Version: 2.10.3 - Dropbox, Inc.)

DVD Decrypter (Remove Only) (HKLM-x32\...\DVD Decrypter) (Version:  - )

EasyRotator Wizard (HKLM-x32\...\com.dwuser.erwizard.EasyRotatorWizard) (Version: 1.0.132 - Magnetic Marketing Corp)

EasyRotator Wizard (x32 Version: 1.0.132 - Magnetic Marketing Corp) Hidden

Epson Connect (HKLM-x32\...\{64BA551C-9AF6-495C-93F3-D1270E0045FC}) (Version:  - )

Epson Customer Participation (HKLM\...\{814FA673-A085-403C-9545-747FC1495069}) (Version: 1.0.0.0 - SEIKO EPSON CORPORATION)

Epson Download Navigator (HKLM-x32\...\{10F63395-157F-4B93-AB4D-702A2FF11942}) (Version: 1.0.1 - SEIKO EPSON CORPORATION)

Epson Event Manager (HKLM-x32\...\{FA9D303D-0FB2-49C7-9397-8E6B11EA892D}) (Version: 2.50.0001 - SEIKO EPSON CORPORATION)

Epson FAX Utility (HKLM-x32\...\{0CBE6C93-CB2E-4378-91EE-12BE6D4E2E4A}) (Version: 1.20.00 - SEIKO EPSON CORPORATION)

EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)

EPSON WorkForce 845 Series Printer Uninstall (HKLM\...\EPSON WorkForce 845 Series) (Version:  - SEIKO EPSON Corporation)

EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.4j - SEIKO EPSON CORPORATION)

EVGA Precision 2.0.2 (HKLM-x32\...\Precision) (Version: 2.0.2 - EVGA Corporation)

FileZilla Client 3.9.0.1 (HKLM-x32\...\FileZilla Client) (Version: 3.9.0.1 - Tim Kosse)

FlashGet 3.7 (HKLM-x32\...\FlashGet 3.7) (Version: 3.7.0.1158 - http://www.FlashGet.com)

Font Runner 3 (64-bit) (HKLM\...\{4E8CC211-5FDC-4E41-81F3-A30214F587E4}) (Version: 3.2.3 - Crux Technologies, Inc.)

GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden

GenArts Sapphire Plug-ins 6.0 for After Effects and Compatible  (HKLM\...\GenArts Sapphire AE_is1) (Version:  - )

Google Chrome (HKCU\...\Google Chrome) (Version: 36.0.1985.125 - Google Inc.)

GoToMeeting 6.3.0.1468 (HKCU\...\GoToMeeting) (Version: 6.3.0.1468 - CitrixOnline)

HFSExplorer 0.21 (HKLM-x32\...\HFSExplorer) (Version: 0.21 - Catacombae Software)

iCloud (HKLM\...\{81E20D41-C277-4526-934D-F2380AF91B78}) (Version: 3.1.0.40 - Apple Inc.)

ImagXpress (x32 Version: 7.0.74.0 - Nero AG) Hidden

Intel Processor Diagnostic Tool 64bit (HKLM\...\{B1E50355-2437-40B0-A016-67B7490FC93E}) (Version: 2.10.0.0 - Intel Corporation)

Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)

Intel® Network Connections 15.6.25.0 (HKLM\...\PROSetDX) (Version: 15.6.25.0 - Intel)

Intel® Network Connections 15.6.25.0 (Version: 15.6.25.0 - Intel) Hidden

Intel® Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.5.0.1026 - Intel Corporation)

Intel® Watchdog Timer Driver (Intel® WDT) (HKLM-x32\...\{3FD0C489-0F02-481a-A3E1-9754CD396761}) (Version:  - Intel Corporation)

iTunes (HKLM\...\{5A68A656-979F-4168-8795-E2E368AA4DC2}) (Version: 11.2.2.3 - Apple Inc.)

Java 7 Update 65 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.650 - Oracle)

Java Auto Updater (x32 Version: 2.1.65.20 - Oracle, Inc.) Hidden

Java™ 6 Update 32 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216032FF}) (Version: 6.0.320 - Oracle)

JavaFX 2.1.1 (HKLM-x32\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)

JMicron JMB36X Driver (HKLM-x32\...\{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}) (Version: 1.17.58.2 - JMicron Technology Corp.)

MacDrive 9 Standard (HKLM\...\{88FD6D25-A327-4EC6-86FD-A33149E371D2}) (Version: 9.2.0.2 - Mediafour Corporation)

Magic Bullet Suite 64-bit (HKLM-x32\...\InstallShield_{2B092722-5855-466F-B7A5-8C5E64C64C77}) (Version: 11.0 - Red Giant Software)

Magic Bullet Suite 64-bit (Version: 11.0 - Red Giant Software) Hidden

Malwarebytes Anti-Malware version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)

marvell 91xx driver (HKLM-x32\...\MagniDriver) (Version: 1.0.0.1045 - Marvell)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden

Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden

Microsoft Expression Encoder 4 (HKLM-x32\...\Encoder_4.0.3205.0) (Version: 4.0.3205.0 - Microsoft Corporation)

Microsoft Expression Encoder 4 (x32 Version: 4.0.3205.0 - Microsoft Corporation) Hidden

Microsoft Expression Encoder 4 Screen Capture Codec (HKLM-x32\...\{F9EC30D1-F688-4708-9850-CB5120074AAA}) (Version: 4.0.3205.0 - Microsoft Corporation)

Microsoft Mouse and Keyboard Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.2.173.0 - Microsoft Corporation)

Microsoft Mouse and Keyboard Center (Version: 2.2.173.0 - Microsoft Corporation) Hidden

Microsoft Office 2007 Primary Interop Assemblies (HKLM-x32\...\{50120000-1105-0000-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation)

Microsoft Office 365 Best Practices Analyzer (Beta) (HKCU\...\73479390fea0f49f) (Version: 15.0.859.0 - Microsoft Corporation)

Microsoft Office 365 Small Business Premium - en-us (HKLM\...\O365SmallBusPremRetail - en-us) (Version: 15.0.4631.1002 - Microsoft Corporation)

Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)

Microsoft Office Live Meeting 2007 (HKLM-x32\...\{E30E7561-A466-4393-B8BF-FD93E733EF3C}) (Version: 8.0.6362.202 - Microsoft Corporation)

Microsoft Online Services Sign-in Assistant (HKLM\...\{8751EDC8-6C7C-40E2-93D0-791EAE498A5D}) (Version: 7.250.4551.0 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2005 Tools for Office Runtime (HKLM-x32\...\Microsoft Visual Studio 2005 Tools for Office Runtime) (Version:  - Microsoft Corporation)

Microsoft Visual Studio 2005 Tools for Office Runtime (x32 Version: 8.0.60940.0 - Microsoft Corporation) Hidden

Microsoft Works 6-9 Converter (HKLM-x32\...\{95140000-0137-0409-0000-0000000FF1CE}) (Version: 14.0.6120.5002 - Microsoft Corporation)

Microsoft_VC80_ATL_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden

Microsoft_VC80_ATL_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden

Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden

Microsoft_VC80_CRT_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden

Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden

Microsoft_VC80_MFC_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden

Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden

Microsoft_VC80_MFCLOC_x86_x64 (Version: 80.50727.4053 - Adobe) Hidden

Microsoft_VC90_ATL_x86 (x32 Version: 1.00.0000 - Adobe) Hidden

Microsoft_VC90_ATL_x86_x64 (Version: 1.00.0000 - Adobe) Hidden

Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000 - Adobe) Hidden

Microsoft_VC90_CRT_x86_x64 (Version: 1.00.0000 - Adobe) Hidden

Microsoft_VC90_MFC_x86 (x32 Version: 1.00.0000 - Adobe) Hidden

Microsoft_VC90_MFC_x86_x64 (Version: 1.00.0000 - Adobe) Hidden

Microsoft_VC90_MFCLOC_x86 (x32 Version: 1.00.0000 - Adobe) Hidden

Microsoft_VC90_MFCLOC_x86_x64 (Version: 1.00.0000 - Adobe) Hidden

Mozilla Firefox 31.0 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 31.0 (x86 en-US)) (Version: 31.0 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 31.0 - Mozilla)

MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)

Nero 9 Essentials (HKLM-x32\...\{3b3c6e9c-0760-406a-b667-19ce5eef936c}) (Version:  - Nero AG)

Nero BurnRights (x32 Version: 3.4.13.100 - Nero AG) Hidden

Nero BurnRights Help (x32 Version: 3.4.4.100 - Nero AG) Hidden

Nero ControlCenter (x32 Version: 9.0.0.1 - Nero AG) Hidden

Nero CoverDesigner (x32 Version: 4.4.12.100 - Nero AG) Hidden

Nero CoverDesigner Help (x32 Version: 4.4.9.100 - Nero AG) Hidden

Nero Disc Copy Gadget (x32 Version: 2.4.34.0 - Nero AG) Hidden

Nero Disc Copy Gadget Help (x32 Version: 2.4.34.0 - Nero AG) Hidden

Nero DiscSpeed (x32 Version: 5.4.13.100 - Nero AG) Hidden

Nero DiscSpeed Help (x32 Version: 5.4.4.100 - Nero AG) Hidden

Nero DriveSpeed (x32 Version: 4.4.12.100 - Nero AG) Hidden

Nero DriveSpeed Help (x32 Version: 4.4.4.100 - Nero AG) Hidden

Nero Express Help (x32 Version: 9.4.33.100 - Nero AG) Hidden

Nero InfoTool (x32 Version: 6.4.12.100 - Nero AG) Hidden

Nero InfoTool Help (x32 Version: 6.4.4.100 - Nero AG) Hidden

Nero Installer (x32 Version: 4.4.9.0 - Nero AG) Hidden

Nero Online Upgrade (x32 Version: 1.3.0.0 - Nero AG) Hidden

Nero StartSmart (x32 Version: 9.4.33.100 - Nero AG) Hidden

Nero StartSmart Help (x32 Version: 9.4.27.100 - Nero AG) Hidden

Nero StartSmart OEM (x32 Version: 9.4.10.100 - Nero AG) Hidden

NeroExpress (x32 Version: 9.4.33.100 - Nero AG) Hidden

neroxml (x32 Version: 1.0.0 - Nero AG) Hidden

NETGEAR WNDA3100v2 wireless USB 2.0 adapter (HKLM-x32\...\{3C7839E7-21F4-49E0-B4D5-AC8ED818CCB0}) (Version: 1.03.000 - NETGEAR)

NVIDIA 3D Vision Controller Driver (x32 Version: 280.19 - NVIDIA Corporation) Hidden

NVIDIA 3D Vision Controller Driver 334.89 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 334.89 - NVIDIA Corporation)

NVIDIA 3D Vision Driver 334.89 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 334.89 - NVIDIA Corporation)

NVIDIA Control Panel 334.89 (Version: 334.89 - NVIDIA Corporation) Hidden

NVIDIA GeForce Experience 1.8.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.8.1 - NVIDIA Corporation)

NVIDIA Graphics Driver 334.89 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 334.89 - NVIDIA Corporation)

NVIDIA HD Audio Driver 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)

NVIDIA Install Application (Version: 2.1002.147.1067 - NVIDIA Corporation) Hidden

NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden

NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden

NVIDIA PhysX (x32 Version: 9.13.1220 - NVIDIA Corporation) Hidden

NVIDIA PhysX System Software 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)

NVIDIA ShadowPlay 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden

NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3489 - NVIDIA Corporation) Hidden

NVIDIA Update 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden

NVIDIA Update Core (Version: 10.11.15 - NVIDIA Corporation) Hidden

NVIDIA Virtual Audio 1.2.19 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.19 - NVIDIA Corporation)

Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4631.1002 - Microsoft Corporation) Hidden

Office 15 Click-to-Run Licensing Component (Version: 15.0.4631.1002 - Microsoft Corporation) Hidden

Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4631.1002 - Microsoft Corporation) Hidden

ph (x32 Version: 1.0.0 - Your Company Name) Hidden

PxMergeModule (x32 Version: 1.00.0000 - Your Company Name) Hidden

QuickBooks (x32 Version: 24.0.4007.2403 - Intuit Inc.) Hidden

QuickBooks Pro 2014 (HKLM-x32\...\{4A21D17E-2FE8-42CD-88B7-ACF8E8860834}) (Version: 24.0.4003.2403 - Intuit Inc.)

QuickBooks Runtime Redistributable (HKLM\...\{F2A4F809-2DE6-4D27-888B-4D2BB8DAF20E}) (Version: 1.00.0000 - Intuit Inc.)

QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)

QuickTime MPEG2 (HKLM-x32\...\{12EAE4F0-8770-451C-B4AD-76B569678973}) (Version: 7.60.92.0 - Apple Inc.)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6251 - Realtek Semiconductor Corp.)

Red Giant ToonIt (HKLM-x32\...\Red Giant ToonIt) (Version:  - )

RED Photoshop Plugin (6.31867) (HKLM\...\{AC1257AC-2E2F-4CFD-A223-93D6F4B6CBD0}) (Version: 1.0.6.31867 - RED Digital Cinema)

REDCINE-X PRO Build 22.4.32543 (64-bit) (HKLM\...\{CFA3F2FB-5259-46E9-9519-9B5201494AE6}) (Version: 1.22.4.32543 - RED Digital Cinema)

SES Driver (HKLM\...\{D8CC254C-C671-4664-9A38-FA368D1E2C97}) (Version: 1.0.0 - Western Digital)

SHIELD Streaming (Version: 1.6.85 - NVIDIA Corporation) Hidden

SugarSync (HKLM-x32\...\SugarSync) (Version: 2.0.46.127183 - SugarSync, Inc.)

System Requirements Lab for Intel (HKLM-x32\...\{04C4B49D-45D9-4A28-9ED1-B45CBD99B8C7}) (Version: 4.5.24.0 - Husdawg, LLC)

Trapcode 3D Stroke (HKLM-x32\...\InstallShield_{C503B73F-3DE3-419D-9807-0282C340CDE8}) (Version: 2.6.0 - Red Giant Software)

Trapcode 3D Stroke (Version: 2.6.0 - Red Giant Software) Hidden

Trapcode Particular (HKLM-x32\...\InstallShield_{E489BCB7-D57D-4751-AAB6-589AF66E2F7F}) (Version: 2.1.0 - Red Giant Software)

Trapcode Particular (Version: 2.1.0 - Red Giant Software) Hidden

Trapcode Shine (HKLM-x32\...\InstallShield_{D4C0D93D-7924-486F-9B30-27ABD4EA3BB3}) (Version: 1.6.0 - Red Giant Software)

Trapcode Shine (Version: 1.6.0 - Red Giant Software) Hidden

Trapcode Starglow (HKLM-x32\...\InstallShield_{71AC1C1B-CF68-4380-B040-AFBDF381C481}) (Version: 1.6.0 - Red Giant Software)

Trapcode Starglow (Version: 1.6.0 - Red Giant Software) Hidden

VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden

Visual Studio 2008 x64 Redistributables (HKLM-x32\...\{FCDBEA60-79F0-4FAE-BBA8-55A26C609A49}) (Version: 10.0.0.2 - AVG Technologies)

Visual Studio 2010 x64 Redistributables (HKLM\...\{21B133D6-5979-47F0-BE1C-F6A6B304693F}) (Version: 13.0.0.1 - AVG Technologies)

Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)

Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)

VLC media player 1.1.11 (HKLM-x32\...\VLC media player) (Version: 1.1.11 - VideoLAN)

VTC AIR PLAYER (HKLM-x32\...\com.vtc.VTCPlayer.D5188E03315CA913E5343274F88EC3A0C3CECFF5.1) (Version: 2 - UNKNOWN)

VTC AIR PLAYER (x32 Version: 2 - UNKNOWN) Hidden

WD Backup (HKLM-x32\...\{A351224F-533A-4EED-89F4-0BF3417FD31D}) (Version:  - ArcSoft)

WD Diagnostics (HKLM-x32\...\{0AB76F69-E761-4CFA-B9B0-A1906B4E9E4B}) (Version: 1.07.0000 - Western Digital Technologies)

WD Firewire HID Driver (HKLM-x32\...\{FD6C6B7F-5696-48C5-A601-2EE9E50C3D46}) (Version: 1.04.0001 - Western Digital Technologies)

WD SmartWare (HKLM\...\{4145EAA7-9B87-4F13-8D12-BEB3BE55561D}) (Version: 1.3.0.16 - Western Digital)

Windows Azure Active Directory Module for Windows PowerShell (HKLM\...\{43CC9C53-A217-4850-B5B2-8C347920E500}) (Version: 1.0.0 - Microsoft Corporation)

Windows Driver Package - Western Digital Technologies (WDC_SAM) WDC_SAM  (01/19/2011 1.0.0009.0) (HKLM\...\4CA7CFBB29889F25ACB3DF6E3A42BAE29EB43B20) (Version: 01/19/2011 1.0.0009.0 - Western Digital Technologies)

WinRAR 4.01 (64-bit) (HKLM\...\WinRAR archiver) (Version: 4.01.0 - win.rar GmbH)

XAMPP (HKLM-x32\...\xampp) (Version: 1.8.3-2 - BitNami)

XStandard (HKLM-x32\...\XStandard) (Version:  - )

Yahoo! Messenger (HKLM-x32\...\Yahoo! Messenger) (Version:  - Yahoo! Inc.)

YouSendIt Express (HKLM-x32\...\InstallShield_{8C8224B7-AA9B-4807-97CD-55899BAC83FE}) (Version: 2.10.2 - YouSendIt)

YouSendIt Express (x32 Version: 2.10.2 - YouSendIt) Hidden

 

==================== Custom CLSID (selected items): ==========================

 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

 

CustomCLSID: HKU\S-1-5-21-3792360265-3893795978-4202015960-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Mike\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-3792360265-3893795978-4202015960-1000_Classes\CLSID\{04A9E854-6F47-4F37-8A10-F896717F0329}\InprocServer32 -> C:\Users\Mike\AppData\Local\Programs\Aspera\Aspera Connect\lib\3.3.3\npasperaweb64.dll (Aspera, Inc. )

CustomCLSID: HKU\S-1-5-21-3792360265-3893795978-4202015960-1000_Classes\CLSID\{64FA2597-5059-4be8-BD4A-3D583E44C629}\InprocServer32 -> C:\Program Files\REDCINE-X PRO 64-bit\Resources\SystemPlugins\R3DThumbnailProvider.dll ()

CustomCLSID: HKU\S-1-5-21-3792360265-3893795978-4202015960-1000_Classes\CLSID\{84B5A313-CD5D-4904-8BA2-AFDC81C1B309}\InprocServer32 -> C:\Users\Mike\AppData\Local\Citrix\GoToMeeting\1312\G2MOutlookAddin64.dll (Citrix Online, a division of Citrix Systems, Inc.)

CustomCLSID: HKU\S-1-5-21-3792360265-3893795978-4202015960-1000_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Mike\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll (Google Inc.)

CustomCLSID: HKU\S-1-5-21-3792360265-3893795978-4202015960-1000_Classes\CLSID\{AD17B774-7F87-4141-BB9C-2AEE3841DC4E}\InprocServer32 -> C:\Users\Mike\AppData\Local\Programs\Aspera\Aspera Connect\lib\3.3.3\npasperaweb64.dll (Aspera, Inc. )

CustomCLSID: HKU\S-1-5-21-3792360265-3893795978-4202015960-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Mike\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll (Google Inc.)

CustomCLSID: HKU\S-1-5-21-3792360265-3893795978-4202015960-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Mike\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-3792360265-3893795978-4202015960-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Mike\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-3792360265-3893795978-4202015960-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Mike\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-3792360265-3893795978-4202015960-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Mike\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-3792360265-3893795978-4202015960-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Mike\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-3792360265-3893795978-4202015960-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Mike\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-3792360265-3893795978-4202015960-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Mike\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-3792360265-3893795978-4202015960-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Mike\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

 

==================== Restore Points  =========================

 

30-07-2014 14:17:13 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030

30-07-2014 14:17:22 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030

01-08-2014 16:49:50 Windows Update

 

==================== Hosts content: ==========================

 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

 

2009-07-13 22:34 - 2011-08-29 10:53 - 00002034 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 activate.adobe.com

127.0.0.1 practivate.adobe.com

127.0.0.1 ereg.adobe.com

127.0.0.1 activate.wip3.adobe.com

127.0.0.1 wip3.adobe.com

127.0.0.1 3dns-3.adobe.com

127.0.0.1 3dns-2.adobe.com

127.0.0.1 adobe-dns.adobe.com

127.0.0.1 adobe-dns-2.adobe.com

127.0.0.1 adobe-dns-3.adobe.com

127.0.0.1 ereg.wip3.adobe.com

127.0.0.1 activate-sea.adobe.com

127.0.0.1 wwis-dubc1-vip60.adobe.com

127.0.0.1 activate-sjc0.adobe.com

127.0.0.1 adobe.activate.com

127.0.0.1 adobeereg.com

127.0.0.1 www.adobeereg.com

127.0.0.1 125.252.224.90

127.0.0.1 125.252.224.91

127.0.0.1 hl2rcv.adobe.com

127.0.0.1 practivate.adobe.com

127.0.0.1 ereg.adobe.com

127.0.0.1 activate.wip3.adobe.com

127.0.0.1 wip3.adobe.com

127.0.0.1 3dns-3.adobe.com

127.0.0.1 3dns-2.adobe.com

127.0.0.1 adobe-dns.adobe.com

127.0.0.1 adobe-dns-2.adobe.com

127.0.0.1 adobe-dns-3.adobe.com

 

There are 10 more lines.

 

 

==================== Scheduled Tasks (whitelisted) =============

 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

 

Task: {00E3C7A2-032C-4D56-90FA-335BE8660273} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2014-06-10] (Microsoft Corporation)

Task: {13AA2477-D94A-4A8B-81AB-149E490EC72D} - System32\Tasks\ASUS\ASUS AI Suite II Execute => C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe [2010-11-26] (ASUSTeK Computer Inc.)

Task: {2F877B66-B4F5-4D8B-B53B-A21C3767CFF5} - System32\Tasks\ASUS\USB 3.0 Boost Service => C:\Program Files (x86)\ASUS\AI Suite II\USB 3.0 Boost\U3BoostSvr.exe [2011-09-09] ()

Task: {48863895-E155-41ED-A1B5-91719ACAA8A0} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation)

Task: {58FE10EE-B4BD-49F7-AE30-93A91E040428} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {617B8FB0-57D1-4246-924E-6BEB1BCF7381} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2013-05-13] (Microsoft)

Task: {67605668-D72B-4D9A-AC9B-602EA4770E81} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation)

Task: {74EB3F13-07FB-4E6A-A248-6F018E7020D3} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation)

Task: {824059F9-923C-427E-8A5B-6C5FBE862A4A} - System32\Tasks\Adobe online update program => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21] (Adobe Systems Incorporated)

Task: {82FFC966-4ABA-453E-8AD4-229350A40634} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation)

Task: {89B44387-CF82-4A68-9D0A-D396A680C412} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-08] (Adobe Systems Incorporated)

Task: {8BFD75EC-BB3D-40F8-9C69-F85786317F78} - System32\Tasks\Google Updater and Installer => C:\Users\Mike\AppData\Local\Google\Update\GoogleUpdate.exe [2012-07-20] (Google Inc.)

Task: {936A0A35-D0E9-469F-95A9-F60048960B4C} - System32\Tasks\ASUS\ASUS Mobilink Execute => C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\ASUS Mobilink.exe [2010-11-25] (ASUSTeK Computer Inc.)

Task: {AC385FF1-1A79-42C6-B909-525611CC330B} - System32\Tasks\G2MUpdateTask-S-1-5-21-3792360265-3893795978-4202015960-1000 => C:\Users\Mike\AppData\Local\Citrix\GoToMeeting\1468\g2mupdate.exe [2014-07-17] (Citrix Online, a division of Citrix Systems, Inc.)

Task: {CD175285-343C-4422-BE9C-5BA494B9BBE0} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3792360265-3893795978-4202015960-1000UA => C:\Users\Mike\AppData\Local\Google\Update\GoogleUpdate.exe [2012-07-20] (Google Inc.)

Task: {D0197B0E-C962-4512-9FD6-62D5A9655A90} - System32\Tasks\AdobeAAMUpdater-1.0-Mike-PC-Mike => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2014-02-27] (Adobe Systems Incorporated)

Task: {D1645124-BC30-40D7-A788-23724C6BB871} - System32\Tasks\ASUS\ASUS DigiVRM Help => C:\Program Files (x86)\ASUS\AI Suite II\DIGI+ VRM\VRMHelp.exe [2011-04-13] (ASUSTeK Computer Inc.)

Task: {E321EFA8-D806-44D6-9F53-9C7CB5DDC9E0} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-01-21] (Piriform Ltd)

Task: {E432E2D7-EFBC-45A1-A569-7E9733701F82} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-07-11] (Oracle Corporation)

Task: {ECE72734-A72F-4F89-B9D5-894B9C763C32} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2014-06-19] (Microsoft Corporation)

Task: {F1897CF4-CD93-4951-B1E2-1B5F87291965} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3792360265-3893795978-4202015960-1000Core => C:\Users\Mike\AppData\Local\Google\Update\GoogleUpdate.exe [2012-07-20] (Google Inc.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\G2MUpdateTask-S-1-5-21-3792360265-3893795978-4202015960-1000.job => C:\Users\Mike\AppData\Local\Citrix\GoToMeeting\1468\g2mupdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3792360265-3893795978-4202015960-1000Core.job => C:\Users\Mike\AppData\Local\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3792360265-3893795978-4202015960-1000UA.job => C:\Users\Mike\AppData\Local\Google\Update\GoogleUpdate.exe

 

==================== Loaded Modules (whitelisted) =============

 

2014-07-25 12:13 - 2011-06-13 16:36 - 00922240 _____ () C:\Program Files (x86)\ASUS\AXSP\1.00.14\atkexComSvc.exe

2010-12-01 22:15 - 2010-12-01 22:15 - 00915584 ____N () C:\Program Files (x86)\ASUS\AAHM\1.00.14\aaHMSvc.exe

2011-08-16 02:33 - 2010-10-21 05:52 - 00586880 ____R () C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe

2014-03-20 07:29 - 2014-05-20 09:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll

2010-05-10 12:32 - 2010-05-10 12:32 - 01858048 _____ () C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDFME\WDFME.exe

2010-05-10 12:31 - 2010-05-10 12:31 - 00483328 _____ () C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSC.exe

2011-08-19 03:50 - 2010-08-19 15:25 - 00272864 ____N () C:\Program Files (x86)\NETGEAR\WNDA3100v2\WifiSvc.exe

2012-02-21 17:06 - 2014-02-08 13:42 - 00117024 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2014-07-16 11:06 - 2014-07-16 11:06 - 00672416 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll

2014-07-11 07:46 - 2014-05-20 12:19 - 08892072 _____ () C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\1033\GrooveIntlResource.dll

2014-01-10 01:26 - 2014-01-10 01:26 - 01861968 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

2014-07-16 11:05 - 2014-07-16 11:05 - 05558432 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe

2014-02-06 01:52 - 2014-02-06 01:52 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll

2014-02-06 01:52 - 2014-02-06 01:52 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll

2014-07-25 12:13 - 2014-08-04 15:36 - 00025088 _____ () C:\Program Files (x86)\ASUS\AXSP\1.00.14\PEbiosinterface32.dll

2014-07-25 12:13 - 2010-06-29 10:58 - 00104448 _____ () C:\Program Files (x86)\ASUS\AXSP\1.00.14\ATKEX.dll

2011-08-19 03:50 - 2010-07-29 20:41 - 00323584 ____N () C:\Program Files (x86)\NETGEAR\WNDA3100v2\WifiLib.dll

2014-07-14 16:49 - 2014-07-14 16:49 - 00137296 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.NativeCore.dll

2014-07-14 16:49 - 2014-07-14 16:49 - 00065104 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.AvConnectorNative.dll

2014-07-25 12:14 - 2010-11-25 15:12 - 00086016 _____ () C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\iPhone Simulator\AsNetlib.dll

2014-07-25 12:14 - 2010-11-25 15:12 - 00661504 _____ () C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\iPhone Simulator\aaHMLib.dll

2014-07-25 12:14 - 2010-11-25 15:12 - 00253952 _____ () C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\iPhone Simulator\pngio.dll

2014-07-25 12:14 - 2010-11-25 15:12 - 00208896 _____ () C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\iPhone Simulator\ImageHelper.dll

2011-08-16 02:34 - 2010-11-25 03:12 - 00061440 ____R () C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\Simulator\AsMultiLang.dll

2011-08-16 02:34 - 2010-11-25 03:12 - 00661504 ____R () C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\Simulator\aaHMLib.dll

2011-08-16 02:34 - 2010-11-25 03:12 - 00703488 ____R () C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\Simulator\CpuFreq.dll

2011-08-16 02:34 - 2010-11-25 03:12 - 00114688 ____R () C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\Simulator\AssistFunc.dll

2009-06-27 10:11 - 2009-06-27 10:11 - 00503202 ____N () C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\sqlite3.dll

2014-07-03 06:45 - 2014-07-03 06:45 - 32733056 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CEF\libcef.dll

2014-01-10 01:28 - 2014-01-10 01:28 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll

2014-07-24 16:11 - 2014-07-14 16:49 - 00049744 _____ () C:\Users\Mike\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll

2014-07-25 12:17 - 2011-03-04 16:33 - 00053248 ____N () C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\HookKey32.dll

2014-07-25 12:17 - 2009-05-21 10:14 - 00253952 _____ () C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\pngio.dll

2014-07-11 07:46 - 2014-05-20 06:11 - 08892072 _____ () C:\Program Files\Microsoft Office 15\root\Office15\1033\GrooveIntlResource.dll

2014-07-25 12:13 - 2011-02-24 10:19 - 00143360 _____ () C:\Program Files (x86)\ASUS\AI Suite II\AssistFunc.dll

2014-07-25 12:13 - 2010-06-21 15:21 - 00208896 _____ () C:\Program Files (x86)\ASUS\AI Suite II\ImageHelper.dll

2014-07-25 12:13 - 2009-08-12 20:15 - 00253952 _____ () C:\Program Files (x86)\ASUS\AI Suite II\pngio.dll

2014-07-25 12:14 - 2011-02-09 09:02 - 00873472 _____ () C:\Program Files (x86)\ASUS\AI Suite II\AI Charger+\AIChargerPlus.dll

2014-07-25 12:15 - 2010-10-15 17:40 - 01031680 _____ () C:\Program Files (x86)\ASUS\AI Suite II\ASUS Update\Update.dll

2014-07-25 12:13 - 2011-05-16 17:35 - 00965632 _____ () C:\Program Files (x86)\ASUS\AI Suite II\BarGadget\BarGadget.dll

2014-07-25 12:15 - 2011-01-19 21:23 - 01655296 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Bluetooth Go!\BluetoothGo.dll

2014-07-25 12:16 - 2010-12-01 12:33 - 01244672 _____ () C:\Program Files (x86)\ASUS\AI Suite II\MyLogo\MyLogo.dll

2014-07-25 12:16 - 2011-01-06 10:38 - 01027072 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Probe_II\ProbeII.dll

2014-07-25 12:14 - 2011-05-20 09:12 - 00881152 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Sensor\Sensor.dll

2014-07-25 12:14 - 2011-04-07 17:33 - 01607168 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Sensor Graph\SensorGraph.dll

2014-07-25 12:14 - 2011-01-07 16:39 - 01246208 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Settings\Settings.dll

2014-07-25 12:14 - 2010-08-06 18:11 - 00850944 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Splitter\Splitter.dll

2014-07-25 12:14 - 2010-08-06 18:13 - 00886272 _____ () C:\Program Files (x86)\ASUS\AI Suite II\TabGadget\TabGadget.dll

2011-08-16 02:33 - 2010-08-23 10:17 - 00662016 _____ () C:\Program Files (x86)\ASUS\AAHM\1.00.14\aaHMLib.dll

2014-07-21 14:04 - 2014-07-15 05:24 - 00718664 _____ () C:\Users\Mike\AppData\Local\Google\Chrome\Application\36.0.1985.125\libglesv2.dll

2014-07-21 14:04 - 2014-07-15 05:24 - 00126280 _____ () C:\Users\Mike\AppData\Local\Google\Chrome\Application\36.0.1985.125\libegl.dll

2014-07-21 14:04 - 2014-07-15 05:24 - 08537928 _____ () C:\Users\Mike\AppData\Local\Google\Chrome\Application\36.0.1985.125\pdf.dll

2014-07-21 14:04 - 2014-07-15 05:24 - 00353096 _____ () C:\Users\Mike\AppData\Local\Google\Chrome\Application\36.0.1985.125\ppGoogleNaClPluginChrome.dll

2014-07-21 14:04 - 2014-07-15 05:24 - 01732936 _____ () C:\Users\Mike\AppData\Local\Google\Chrome\Application\36.0.1985.125\ffmpegsumo.dll

2014-07-25 12:13 - 2010-06-21 15:21 - 00208896 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\ImageHelper.dll

2014-02-13 10:46 - 2014-02-13 10:46 - 00172544 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\ae685719bd599604bdf031cdad0ba38a\IsdiInterop.ni.dll

2011-08-16 02:11 - 2011-04-30 00:28 - 00059904 ____N () C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IsdiInterop.dll

2014-07-03 06:45 - 2014-07-03 06:45 - 00742784 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CEF\libglesv2.dll

2014-07-03 06:45 - 2014-07-03 06:45 - 00136576 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CEF\libegl.dll

2014-06-20 09:00 - 2014-06-20 09:00 - 00316584 _____ () C:\Program Files\Microsoft Office 15\root\office15\AppVIsvStream32.dll

2014-07-11 07:47 - 2014-06-03 04:41 - 01032360 _____ () C:\Program Files\Microsoft Office 15\Root\Office15\ADDINS\UmOutlookAddin.dll

2014-05-23 11:55 - 2014-05-23 11:55 - 00321704 _____ () C:\Program Files\Microsoft Office 15\root\office15\msfad.dll

2014-07-11 07:46 - 2014-05-20 06:11 - 08892072 _____ () C:\Program Files\Microsoft Office 15\Root\Office15\1033\GrooveIntlResource.dll

2013-09-14 02:51 - 2013-09-14 02:51 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\zlib1.dll

2013-09-14 02:50 - 2013-09-14 02:50 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\libxml2.dll

2014-06-20 09:02 - 2014-06-20 09:02 - 00316584 _____ () C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\AppVIsvStream32.dll

2014-07-11 07:46 - 2014-07-11 07:46 - 00122024 _____ () C:\Program Files\Microsoft Office 15\root\Office15\JitV.dll

2014-06-20 09:00 - 2014-06-20 09:00 - 00316584 _____ () C:\Program Files\Microsoft Office 15\root\Office15\AppVIsvStream32.dll

 

==================== Alternate Data Streams (whitelisted) =========

 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

 

AlternateDataStreams: C:\Program Files\Common Files\Microsoft Shared:0HdCiXPwU6sVF9oCaadi7OB

AlternateDataStreams: C:\ProgramData\Microsoft:mOhBPrKocDvPdOGiZ2eTa

AlternateDataStreams: C:\ProgramData\Microsoft:O9jS41W77Fd8kHB7n6JgFkVRiTx

AlternateDataStreams: C:\ProgramData\TEMP:EBF38A57

AlternateDataStreams: C:\Users\Mike\Local Settings:GhPIMwD9LzsOo0297bw

AlternateDataStreams: C:\Users\Mike\Local Settings:tK1a0c9nh00r7aTUYOHhq

AlternateDataStreams: C:\Users\Mike\AppData\Local:GhPIMwD9LzsOo0297bw

AlternateDataStreams: C:\Users\Mike\AppData\Local:tK1a0c9nh00r7aTUYOHhq

AlternateDataStreams: C:\Users\Mike\AppData\Local\Application Data:GhPIMwD9LzsOo0297bw

AlternateDataStreams: C:\Users\Mike\AppData\Local\Application Data:tK1a0c9nh00r7aTUYOHhq

 

==================== Safe Mode (whitelisted) ===================

 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

 

 

==================== EXE Association (whitelisted) =============

 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

 

 

==================== MSCONFIG/TASK MANAGER disabled items =========

 

(Currently there is no automatic fix for this section.)

 

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Intuit Data Protect.lnk => C:\Windows\pss\Intuit Data Protect.lnk.CommonStartup

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^QuickBooks Update Agent.lnk => C:\Windows\pss\QuickBooks Update Agent.lnk.CommonStartup

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^QuickBooks_Standard_21.lnk => C:\Windows\pss\QuickBooks_Standard_21.lnk.CommonStartup

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^WD Backup Monitor.lnk => C:\Windows\pss\WD Backup Monitor.lnk.CommonStartup

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^WDDMStatus.lnk => C:\Windows\pss\WDDMStatus.lnk.CommonStartup

MSCONFIG\startupfolder: C:^Users^Mike^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup

MSCONFIG\startupfolder: C:^Users^Mike^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Send to OneNote.lnk => C:\Windows\pss\Send to OneNote.lnk.Startup

MSCONFIG\startupreg: Acrobat Assistant 8.0 => "C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe"

MSCONFIG\startupreg: Adobe Acrobat Speed Launcher => "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe"

MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"

MSCONFIG\startupreg: AdobeCS5.5ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" -launchedbylogin

MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"

MSCONFIG\startupreg: ASUS AiChargerPlus Execute => C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe

MSCONFIG\startupreg: ASUS ShellProcess Execute => C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\Simulator\AsShellProcess.exe

MSCONFIG\startupreg: AthBtTray => "C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe"

MSCONFIG\startupreg: AtherosBtStack => "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"

MSCONFIG\startupreg: AVG_UI => "C:\Program Files (x86)\AVG\AVG2013\avgui.exe" /TRAYONLY

MSCONFIG\startupreg: BCU => "C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe"

MSCONFIG\startupreg: DivXMediaServer => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe

MSCONFIG\startupreg: DivXUpdate => "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW

MSCONFIG\startupreg: FUFAXRCV => "C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe"

MSCONFIG\startupreg: FUFAXSTM => "C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe"

MSCONFIG\startupreg: Google Update => "C:\Users\Mike\AppData\Local\Google\Update\GoogleUpdate.exe" /c

MSCONFIG\startupreg: IAStorIcon => C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe

MSCONFIG\startupreg: iCloudServices => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe

MSCONFIG\startupreg: IntelliPoint => "C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe"

MSCONFIG\startupreg: IntelliType Pro => "C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe"

MSCONFIG\startupreg: Intuit SyncManager => C:\Program Files (x86)\Common Files\Intuit\Sync\IntuitSyncManager.exe  startup

MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"

MSCONFIG\startupreg: JMB36X IDE Setup => C:\Windows\RaidTool\xInsIDE.exe

MSCONFIG\startupreg: MacDrive 9 application => "C:\Program Files\Mediafour\MacDrive 9\MacDrive.exe"

MSCONFIG\startupreg: Messenger (Yahoo!) => "C:\PROGRA~2\Yahoo!\Messenger\YahooMessenger.exe" -quiet

MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime

MSCONFIG\startupreg: RtHDVCpl => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s

MSCONFIG\startupreg: SugarSync => "C:\Program Files (x86)\SugarSync\SugarSyncManager.exe" -startInTray -usedelay=true

MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

MSCONFIG\startupreg: SwitchBoard => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

MSCONFIG\startupreg: TomTomHOME.exe => "C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe"

MSCONFIG\startupreg: WD Button Manager => WDBtnMgr.exe

 

==================== Faulty Device Manager Devices =============

 

 

==================== Event log errors: =========================

 

Application errors:

==================

Error: (08/04/2014 03:38:02 PM) (Source: Microsoft-Windows-WMI) (EventID: 10) (User: NT AUTHORITY)

Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

 

Error: (08/01/2014 03:09:41 PM) (Source: QuickBooks) (EventID: 4) (User: )

Description: An unexpected error has occured in "QuickBooks Pro 2014":

DBConnPool::HandleConnectionError errorCode:-6069, dbCode:-103 from file:'.\.\src\connpool.cpp' at line 1038 from function:'DBMgr::DBConnPool::init'

 

Error: (08/01/2014 03:09:41 PM) (Source: QuickBooks) (EventID: 4) (User: )

Description: An unexpected error has occured in "QuickBooks Pro 2014":

Connection String:CON=QBConnectionPool-Probe-QB_data_engine_24; ;DBF=C:\Documents and Settings\All Users\Documents\Intuit\QuickBooks\Company Files\DLF Media Consultants, Inc.QBW;ENG=QB_data_engine_24;DBN=97e3f935549a4ae2b567fa6a1034ea06

 

Error: (08/01/2014 03:09:41 PM) (Source: QuickBooks) (EventID: 4) (User: )

Description: An unexpected error has occured in "QuickBooks Pro 2014":

Connection Error:Invalid user ID or password

 

Error: (08/01/2014 01:48:21 PM) (Source: QuickBooks) (EventID: 4) (User: )

Description: An unexpected error has occured in "QuickBooks Pro 2014":

V24.0D R7 (M=1470, L=690, C=249, V=0 (0))

 

Error: (08/01/2014 01:46:35 PM) (Source: QuickBooks) (EventID: 4) (User: )

Description: An unexpected error has occured in "QuickBooks Pro 2014":

Element by Tag CompanyAddress5 could not be found

 

Error: (08/01/2014 01:46:35 PM) (Source: QuickBooks) (EventID: 4) (User: )

Description: An unexpected error has occured in "QuickBooks Pro 2014":

Element by Tag CompanyAddress4 could not be found

 

Error: (08/01/2014 01:46:35 PM) (Source: QuickBooks) (EventID: 4) (User: )

Description: An unexpected error has occured in "QuickBooks Pro 2014":

Element by Tag CompanyAddress3 could not be found

 

Error: (08/01/2014 01:46:15 PM) (Source: QuickBooks) (EventID: 4) (User: )

Description: An unexpected error has occured in "QuickBooks Pro 2014":

V24.0D R7 (M=1470, L=690, C=249, V=0 (0))

 

Error: (08/01/2014 01:26:41 PM) (Source: QuickBooks) (EventID: 4) (User: )

Description: An unexpected error has occured in "QuickBooks Pro 2014":

The user canceled one of the dialog boxes. No message was sent.

 

 

System errors:

=============

Error: (08/04/2014 03:36:06 PM) (Source: volmgr) (EventID: 46) (User: )

Description: Crash dump initialization failed!

 

Error: (08/01/2014 02:59:40 PM) (Source: Service Control Manager) (EventID: 7016) (User: )

Description: The ASDiskUnlocker service has reported an invalid current state 11.

 

Error: (08/01/2014 00:46:38 PM) (Source: VDS Basic Provider) (EventID: 1) (User: )

Description: Unexpected failure. Error code: D@01010004

 

Error: (08/01/2014 00:46:38 PM) (Source: VDS Basic Provider) (EventID: 1) (User: )

Description: Unexpected failure. Error code: D@01010004

 

Error: (07/31/2014 03:19:54 PM) (Source: srv) (EventID: 2017) (User: )

Description: The server was unable to allocate from the system nonpaged pool because the server reached the configured limit for nonpaged pool allocations.

 

Error: (07/31/2014 03:19:00 PM) (Source: Service Control Manager) (EventID: 7016) (User: )

Description: The ASDiskUnlocker service has reported an invalid current state 11.

 

Error: (07/31/2014 03:18:54 PM) (Source: srv) (EventID: 2017) (User: )

Description: The server was unable to allocate from the system nonpaged pool because the server reached the configured limit for nonpaged pool allocations.

 

Error: (07/31/2014 03:15:54 PM) (Source: srv) (EventID: 2017) (User: )

Description: The server was unable to allocate from the system nonpaged pool because the server reached the configured limit for nonpaged pool allocations.

 

Error: (07/31/2014 03:13:54 PM) (Source: srv) (EventID: 2017) (User: )

Description: The server was unable to allocate from the system nonpaged pool because the server reached the configured limit for nonpaged pool allocations.

 

Error: (07/31/2014 03:09:54 PM) (Source: srv) (EventID: 2017) (User: )

Description: The server was unable to allocate from the system nonpaged pool because the server reached the configured limit for nonpaged pool allocations.

 

 

Microsoft Office Sessions:

=========================

Error: (08/04/2014 03:38:02 PM) (Source: Microsoft-Windows-WMI) (EventID: 10) (User: NT AUTHORITY)

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

 

Error: (08/01/2014 03:09:41 PM) (Source: QuickBooks) (EventID: 4) (User: )

Description: QuickBooks Pro 2014DBConnPool::HandleConnectionError errorCode:-6069, dbCode:-103 from file:'.\.\src\connpool.cpp' at line 1038 from function:'DBMgr::DBConnPool::init'

 

Error: (08/01/2014 03:09:41 PM) (Source: QuickBooks) (EventID: 4) (User: )

Description: QuickBooks Pro 2014Connection String:CON=QBConnectionPool-Probe-QB_data_engine_24; ;DBF=C:\Documents and Settings\All Users\Documents\Intuit\QuickBooks\Company Files\DLF Media Consultants, Inc.QBW;ENG=QB_data_engine_24;DBN=97e3f935549a4ae2b567fa6a1034ea06

 

Error: (08/01/2014 03:09:41 PM) (Source: QuickBooks) (EventID: 4) (User: )

Description: QuickBooks Pro 2014Connection Error:Invalid user ID or password

 

Error: (08/01/2014 01:48:21 PM) (Source: QuickBooks) (EventID: 4) (User: )

Description: QuickBooks Pro 2014V24.0D R7 (M=1470, L=690, C=249, V=0 (0))

 

Error: (08/01/2014 01:46:35 PM) (Source: QuickBooks) (EventID: 4) (User: )

Description: QuickBooks Pro 2014Element by Tag CompanyAddress5 could not be found

 

Error: (08/01/2014 01:46:35 PM) (Source: QuickBooks) (EventID: 4) (User: )

Description: QuickBooks Pro 2014Element by Tag CompanyAddress4 could not be found

 

Error: (08/01/2014 01:46:35 PM) (Source: QuickBooks) (EventID: 4) (User: )

Description: QuickBooks Pro 2014Element by Tag CompanyAddress3 could not be found

 

Error: (08/01/2014 01:46:15 PM) (Source: QuickBooks) (EventID: 4) (User: )

Description: QuickBooks Pro 2014V24.0D R7 (M=1470, L=690, C=249, V=0 (0))

 

Error: (08/01/2014 01:26:41 PM) (Source: QuickBooks) (EventID: 4) (User: )

Description: QuickBooks Pro 2014The user canceled one of the dialog boxes. No message was sent.

 

 

==================== Memory info =========================== 

 

Percentage of memory in use: 26%

Total physical RAM: 16358.9 MB

Available physical RAM: 12046.45 MB

Total Pagefile: 40895.08 MB

Available Pagefile: 36276.04 MB

Total Virtual: 8192 MB

Available Virtual: 8191.84 MB

 

==================== Drives ================================

 

Drive c: () (Fixed) (Total:297.99 GB) (Free:143.99 GB) NTFS

Drive e: (New Volume) (Fixed) (Total:596.05 GB) (Free:337.73 GB) NTFS

Drive f: (New Volume) (Fixed) (Total:2794.4 GB) (Free:2554.09 GB) NTFS

Drive h: (KINGSTON) (Removable) (Total:57.61 GB) (Free:6.09 GB) FAT32

Drive i: () (Removable) (Total:14.91 GB) (Free:4.28 GB) NTFS

Drive j: () (Removable) (Total:14.9 GB) (Free:14.75 GB) FAT32

Drive n: (RF-4GB11) (Removable) (Total:3.77 GB) (Free:3.58 GB) FAT32

 

==================== MBR & Partition Table ==================

 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 596 GB) (Disk ID: 00000000)

 

Partition: GPT Partition Type.

 

========================================================

Disk: 1 (MBR Code: Windows 7 or 8) (Size: 2795 GB) (Disk ID: 00000000)

 

Partition: GPT Partition Type.

 

========================================================

Disk: 2 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 0C041C9F)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=298 GB) - (Type=07 NTFS)

 

========================================================

Disk: 3 (Size: 15 GB) (Disk ID: 00000000)

 

Partition: GPT Partition Type.

 

========================================================

Disk: 4 (MBR Code: Windows XP) (Size: 4 GB) (Disk ID: C3072E18)

Partition 1: (Active) - (Size=4 GB) - (Type=0C)

 

========================================================

Disk: 5 (Size: 15 GB) (Disk ID: 00000000)

 

Partition: GPT Partition Type.

 

========================================================

Disk: 6 (Size: 58 GB) (Disk ID: 4AF12A21)

Partition 1: (Active) - (Size=58 GB) - (Type=0B)

 

==================== End Of Log ============================

[Essexboy]

Could you post the main FRST log please (FRST.txt)

[nofx1728]

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-08-2014

Ran by Mike (administrator) on MIKE-PC on 04-08-2014 15:39:54

Running from C:\Users\Mike\Downloads

Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: English (United States)

Internet Explorer Version 11

Boot Mode: Normal

 

The only official download link for FRST:

Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 

Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 

Download link from any site other than Bleeping Computer is unpermitted or outdated.

See tutorial for FRST: http://www.geekstogo...very-scan-tool/

 

==================== Processes (Whitelisted) =================

 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(Microsoft Corporation) C:\Windows\System32\wlanext.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

() C:\Program Files (x86)\ASUS\AXSP\1.00.14\atkexComSvc.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\Disk Unlocker\ASPFSVS64.exe

() C:\Program Files (x86)\ASUS\AAHM\1.00.14\aaHMSvc.exe

() C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe

(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe

(DeviceVM, Inc.) C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCUService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe

(SEIKO EPSON CORPORATION) C:\Program Files\EPSON\EpsonCustomerParticipation\EPCP.exe

(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe

(Mediafour Corporation) C:\Program Files\Mediafour\MacDrive 9\MacDrive9Service.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Microsoft Online Services\MSOIDSVC.EXE

(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Microsoft Online Services\MSOIDSVCM.EXE

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(Intuit) C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe

(Intuit Inc.) C:\Program Files (x86)\Common Files\Intuit\DataProtect\QBIDPService.exe

(WDC) C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe

() C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDFME\WDFME.exe

() C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSC.exe

() C:\Program Files (x86)\NETGEAR\WNDA3100v2\WifiSvc.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe

(Microsoft Corporation) C:\Windows\System32\vds.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe

(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe

(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\DIGI+ VRM\VRMHelp.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe

(Akamai Technologies, Inc.) C:\Users\Mike\AppData\Local\Akamai\netsession_win.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\USB 3.0 Boost\U3BoostSvr64.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\iPhone Simulator\pnSvc.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\Simulator\EC Simulator.exe

(DeviceVM, Inc.) C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe

() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\Simulator\AsShellProcess.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Akamai Technologies, Inc.) C:\Users\Mike\AppData\Local\Akamai\netsession_win.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\TurboVHelp.exe

(Google Inc.) C:\Users\Mike\AppData\Local\Google\Chrome\Application\chrome.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\EPU\EPUHelp.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe

(Google Inc.) C:\Users\Mike\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Mike\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Mike\AppData\Local\Google\Chrome\Application\chrome.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe

(Microsoft Corporation) C:\Windows\System32\PrintIsolationHost.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe

(Google Inc.) C:\Users\Mike\AppData\Local\Google\Chrome\Application\chrome.exe

() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe

 

 

==================== Registry (Whitelisted) ==================

 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

 

HKLM\...\Run: [Nvtmru] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-11-14] (NVIDIA Corporation)

HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-09] (NVIDIA Corporation)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [BCU] => C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe [375000 2009-10-26] (DeviceVM, Inc.)

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2694040 2014-07-22] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [] => [X]

HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [455512 2014-05-28] (DivX, LLC)

HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()

HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [979328 2010-10-12] (SEIKO EPSON CORPORATION)

HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [190032 2014-07-14] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [750160 2014-07-02] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [ASUS AiChargerPlus Execute] => C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe [465536 2010-11-08] (ASUSTek Computer Inc.)

HKLM-x32\...\Run: [ASUS ShellProcess Execute] => C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\Simulator\AsShellProcess.exe [252544 2010-11-25] (ASUSTeK Computer Inc.)

HKU\S-1-5-21-3792360265-3893795978-4202015960-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Mike\AppData\Local\Akamai\netsession_win.exe [4672920 2014-04-17] (Akamai Technologies, Inc.)

HKU\S-1-5-21-3792360265-3893795978-4202015960-1000\...\Run: [AdobeBridge] => [X]

HKU\S-1-5-21-3792360265-3893795978-4202015960-1000\...\MountPoints2: {0ea97247-c8aa-11e0-a6e2-806e6f6e6963} - D:\.\Bin\ASSETUP.exe

HKU\S-1-5-21-3792360265-3893795978-4202015960-1000\...\MountPoints2: {844a5a5a-8818-11e3-a4db-00268333028e} - "I:\WD SmartWare.exe" autoplay=true

HKU\S-1-5-21-3792360265-3893795978-4202015960-1000\...\MountPoints2: {9edb4a4d-19b7-11e1-93bb-00268333028e} - "H:\WD SmartWare.exe" autoplay=true

SSODL: EldosMountNotificator - {C28617FD-4FE7-4043-AD51-C8132CE90106} - C:\Windows\system32\SSCbFsMntNtf3.dll (EldoS Corporation)

SSODL-x32: EldosMountNotificator - {C28617FD-4FE7-4043-AD51-C8132CE90106} - C:\Windows\SysWOW64\SSCbFsMntNtf3.dll (EldoS Corporation)

ShellIconOverlayIdentifiers:  AccExtIco1 -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll ()

ShellIconOverlayIdentifiers:  AccExtIco2 -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll ()

ShellIconOverlayIdentifiers:  AccExtIco3 -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll ()

ShellIconOverlayIdentifiers:  SkyDrivePro1 (ErrorConflict) -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

ShellIconOverlayIdentifiers:  SkyDrivePro2 (SyncInProgress) -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

ShellIconOverlayIdentifiers:  SkyDrivePro3 (InSync) -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

ShellIconOverlayIdentifiers: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Mike\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

ShellIconOverlayIdentifiers: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Mike\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

ShellIconOverlayIdentifiers: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Mike\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

ShellIconOverlayIdentifiers: DropboxExt4 -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Mike\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

ShellIconOverlayIdentifiers: EldosIconOverlay -> {69925D1B-6A0F-4413-861A-81AB98039DB9} => C:\Windows\system32\SSCbFsMntNtf3.dll (EldoS Corporation)

ShellIconOverlayIdentifiers: MacDriveVolumeIcon -> {6B21AF46-EE37-40D0-A707-C06C17D06CE9} => C:\Program Files\Mediafour\MacDrive 9\MDVolumeIcons.dll (Mediafour Corporation)

ShellIconOverlayIdentifiers: MacDriveVolumeIconReadOnly -> {E9BC4DCA-0A4E-4C65-9D40-621C9D0CDC5F} => C:\Program Files\Mediafour\MacDrive 9\MDVolumeIcons.dll (Mediafour Corporation)

ShellIconOverlayIdentifiers: SugarSyncBackedUp -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => C:\Program Files (x86)\SugarSync\x64\SugarSyncShellExt_x64.dll (SugarSync, Inc.)

ShellIconOverlayIdentifiers: SugarSyncPending -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => C:\Program Files (x86)\SugarSync\x64\SugarSyncShellExt_x64.dll (SugarSync, Inc.)

ShellIconOverlayIdentifiers: SugarSyncRoot -> {39D54CC2-69CF-43b4-B167-577D25E7F496} => C:\Program Files (x86)\SugarSync\x64\SugarSyncShellExt_x64.dll (SugarSync, Inc.)

ShellIconOverlayIdentifiers: SugarSyncShared -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => C:\Program Files (x86)\SugarSync\x64\SugarSyncShellExt_x64.dll (SugarSync, Inc.)

ShellIconOverlayIdentifiers: SugarSyncSharedPending -> {F7395C2E-A5D8-4a32-9536-5C6A9F1DC450} => C:\Program Files (x86)\SugarSync\x64\SugarSyncShellExt_x64.dll (SugarSync, Inc.)

ShellIconOverlayIdentifiers-x32:  SkyDrivePro1 (ErrorConflict) -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)

ShellIconOverlayIdentifiers-x32:  SkyDrivePro2 (SyncInProgress) -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)

ShellIconOverlayIdentifiers-x32:  SkyDrivePro3 (InSync) -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Mike\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Mike\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Mike\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: DropboxExt4 -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Mike\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: EldosIconOverlay -> {69925D1B-6A0F-4413-861A-81AB98039DB9} => C:\Windows\SysWOW64\SSCbFsMntNtf3.dll (EldoS Corporation)

 

==================== Internet (Whitelisted) ====================

 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xEBEAC8AD19B1CD01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US

URLSearchHook: HKCU - SearchHook Class - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\AddressBarSearch64.dll (DeviceVM, Inc.)

URLSearchHook: HKCU - SearchHook Class - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll (DeviceVM, Inc.)

SearchScopes: HKCU - DefaultScope {D346F95E-5837-45cd-AFFC-71832F634D9D} URL = http://search.yahoo....icevm&type=EGMB

SearchScopes: HKCU - {B7F36141-9F36-492c-8409-CFF68B9EA7A1} URL = http://www.google.co...q={searchTerms}

SearchScopes: HKCU - {D346F95E-5837-45cd-AFFC-71832F634D9D} URL = http://search.yahoo....icevm&type=EGMB

BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)

BHO: AVG Safe Search -> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} ->  No File

BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)

BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)

BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)

BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll (Microsoft Corporation)

BHO-x32: AVG Safe Search -> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} ->  No File

BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)

BHO-x32: No Name -> {95B7759C-8C7F-4BF1-B163-73684A933233} ->  No File

BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

BHO-x32: FlashGetBHO -> {b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0} -> C:\Users\Mike\AppData\Roaming\FlashGetBHO\FlashGetBHO3.dll (Trend Media Group)

BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)

BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)

Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)

DPF: HKLM-x32 {0D41B8C5-2599-4893-8183-00195EC8D5F9} http://support.asus....k_sys_ctrl3.cab

Handler: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} -  No File

Handler: intu-help-qb7 - {5A03BD9D-766D-47A6-8E87-CD90F60BE245} -  No File

Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} -  No File

Handler: qbwc - {FC598A64-626C-4447-85B8-53150405FD57} -  No File

Handler-x32: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files (x86)\Belarc\BelarcAdvisor\System\BAVoilaX.dll (Belarc, Inc.)

Handler-x32: intu-help-qb7 - {5A03BD9D-766D-47A6-8E87-CD90F60BE245} - C:\Program Files (x86)\Intuit\QuickBooks 2014\HelpAsyncPluggableProtocol.dll (Intuit, Inc.)

Handler-x32: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} -  No File

Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)

Handler-x32: qbwc - {FC598A64-626C-4447-85B8-53150405FD57} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt

Tcpip\Parameters: [DhcpNameServer] 75.75.75.75 75.75.76.76

 

FireFox:

========

FF ProfilePath: C:\Users\Mike\AppData\Roaming\Mozilla\Firefox\Profiles\v3twe7z2.default

FF SelectedSearchEngine: AVG Secure Search

FF Homepage: about:home

FF Keyword.URL: user_pref("keyword.URL", "");

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin: @microsoft.com/GENUINE -> disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll No File

FF Plugin: adobe.com/AdobeAAMDetect_x86_64 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()

FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)

FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6 -> C:\Program Files (x86)\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)

FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File

FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF Plugin-x32: @xstandard.com/XStandard -> C:\Program Files (x86)\XStandard\Bin\NPXStandard.dll (Belus Technology Inc.)

FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)

FF Plugin HKCU: @asperasoft.com/AsperaConnect - C:\Users\Mike\AppData\Local\Programs\Aspera\Aspera Connect\lib\3.3.3\npasperaweb.dll (Aspera, Inc. )

FF Plugin HKCU: @citrixonline.com/appdetectorplugin - C:\Users\Mike\AppData\Local\Citrix\Plugins\104\npappdetector.dll (Citrix Online)

FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Mike\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Mike\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin HKCU: CouponNetwork.com/CMDUniversalCouponPrintActivator - C:\Users\Mike\AppData\Roaming\CATALI~2\NPBCSK~1.DLL (Catalina Marketing Corporation)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPcol400.dll (Catalina Marketing Corporation)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npCouponPrinter.dll (Coupons, Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMozCouponPrinter.dll (Coupons, Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)

FF Extension: Avira Browser Safety - C:\Users\Mike\AppData\Roaming\Mozilla\Firefox\Profiles\v3twe7z2.default\Extensions\[email protected] [2014-07-29]

FF Extension: Firebug - C:\Users\Mike\AppData\Roaming\Mozilla\Firefox\Profiles\v3twe7z2.default\Extensions\[email protected] [2011-09-19]

FF Extension: MeasureIt - C:\Users\Mike\AppData\Roaming\Mozilla\Firefox\Profiles\v3twe7z2.default\Extensions\{75CEEE46-9B64-46f8-94BF-54012DE155F0}.xpi [2012-03-23]

FF Extension: Download YouTube Videos as MP4 - C:\Users\Mike\AppData\Roaming\Mozilla\Firefox\Profiles\v3twe7z2.default\Extensions\{b9bfaf1c-a63f-47cd-8b9a-29526ced9060}.xpi [2014-01-16]

FF Extension: Web Developer - C:\Users\Mike\AppData\Roaming\Mozilla\Firefox\Profiles\v3twe7z2.default\Extensions\{c45c406e-ab73-11d8-be73-000a95be3b12}.xpi [2011-08-23]

FF Extension: flashget3 Extension - C:\Users\Mike\AppData\Roaming\Mozilla\Firefox\Profiles\v3twe7z2.default\Extensions\{DB9127A2-3381-41ec-82B3-1B6ED4C6F29A}.xpi [2011-08-19]

FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn

FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2014-02-17]

 

Chrome: 

=======

CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-05-22]

CHR Extension: (Adobe Acrobat - Create PDF) - C:\Users\Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2014-02-17]

CHR Extension: (Avira Browser Safety) - C:\Users\Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-07-25]

CHR Extension: (ActiveGS) - C:\Users\Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\nhndampajkkhamolmmnalddigpojomph [2014-05-15]

CHR Extension: (Google Wallet) - C:\Users\Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23]

CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2014-05-08]

CHR StartMenuInternet: Google Chrome - C:\Users\Mike\AppData\Local\Google\Chrome\Application\chrome.exe

 

==================== Services (Whitelisted) =================

 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

 

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-07-02] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-07-02] (Avira Operations GmbH & Co. KG)

R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.14\atkexComSvc.exe [922240 2011-06-13] ()

R2 ASDiskUnlocker; C:\Program Files (x86)\ASUS\Disk Unlocker\ASPFSVS64.exe [258688 2010-12-02] (ASUSTeK Computer Inc.)

R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.14\aaHMSvc.exe [915584 2010-12-01] ()

R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe [586880 2010-10-21] ()

R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [74912 2011-03-13] (Atheros Commnucations) [File not signed]

R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [141392 2014-07-14] (Avira Operations GmbH & Co. KG)

R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2356408 2014-06-19] (Microsoft Corporation)

R2 MacDrive9Service; C:\Program Files\Mediafour\MacDrive 9\MacDrive9Service.exe [187256 2013-09-30] (Mediafour Corporation)

R2 msoidsvc; C:\Program Files\Common Files\Microsoft Shared\Microsoft Online Services\MSOIDSVC.EXE [1380592 2013-04-29] (Microsoft Corp.)

R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-09] (NVIDIA Corporation)

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-09] (NVIDIA Corporation)

R2 QBCFMonitorService; C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe [45056 2014-06-26] (Intuit) [File not signed]

S3 QBFCService; C:\Program Files (x86)\Common Files\Intuit\QuickBooks\FCS\Intuit.QuickBooks.FCS.exe [65536 2013-10-10] (Intuit Inc.) [File not signed]

R2 QBVSS; C:\Program Files (x86)\Common Files\Intuit\DataProtect\QBIDPService.exe [1248256 2013-10-10] (Intuit Inc.) [File not signed]

R2 WDDMService; C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe [130560 2010-05-10] (WDC) [File not signed]

R2 WDFME; C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDFME\WDFME.exe [1858048 2010-05-10] () [File not signed]

R2 WDSC; C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSC.exe [483328 2010-05-10] () [File not signed]

R2 WSWNDA3100; C:\Program Files (x86)\NETGEAR\WNDA3100v2\WifiSvc.exe [272864 2010-08-19] ()

 

==================== Drivers (Whitelisted) ====================

 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

 

R0 AiChargerPlus; C:\Windows\System32\DRIVERS\AiChargerPlus.sys [14464 2010-11-08] (ASUSTek Computer Inc.)

R3 ASFLTDrv.sys; C:\Program Files (x86)\ASUS\Disk Unlocker\ASFLTDrv64.sys [16512 2010-09-16] (ASUSTeK Computer Inc.)

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-24] ()

R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] ()

R3 ASUSFILTER; C:\Windows\SysWow64\drivers\ASUSFILTER.sys [46152 2011-09-20] (MCCI Corporation)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-02] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-07-02] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-07-02] (Avira Operations GmbH & Co. KG)

R1 CBDisk; C:\Windows\system32\drivers\CBDisk.sys [70344 2011-05-06] (EldoS Corporation)

R0 MDFSYSNT; C:\Windows\System32\Drivers\MDFSYSNT.sys [328008 2013-09-30] (Mediafour Corporation)

R0 MDPMGRNT; C:\Windows\System32\DRIVERS\MDPMGRNT.SYS [41800 2013-08-01] (Mediafour Corporation)

S3 NPF; C:\Windows\System32\DRIVERS\npf.sys [47632 2010-02-03] (CACE Technologies, Inc.)

R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)

R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-06-22] (Corel Corporation)

R3 SSCBFS3; C:\Windows\System32\DRIVERS\sscbfs3.sys [347904 2013-01-30] (EldoS Corporation)

R1 VDiskBus; C:\Windows\System32\DRIVERS\VDiskBus64.sys [43136 2010-09-21] (ASUSTeK Computer Inc.)

 

==================== NetSvcs (Whitelisted) ===================

 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

 

 

==================== One Month Created Files and Folders ========

 

(If an entry is included in the fixlist, the file\folder will be moved.)

 

2014-08-04 15:39 - 2014-08-04 15:46 - 00032509 _____ () C:\Users\Mike\Downloads\FRST.txt

2014-08-04 15:39 - 2014-08-04 15:40 - 00000000 ____D () C:\FRST

2014-08-04 15:39 - 2014-08-04 15:39 - 02094080 _____ (Farbar) C:\Users\Mike\Downloads\FRST64.exe

2014-08-01 12:50 - 2014-05-14 12:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2014-08-01 12:50 - 2014-05-14 12:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2014-08-01 12:50 - 2014-05-14 12:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll

2014-08-01 12:50 - 2014-05-14 12:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2014-08-01 12:50 - 2014-05-14 12:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2014-08-01 12:50 - 2014-05-14 12:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2014-08-01 12:50 - 2014-05-14 12:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll

2014-08-01 12:50 - 2014-05-14 12:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2014-08-01 12:50 - 2014-05-14 12:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2014-08-01 12:50 - 2014-05-14 12:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll

2014-08-01 12:50 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2014-08-01 12:50 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll

2014-08-01 12:50 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2014-08-01 12:50 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe

2014-07-31 15:04 - 2014-07-31 15:05 - 09672134 _____ () C:\Users\Mike\Downloads\MultiFrame_1_1_0_3 (1).zip

2014-07-31 14:43 - 2014-07-31 14:43 - 00000000 ____D () C:\Users\Mike\AppData\Roaming\SystemRequirementsLab

2014-07-31 14:43 - 2014-07-31 14:43 - 00000000 ____D () C:\Program Files (x86)\SystemRequirementsLab

2014-07-31 14:40 - 2014-07-31 14:41 - 121166627 _____ () C:\Users\Mike\Desktop\Realtek_Audio_V51006251_V6016251_Windows.zip

2014-07-31 09:44 - 2014-07-31 09:44 - 00607678 _____ () C:\Users\Mike\Downloads\dynamic_arrow_background_vector_3_179154.zip

2014-07-30 13:37 - 2014-07-30 13:37 - 00317227 _____ () C:\Users\Mike\Downloads\backup_2014-07-30-1735_Lee_Plastic_Surgery_and_Laser_Ce_46c07d50b691-db.gz

2014-07-30 10:18 - 2014-07-30 10:18 - 00001443 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Illustrator CC 2014.lnk

2014-07-30 10:18 - 2014-07-30 10:18 - 00000000 ____D () C:\ProgramData\ALM

2014-07-30 08:56 - 2014-07-30 08:56 - 00005372 _____ () C:\Users\Mike\Downloads\php.dat

2014-07-30 08:44 - 2014-07-30 08:44 - 00000000 _____ () C:\Users\Mike\Downloads\php.ini

2014-07-29 12:01 - 2014-07-29 12:01 - 32775473 _____ () C:\Users\Mike\Downloads\backup_2014-07-29-1552_Lee_Plastic_Surgery_and_Laser_Ce_dcc1e85882f7-uploads.zip

2014-07-29 12:00 - 2014-07-29 12:00 - 19959748 _____ () C:\Users\Mike\Downloads\backup_2014-07-29-1552_Lee_Plastic_Surgery_and_Laser_Ce_dcc1e85882f7-plugins.zip

2014-07-29 12:00 - 2014-07-29 12:00 - 04478604 _____ () C:\Users\Mike\Downloads\backup_2014-07-29-1552_Lee_Plastic_Surgery_and_Laser_Ce_dcc1e85882f7-themes.zip

2014-07-29 11:59 - 2014-07-29 11:59 - 00319954 _____ () C:\Users\Mike\Downloads\backup_2014-07-29-1552_Lee_Plastic_Surgery_and_Laser_Ce_dcc1e85882f7-db.gz

2014-07-29 11:46 - 2014-07-30 13:53 - 00000000 ____D () C:\Users\Mike\Desktop\lee

2014-07-29 11:12 - 2014-07-29 11:12 - 00546794 _____ () C:\Users\Mike\Downloads\toothbrush_vector_266391.zip

2014-07-29 10:50 - 2014-07-29 10:50 - 00225668 _____ () C:\Users\Mike\Documents\cc_20140729_105023.reg

2014-07-29 10:36 - 2014-07-29 10:36 - 14725120 _____ () C:\Users\Mike\Downloads\IPDT_Installer_2.8.0.0-1_x86_2.10.0.0.MP-1_x64.exe

2014-07-29 10:36 - 2014-07-29 10:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel Corporation

2014-07-29 10:36 - 2014-07-29 10:36 - 00000000 ____D () C:\Program Files\Intel Corporation

2014-07-29 09:55 - 2014-07-29 09:55 - 00001057 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Content Viewer.lnk

2014-07-28 15:37 - 2014-07-28 15:55 - 3320903680 _____ () C:\Users\Mike\Downloads\X17-59186.iso

2014-07-28 15:30 - 2014-07-28 15:30 - 00002096 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Belarc Advisor.lnk

2014-07-28 15:30 - 2014-07-28 15:30 - 00002084 _____ () C:\Users\Public\Desktop\Belarc Advisor.lnk

2014-07-28 15:30 - 2014-07-28 15:30 - 00000000 ____D () C:\Program Files (x86)\Belarc

2014-07-28 15:29 - 2014-07-28 15:29 - 03357248 _____ () C:\Users\Mike\Downloads\advisorinstaller.exe

2014-07-28 15:24 - 2014-07-28 15:24 - 00244120 _____ () C:\Users\Mike\Downloads\Firefox Setup Stub 31.0.exe

2014-07-28 15:24 - 2014-07-28 15:24 - 00001123 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk

2014-07-28 15:24 - 2014-07-28 15:24 - 00001111 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk

2014-07-28 15:24 - 2014-07-28 15:24 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2014-07-28 14:27 - 2014-07-28 14:27 - 00602112 _____ (OldTimer Tools) C:\Users\Mike\Downloads\OTL (1).exe

2014-07-28 14:18 - 2014-07-28 14:18 - 00602112 _____ (OldTimer Tools) C:\Users\Mike\Downloads\OTL.exe

2014-07-25 15:59 - 2014-07-25 15:59 - 01660981 _____ () C:\Users\Mike\Downloads\Channel Art Template (Photoshop)

2014-07-25 15:33 - 2014-07-25 15:33 - 00000000 ____D () C:\Users\Mike\.android

2014-07-25 13:47 - 2014-07-25 13:47 - 01157243 _____ () C:\Users\Mike\Downloads\check_marks.zip

2014-07-25 13:46 - 2014-07-25 13:46 - 00208737 _____ () C:\Users\Mike\Downloads\3d_checkmark_vector.zip

2014-07-25 12:17 - 2014-07-25 12:17 - 00000000 ____D () C:\Program Files\ASUS

2014-07-25 12:17 - 2011-09-20 12:25 - 00046152 _____ (MCCI Corporation) C:\Windows\SysWOW64\Drivers\ASUSFILTER.sys

2014-07-25 12:14 - 2010-11-08 14:57 - 00014464 _____ (ASUSTek Computer Inc.) C:\Windows\system32\Drivers\AiChargerPlus.sys

2014-07-25 12:13 - 2014-07-25 13:25 - 00000000 ____D () C:\Windows\System32\Tasks\ASUS

2014-07-25 12:07 - 2014-07-25 12:12 - 380509121 _____ () C:\Users\Mike\Downloads\AISuite_II_V10203_Z68_XPVistaWin7.zip

2014-07-25 12:05 - 2014-07-25 12:05 - 00001273 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk

2014-07-25 12:05 - 2014-07-25 12:05 - 00001261 _____ () C:\Users\Public\Desktop\Adobe Creative Cloud.lnk

2014-07-24 16:16 - 2014-07-24 16:16 - 00000000 ____D () C:\Users\Mike\AppData\Roaming\Avira

2014-07-24 16:12 - 2014-07-24 16:11 - 00042040 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2014-07-24 16:10 - 2014-07-02 13:06 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2014-07-24 16:10 - 2014-07-02 13:06 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2014-07-24 16:10 - 2014-07-02 13:06 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

2014-07-24 16:08 - 2014-07-24 16:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2014-07-24 16:08 - 2014-07-24 16:10 - 00000000 ____D () C:\ProgramData\Avira

2014-07-24 16:08 - 2014-07-24 16:10 - 00000000 ____D () C:\Program Files (x86)\Avira

2014-07-24 16:08 - 2014-07-24 16:08 - 00001093 _____ () C:\Users\Public\Desktop\Avira.lnk

2014-07-24 16:05 - 2014-08-04 15:36 - 00001848 _____ () C:\Windows\setupact.log

2014-07-24 16:05 - 2014-07-24 16:05 - 00000000 _____ () C:\Windows\setuperr.log

2014-07-24 16:04 - 2014-07-28 15:15 - 00134806 _____ () C:\Windows\PFRO.log

2014-07-24 13:04 - 2014-07-24 13:04 - 00108964 _____ () C:\Users\Mike\Documents\cc_20140724_130411.reg

2014-07-24 09:07 - 2014-07-24 09:07 - 00000000 ____D () C:\Users\Mike\AppData\Roaming\Oracle

2014-07-24 09:02 - 2014-07-11 03:02 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-07-24 09:02 - 2014-07-11 02:56 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-07-24 09:02 - 2014-07-11 02:56 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-07-24 09:02 - 2014-07-11 02:55 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-07-24 09:01 - 2014-07-24 09:02 - 00004489 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log

2014-07-23 10:00 - 2014-07-23 10:01 - 05981830 _____ (Tim Kosse) C:\Users\Mike\Downloads\FileZilla_3.9.0.1_win32-setup.exe

2014-07-10 14:23 - 2014-07-10 14:23 - 01896002 _____ () C:\Users\Mike\Downloads\dental_care_lovely_illustrations_vector_156567.zip

2014-07-10 14:19 - 2014-07-10 14:19 - 00004044 _____ () C:\Users\Mike\Downloads\smile.zip

2014-07-10 10:56 - 2014-07-10 10:57 - 114110385 _____ () C:\Users\Mike\Downloads\wetransfer-536be3.zip

2014-07-09 11:47 - 2014-07-23 11:16 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-07-09 11:47 - 2014-07-09 11:47 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Mike\Downloads\mbam-setup-2.0.2.1012.exe

2014-07-09 11:47 - 2014-07-09 11:47 - 00001066 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-07-09 11:47 - 2014-07-09 11:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-07-09 11:47 - 2014-07-09 11:47 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-07-09 11:47 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-07-09 11:47 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2014-07-09 11:47 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-07-09 11:30 - 2014-07-09 11:30 - 01574231 _____ () C:\Users\Mike\Downloads\powtoon-c4NwgPzzOcd.mp4

2014-07-09 09:02 - 2014-06-29 22:09 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-07-09 09:02 - 2014-06-29 22:04 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-07-09 09:02 - 2014-06-17 22:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe

2014-07-09 09:02 - 2014-06-17 21:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe

2014-07-09 09:02 - 2014-06-17 21:10 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-07-09 09:02 - 2014-06-06 06:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll

2014-07-09 09:02 - 2014-06-06 05:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll

2014-07-09 09:02 - 2014-05-30 04:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2014-07-09 09:02 - 2014-05-30 04:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2014-07-09 09:02 - 2014-05-30 04:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2014-07-09 09:02 - 2014-05-30 04:08 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2014-07-09 09:02 - 2014-05-30 04:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2014-07-09 09:02 - 2014-05-30 04:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2014-07-09 09:02 - 2014-05-30 04:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2014-07-09 09:02 - 2014-05-30 03:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2014-07-09 09:02 - 2014-05-30 03:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2014-07-09 09:02 - 2014-05-30 03:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2014-07-09 09:02 - 2014-05-30 03:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2014-07-09 09:02 - 2014-05-30 03:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2014-07-09 09:02 - 2014-05-30 03:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2014-07-09 09:02 - 2014-05-30 03:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2014-07-09 09:02 - 2014-05-30 02:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys

2014-07-09 09:01 - 2014-06-20 16:14 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-07-09 09:01 - 2014-06-20 15:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-07-09 09:01 - 2014-06-18 21:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-07-09 09:01 - 2014-06-18 21:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-07-09 09:01 - 2014-06-18 21:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-07-09 09:01 - 2014-06-18 20:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-07-09 09:01 - 2014-06-18 20:42 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-07-09 09:01 - 2014-06-18 20:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-07-09 09:01 - 2014-06-18 20:41 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-07-09 09:01 - 2014-06-18 20:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-07-09 09:01 - 2014-06-18 20:32 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-07-09 09:01 - 2014-06-18 20:31 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-07-09 09:01 - 2014-06-18 20:26 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-07-09 09:01 - 2014-06-18 20:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-07-09 09:01 - 2014-06-18 20:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-07-09 09:01 - 2014-06-18 20:23 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-07-09 09:01 - 2014-06-18 20:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-07-09 09:01 - 2014-06-18 20:14 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-07-09 09:01 - 2014-06-18 20:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-07-09 09:01 - 2014-06-18 19:59 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-07-09 09:01 - 2014-06-18 19:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-07-09 09:01 - 2014-06-18 19:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-07-09 09:01 - 2014-06-18 19:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-07-09 09:01 - 2014-06-18 19:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-07-09 09:01 - 2014-06-18 19:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-07-09 09:01 - 2014-06-18 19:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-07-09 09:01 - 2014-06-18 19:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-07-09 09:01 - 2014-06-18 19:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-07-09 09:01 - 2014-06-18 19:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-07-09 09:01 - 2014-06-18 19:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-07-09 09:01 - 2014-06-18 19:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-07-09 09:01 - 2014-06-18 19:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-07-09 09:01 - 2014-06-18 19:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-07-09 09:01 - 2014-06-18 19:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-07-09 09:01 - 2014-06-18 19:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-07-09 09:01 - 2014-06-18 19:27 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2014-07-09 09:01 - 2014-06-18 19:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-07-09 09:01 - 2014-06-18 19:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-07-09 09:01 - 2014-06-18 19:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-07-09 09:01 - 2014-06-18 19:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-07-09 09:01 - 2014-06-18 19:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-07-09 09:01 - 2014-06-18 19:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-07-09 09:01 - 2014-06-18 18:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-07-09 09:01 - 2014-06-18 18:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-07-09 09:01 - 2014-06-18 18:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-07-09 09:01 - 2014-06-18 18:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-07-09 09:01 - 2014-06-18 18:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-07-09 09:01 - 2014-06-18 18:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-07-09 09:01 - 2014-06-18 18:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2014-07-09 09:01 - 2014-06-18 18:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-07-09 09:01 - 2014-06-18 18:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-07-09 09:01 - 2014-06-18 18:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-07-09 09:01 - 2014-06-18 18:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-07-09 09:01 - 2014-06-18 18:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-07-09 09:01 - 2014-06-18 18:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-07-09 09:01 - 2014-06-18 18:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-07-09 09:01 - 2014-06-05 10:45 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2014-07-09 09:01 - 2014-06-05 10:26 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2014-07-09 09:01 - 2014-06-05 10:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2014-07-08 12:50 - 2014-07-08 12:50 - 00000000 ____D () C:\Users\Mike\AppData\OICE_15_974FA576_32C1D314_2218

 

==================== One Month Modified Files and Folders =======

 

(If an entry is included in the fixlist, the file\folder will be moved.)

 

2014-08-04 15:46 - 2014-08-04 15:39 - 00032509 _____ () C:\Users\Mike\Downloads\FRST.txt

2014-08-04 15:46 - 2011-08-16 20:32 - 00000000 ____D () C:\Users\Mike\AppData\Local\Adobe

2014-08-04 15:45 - 2011-08-17 04:25 - 01624771 _____ () C:\Windows\WindowsUpdate.log

2014-08-04 15:44 - 2009-07-14 00:45 - 00032096 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-08-04 15:44 - 2009-07-14 00:45 - 00032096 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-08-04 15:43 - 2014-01-14 14:39 - 00000000 ____D () C:\Users\Mike\AppData\Local\5B7A4371-BBE6-4110-AC38-E2367544D028.aplzod

2014-08-04 15:40 - 2014-08-04 15:39 - 00000000 ____D () C:\FRST

2014-08-04 15:39 - 2014-08-04 15:39 - 02094080 _____ (Farbar) C:\Users\Mike\Downloads\FRST64.exe

2014-08-04 15:36 - 2014-07-24 16:05 - 00001848 _____ () C:\Windows\setupact.log

2014-08-04 15:36 - 2011-08-16 01:37 - 00000000 ____D () C:\ProgramData\NVIDIA

2014-08-04 15:36 - 2009-07-14 01:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-08-01 15:02 - 2012-07-20 08:33 - 00000904 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3792360265-3893795978-4202015960-1000UA.job

2014-08-01 14:59 - 2012-06-01 14:14 - 00000000 ___RD () C:\Users\Mike\Desktop\Dropbox

2014-08-01 14:59 - 2012-06-01 14:11 - 00000000 ____D () C:\Users\Mike\AppData\Roaming\Dropbox

2014-08-01 14:59 - 2011-08-16 01:30 - 00000000 ____D () C:\Users\Mike

2014-08-01 14:36 - 2014-03-18 14:53 - 00000556 _____ () C:\Windows\Tasks\G2MUpdateTask-S-1-5-21-3792360265-3893795978-4202015960-1000.job

2014-08-01 14:34 - 2012-04-04 08:30 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-08-01 14:26 - 2012-06-12 13:32 - 00000000 ____D () C:\Users\Mike\AppData\Local\SugarSync

2014-08-01 14:02 - 2014-06-23 14:30 - 00000033 _____ () C:\Users\Mike\AppData\Roaming\AdobeWLCMCache.dat

2014-07-31 15:33 - 2014-01-23 12:23 - 00001456 _____ () C:\Users\Mike\AppData\Local\Adobe Save for Web 13.0 Prefs

2014-07-31 15:20 - 2009-07-14 01:13 - 00786578 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-07-31 15:05 - 2014-07-31 15:04 - 09672134 _____ () C:\Users\Mike\Downloads\MultiFrame_1_1_0_3 (1).zip

2014-07-31 14:43 - 2014-07-31 14:43 - 00000000 ____D () C:\Users\Mike\AppData\Roaming\SystemRequirementsLab

2014-07-31 14:43 - 2014-07-31 14:43 - 00000000 ____D () C:\Program Files (x86)\SystemRequirementsLab

2014-07-31 14:41 - 2014-07-31 14:40 - 121166627 _____ () C:\Users\Mike\Desktop\Realtek_Audio_V51006251_V6016251_Windows.zip

2014-07-31 09:44 - 2014-07-31 09:44 - 00607678 _____ () C:\Users\Mike\Downloads\dynamic_arrow_background_vector_3_179154.zip

2014-07-31 08:02 - 2012-07-20 08:33 - 00000852 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3792360265-3893795978-4202015960-1000Core.job

2014-07-31 07:59 - 2011-09-13 12:09 - 00000000 ____D () C:\Program Files (x86)\FileZilla FTP Client

2014-07-30 15:37 - 2011-09-13 12:09 - 00000000 ____D () C:\Users\Mike\AppData\Roaming\FileZilla

2014-07-30 13:53 - 2014-07-29 11:46 - 00000000 ____D () C:\Users\Mike\Desktop\lee

2014-07-30 13:37 - 2014-07-30 13:37 - 00317227 _____ () C:\Users\Mike\Downloads\backup_2014-07-30-1735_Lee_Plastic_Surgery_and_Laser_Ce_46c07d50b691-db.gz

2014-07-30 10:18 - 2014-07-30 10:18 - 00001443 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Illustrator CC 2014.lnk

2014-07-30 10:18 - 2014-07-30 10:18 - 00000000 ____D () C:\ProgramData\ALM

2014-07-30 10:18 - 2011-08-23 15:01 - 00000000 ____D () C:\Program Files\Adobe

2014-07-30 08:56 - 2014-07-30 08:56 - 00005372 _____ () C:\Users\Mike\Downloads\php.dat

2014-07-30 08:44 - 2014-07-30 08:44 - 00000000 _____ () C:\Users\Mike\Downloads\php.ini

2014-07-30 08:29 - 2012-06-01 14:14 - 00001013 _____ () C:\Users\Mike\Desktop\Dropbox.lnk

2014-07-30 08:29 - 2012-06-01 14:12 - 00000000 ____D () C:\Users\Mike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

2014-07-29 14:21 - 2011-09-13 12:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client

2014-07-29 13:57 - 2011-08-24 07:30 - 00000000 ____D () C:\Users\Mike\AppData\Local\CrashDumps

2014-07-29 12:01 - 2014-07-29 12:01 - 32775473 _____ () C:\Users\Mike\Downloads\backup_2014-07-29-1552_Lee_Plastic_Surgery_and_Laser_Ce_dcc1e85882f7-uploads.zip

2014-07-29 12:00 - 2014-07-29 12:00 - 19959748 _____ () C:\Users\Mike\Downloads\backup_2014-07-29-1552_Lee_Plastic_Surgery_and_Laser_Ce_dcc1e85882f7-plugins.zip

2014-07-29 12:00 - 2014-07-29 12:00 - 04478604 _____ () C:\Users\Mike\Downloads\backup_2014-07-29-1552_Lee_Plastic_Surgery_and_Laser_Ce_dcc1e85882f7-themes.zip

2014-07-29 11:59 - 2014-07-29 11:59 - 00319954 _____ () C:\Users\Mike\Downloads\backup_2014-07-29-1552_Lee_Plastic_Surgery_and_Laser_Ce_dcc1e85882f7-db.gz

2014-07-29 11:12 - 2014-07-29 11:12 - 00546794 _____ () C:\Users\Mike\Downloads\toothbrush_vector_266391.zip

2014-07-29 10:50 - 2014-07-29 10:50 - 00225668 _____ () C:\Users\Mike\Documents\cc_20140729_105023.reg

2014-07-29 10:36 - 2014-07-29 10:36 - 14725120 _____ () C:\Users\Mike\Downloads\IPDT_Installer_2.8.0.0-1_x86_2.10.0.0.MP-1_x64.exe

2014-07-29 10:36 - 2014-07-29 10:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel Corporation

2014-07-29 10:36 - 2014-07-29 10:36 - 00000000 ____D () C:\Program Files\Intel Corporation

2014-07-29 09:55 - 2014-07-29 09:55 - 00001057 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Content Viewer.lnk

2014-07-29 09:55 - 2011-08-16 20:32 - 00000000 ____D () C:\Program Files (x86)\Adobe

2014-07-29 09:35 - 2011-08-23 15:01 - 00000000 ____D () C:\Program Files\Common Files\Adobe

2014-07-29 08:40 - 2011-08-16 02:44 - 00000000 ____D () C:\Users\Mike\AppData\Roaming\Adobe

2014-07-28 15:55 - 2014-07-28 15:37 - 3320903680 _____ () C:\Users\Mike\Downloads\X17-59186.iso

2014-07-28 15:30 - 2014-07-28 15:30 - 00002096 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Belarc Advisor.lnk

2014-07-28 15:30 - 2014-07-28 15:30 - 00002084 _____ () C:\Users\Public\Desktop\Belarc Advisor.lnk

2014-07-28 15:30 - 2014-07-28 15:30 - 00000000 ____D () C:\Program Files (x86)\Belarc

2014-07-28 15:29 - 2014-07-28 15:29 - 03357248 _____ () C:\Users\Mike\Downloads\advisorinstaller.exe

2014-07-28 15:24 - 2014-07-28 15:24 - 00244120 _____ () C:\Users\Mike\Downloads\Firefox Setup Stub 31.0.exe

2014-07-28 15:24 - 2014-07-28 15:24 - 00001123 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk

2014-07-28 15:24 - 2014-07-28 15:24 - 00001111 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk

2014-07-28 15:24 - 2014-07-28 15:24 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2014-07-28 15:24 - 2011-08-16 20:19 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-07-28 15:15 - 2014-07-24 16:04 - 00134806 _____ () C:\Windows\PFRO.log

2014-07-28 14:27 - 2014-07-28 14:27 - 00602112 _____ (OldTimer Tools) C:\Users\Mike\Downloads\OTL (1).exe

2014-07-28 14:18 - 2014-07-28 14:18 - 00602112 _____ (OldTimer Tools) C:\Users\Mike\Downloads\OTL.exe

2014-07-28 12:57 - 2013-04-05 13:56 - 00007611 _____ () C:\Users\Mike\AppData\Local\Resmon.ResmonCfg

2014-07-25 16:03 - 2011-09-09 10:22 - 00000000 ____D () C:\Users\Mike\AppData\Roaming\ColorImpact4

2014-07-25 15:59 - 2014-07-25 15:59 - 01660981 _____ () C:\Users\Mike\Downloads\Channel Art Template (Photoshop)

2014-07-25 15:33 - 2014-07-25 15:33 - 00000000 ____D () C:\Users\Mike\.android

2014-07-25 13:47 - 2014-07-25 13:47 - 01157243 _____ () C:\Users\Mike\Downloads\check_marks.zip

2014-07-25 13:46 - 2014-07-25 13:46 - 00208737 _____ () C:\Users\Mike\Downloads\3d_checkmark_vector.zip

2014-07-25 13:25 - 2014-07-25 12:13 - 00000000 ____D () C:\Windows\System32\Tasks\ASUS

2014-07-25 12:34 - 2011-08-16 02:40 - 05189904 _____ () C:\Windows\PE_Rom.dll

2014-07-25 12:34 - 2011-08-16 02:40 - 00000000 _____ () C:\Windows\Path.idx

2014-07-25 12:17 - 2014-07-25 12:17 - 00000000 ____D () C:\Program Files\ASUS

2014-07-25 12:17 - 2011-08-16 02:11 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2014-07-25 12:17 - 2011-08-16 02:07 - 00000000 ____D () C:\Program Files (x86)\Intel

2014-07-25 12:14 - 2011-08-16 02:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS

2014-07-25 12:12 - 2014-07-25 12:07 - 380509121 _____ () C:\Users\Mike\Downloads\AISuite_II_V10203_Z68_XPVistaWin7.zip

2014-07-25 12:05 - 2014-07-25 12:05 - 00001273 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk

2014-07-25 12:05 - 2014-07-25 12:05 - 00001261 _____ () C:\Users\Public\Desktop\Adobe Creative Cloud.lnk

2014-07-24 16:16 - 2014-07-24 16:16 - 00000000 ____D () C:\Users\Mike\AppData\Roaming\Avira

2014-07-24 16:11 - 2014-07-24 16:12 - 00042040 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2014-07-24 16:10 - 2014-07-24 16:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2014-07-24 16:10 - 2014-07-24 16:08 - 00000000 ____D () C:\ProgramData\Avira

2014-07-24 16:10 - 2014-07-24 16:08 - 00000000 ____D () C:\Program Files (x86)\Avira

2014-07-24 16:08 - 2014-07-24 16:08 - 00001093 _____ () C:\Users\Public\Desktop\Avira.lnk

2014-07-24 16:08 - 2014-03-24 08:58 - 00000000 ____D () C:\ProgramData\Package Cache

2014-07-24 16:06 - 2009-07-14 00:45 - 11985120 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-07-24 16:05 - 2014-07-24 16:05 - 00000000 _____ () C:\Windows\setuperr.log

2014-07-24 16:04 - 2013-09-20 08:43 - 00000000 ____D () C:\ProgramData\AVG2014

2014-07-24 16:04 - 2011-08-16 20:15 - 00000000 ____D () C:\Program Files (x86)\AVG

2014-07-24 16:04 - 2011-08-16 20:08 - 00000000 ____D () C:\ProgramData\MFAData

2014-07-24 16:01 - 2011-08-16 20:31 - 00000000 ____D () C:\ProgramData\Adobe

2014-07-24 15:37 - 2012-05-14 09:37 - 00000000 ___HD () C:\$AVG

2014-07-24 13:06 - 2011-08-23 14:56 - 00000000 ____D () C:\Windows\pss

2014-07-24 13:04 - 2014-07-24 13:04 - 00108964 _____ () C:\Users\Mike\Documents\cc_20140724_130411.reg

2014-07-24 12:58 - 2012-01-13 09:16 - 00000000 ____D () C:\Windows\Minidump

2014-07-24 11:18 - 2012-05-18 13:02 - 00000000 ____D () C:\Program Files\Microsoft Silverlight

2014-07-24 11:18 - 2012-05-18 13:02 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight

2014-07-24 11:13 - 2012-05-18 13:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

2014-07-24 09:07 - 2014-07-24 09:07 - 00000000 ____D () C:\Users\Mike\AppData\Roaming\Oracle

2014-07-24 09:02 - 2014-07-24 09:01 - 00004489 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log

2014-07-24 09:02 - 2013-11-04 14:14 - 00000000 ____D () C:\ProgramData\Oracle

2014-07-24 09:02 - 2011-08-26 10:24 - 00000000 ____D () C:\Program Files (x86)\Java

2014-07-23 11:16 - 2014-07-09 11:47 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-07-23 10:01 - 2014-07-23 10:00 - 05981830 _____ (Tim Kosse) C:\Users\Mike\Downloads\FileZilla_3.9.0.1_win32-setup.exe

2014-07-22 06:55 - 2009-07-14 01:08 - 00032586 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2014-07-17 09:50 - 2014-03-18 14:53 - 00003578 _____ () C:\Windows\System32\Tasks\G2MUpdateTask-S-1-5-21-3792360265-3893795978-4202015960-1000

2014-07-11 16:05 - 2012-12-07 10:03 - 00000000 ___HD () C:\Users\Mike\Documents\Money Market

2014-07-11 07:50 - 2013-12-10 09:32 - 00000000 ____D () C:\Program Files\Microsoft Office 15

2014-07-11 03:02 - 2014-07-24 09:02 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-07-11 02:56 - 2014-07-24 09:02 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-07-11 02:56 - 2014-07-24 09:02 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-07-11 02:55 - 2014-07-24 09:02 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-07-10 14:42 - 2011-08-16 23:01 - 00000090 _____ () C:\Windows\QBChanUtil_Trigger.ini

2014-07-10 14:23 - 2014-07-10 14:23 - 01896002 _____ () C:\Users\Mike\Downloads\dental_care_lovely_illustrations_vector_156567.zip

2014-07-10 14:19 - 2014-07-10 14:19 - 00004044 _____ () C:\Users\Mike\Downloads\smile.zip

2014-07-10 10:57 - 2014-07-10 10:56 - 114110385 _____ () C:\Users\Mike\Downloads\wetransfer-536be3.zip

2014-07-10 07:57 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\rescache

2014-07-10 07:05 - 2014-05-07 03:01 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-07-10 07:05 - 2010-11-21 03:17 - 00000000 ____D () C:\Program Files\Windows Journal

2014-07-10 07:05 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism

2014-07-10 07:05 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\system32\Dism

2014-07-09 18:04 - 2013-08-14 16:09 - 00000000 ____D () C:\Windows\system32\MRT

2014-07-09 18:02 - 2011-08-16 01:45 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-07-09 11:47 - 2014-07-09 11:47 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Mike\Downloads\mbam-setup-2.0.2.1012.exe

2014-07-09 11:47 - 2014-07-09 11:47 - 00001066 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-07-09 11:47 - 2014-07-09 11:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-07-09 11:47 - 2014-07-09 11:47 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-07-09 11:47 - 2013-04-02 09:41 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-07-09 11:30 - 2014-07-09 11:30 - 01574231 _____ () C:\Users\Mike\Downloads\powtoon-c4NwgPzzOcd.mp4

2014-07-08 14:34 - 2014-05-14 10:34 - 11204096 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe

2014-07-08 14:34 - 2012-04-04 08:30 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-07-08 14:34 - 2012-04-04 08:30 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-07-08 14:34 - 2011-08-16 20:54 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-07-08 12:50 - 2014-07-08 12:50 - 00000000 ____D () C:\Users\Mike\AppData\OICE_15_974FA576_32C1D314_2218

 

Some content of TEMP:

====================

C:\Users\Mike\AppData\Local\Temp\avgnt.exe

C:\Users\Mike\AppData\Local\Temp\CreativeCloudSet-Up.exe

C:\Users\Mike\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp4fjcjx.dll

C:\Users\Mike\AppData\Local\Temp\setup.exe

C:\Users\Mike\AppData\Local\Temp\setup64.exe

C:\Users\Mike\AppData\Local\Temp\UNINSTALL.EXE

 

 

==================== Bamital & volsnap Check =================

 

(There is no automatic fix for files that do not pass verification.)

 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

 

 

LastRegBack: 2014-07-28 09:20

 

==================== End Of Log ============================

[Essexboy]

As it stands I can see no malware that would cause the problems you describe.  RAM and free disc space look good.  Does this happen over a period of time from the boot or is it all the time

 

CAUTION :  This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

BHO-x32: No Name -> {95B7759C-8C7F-4BF1-B163-73684A933233} ->  No File

CMD: bitsadmin /reset /allusers
CMD: DEL %TEMP%\*.* /F /S /Q
CMD: RD /S /Q %TEMP%
REBOOT:

Save this as fixlist.txt, in the same location as FRST.exe
Run FRST and press Fix
On completion a log will be generated please post that

[nofx1728]

I'm getting an error saying the post is too long.  There doesn't appear to be a single trigger that sets off the lag.  It definitely occurs when I'm downloading something - but it occurs at other points as well.

[Essexboy]

As the post is so long I would assume that it is the contents of the temp files that is filling it up

Could you now defragment the system drive then reboot and let me know how the system is behaving

Download aswMBR.exe ( 4.5mb ) to your desktop.
Double click the aswMBR.exe to run it.
You may be offered the option of using virtualisation, accept that
When it offers to download the virus database allow that as well
Click the "Scan" button to start scan




On completion of the scan click save log, save it to your desktop and post in your next reply

[nofx1728]

It appears that it is definitely running smoother.  But it has only been a short period of time as well.  Thanks so much for all of your help.

 

aswMBR version 1.0.1.2041 Copyright© 2014 AVAST Software

Run date: 2014-08-07 15:33:59

-----------------------------

15:33:59.130    OS Version: Windows x64 6.1.7601 Service Pack 1

15:33:59.130    Number of processors: 8 586 0x2A07

15:33:59.130    ComputerName: MIKE-PC  UserName: Mike

15:33:59.501    Initialize success

15:33:59.501    VM: initialized successfully

15:33:59.505    VM: Intel CPU BiosDisabled 

15:34:02.523    VM: disk I/O mv91xx.sys

15:34:16.583    AVAST engine defs: 14080700

15:34:20.880    Disk 0  \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-0

15:34:20.883    Disk 0 Vendor: Intel___ 1.0. Size: 610486MB BusType: 8

15:34:20.887    Disk 1  \Device\Harddisk1\DR1 -> \Device\Ide\IAAStorageDevice-1

15:34:20.890    Disk 1 Vendor: Intel___ 1.0. Size: 2861594MB BusType: 8

15:34:20.894    Disk 2 (boot) \Device\Harddisk2\DR2 -> \Device\Scsi\mv91xx1Port2Path0Target0Lun0

15:34:20.898    Disk 2 Vendor: SAMSUNG_ 1AR1 Size: 305245MB BusType: 11

15:34:20.991    Disk 2 MBR read successfully

15:34:20.996    Disk 2 MBR scan

15:34:21.004    Disk 2 Windows 7 default MBR code

15:34:21.012    Disk 2 Partition 1 80 (A) 07    HPFS/NTFS NTFS          100 MB offset 2048

15:34:21.018    Disk 2 default boot code

15:34:21.023    Disk 2 Partition 2 00     07    HPFS/NTFS NTFS       305143 MB offset 206848

15:34:21.033    Disk 2 scanning C:\Windows\system32\drivers

15:34:30.946    Service scanning

15:34:51.136    Modules scanning

15:34:51.146    Disk 2 trace - called modules:

15:34:51.160    ntoskrnl.exe CLASSPNP.SYS disk.sys SCSIPORT.SYS hal.dll mv91xx.sys 

15:34:51.168    1 nt!IofCallDriver -> \Device\Harddisk2\DR2[0xfffffa800e9d1060]

15:34:51.176    3 CLASSPNP.SYS[fffff88001ee843f] -> nt!IofCallDriver -> \Device\Scsi\mv91xx1Port2Path0Target0Lun0[0xfffffa800d580050]

15:34:51.486    AVAST engine scan C:\Windows

15:34:52.941    AVAST engine scan C:\Windows\system32

15:37:32.855    AVAST engine scan C:\Windows\system32\drivers

15:37:43.824    AVAST engine scan C:\Users\Mike

15:52:56.592    Disk 2 MBR has been saved successfully to "C:\Users\Mike\Downloads\MBR.dat"

15:52:56.598    The log file has been saved successfully to "C:\Users\Mike\Downloads\aswMBR1.txt"

[Essexboy]

Could you now run it for a day or so and let me know how it is behaving.   There is no apparent malware on the system so I will tidy up my tools.  But, as I say let me know if there is any change

Subject to no further problems

I will remove my tools now and give some recommendations, but, I would like you to run for 24 hours or so and come back if you have any problems

Now the best part of the day ----- Your log now appears clean

A good workman always cleans up after himself so..The following will implement some cleanup procedures as well as reset System Restore points:

Download and run Delfix




: Keep Java Updated :

WARNING: Java is the #1 exploited program at this time. The Department of Homeland Security recommends that computer users disable Java
See this article

I would recommend that you completely uninstall Java unless you need it to run an important software.
In that instance I would recommend that you disable Java in your browsers until you need it for that software and then enable it. (See How to diasble Java in your web browser and How to unplug Java from the browser)

Now that you are clean, to help protect your computer in the future I recommend that you get the following free programmes:

CryptoPrevent install this programme to lock down and prevent crypto ransome ware



Malwarebytes.

Update and run weekly to keep your system clean


It is critical to have both a firewall and anti virus to protect your system and to keep them updated.

To learn more about how to protect yourself while on the internet read this little guide Best security practices Keep safe

[nofx1728]

Appears to be running good.  No issues today.  Thanks for everything!!!!

[Essexboy]

My pleasure

[Essexboy]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.