Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

trouble removing three trojans [Solved]

Started by azul20 , Aug 14 2014 05:33 PM

This topic is locked

#1
azul20

Posted 14 August 2014 - 05:33 PM

Member

Member
122 posts

Hello,

I am having trouble removing a few Trojans on my laptop. Emsisoft anti-malware has picked them up, but it is unable to remove them. I have tried AVG and malware bytes in safe mode, but they will not pick anything up. Also, I have used the ESET on-line scanner, but that didn't find anything either. My system is running extremely slow, and it is difficult to open applications without restarting the computer a few times. Can someone please suggest a way to get rid of this problem and have my system back to normal.

Thank you for your time.

#2
Essexboy

Posted 15 August 2014 - 06:35 AM

GeekU Moderator

Retired Staff
69,964 posts

Hi I will need to look at the system first, what is Emisoft reporting ?

Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
Select additions at the bottom
Press Scan button.
It will produce a log called FRST.txt in the same directory the tool is run from.
Please attach both logs generated.

#3
azul20

Posted 15 August 2014 - 04:03 PM

Member

Topic Starter
Member
122 posts

Hello,

Here are the two logs that were produced. After I ran the scan, my computer froze, and I had to force a restart. Thank you for helping me.

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-08-2014

Ran by TFOX (administrator) on FOX on 15-08-2014 13:41:44

Running from C:\Users\TFOX\Desktop

Platform: Windows 8.1 (X64) OS Language: English (United States)

Internet Explorer Version 11

Boot Mode: Normal

The only official download link for FRST:

Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/

Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/

Download link from any site other than Bleeping Computer is unpermitted or outdated.

See tutorial for FRST: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe

(AMD) C:\Windows\System32\atiesrxx.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe

(Emsi Software GmbH) C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe

(Windows ® Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe

(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe

(Microsoft Corporation) C:\Windows\System32\dasHost.exe

(Check Point Software Technologies, Ltd.) C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZAPrivacyService.exe

(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe

(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe

(Samsung Electronics CO., LTD.) C:\ProgramData\SAMSUNG\SW Update Service\SWMAgent.exe

() C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdServer.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\sSettings.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Qualcomm®Atheros®) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe

(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe

(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe

(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe

(Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe

(AdTrustMedia) C:\Program Files (x86)\AdTrustMedia\PrivDog\1.8.0.15\trustedadssvc.exe

(Samsung Electronics CO., LTD.) C:\Program Files\Samsung\S Agent\CommonAgent.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(Opera Software) C:\Program Files (x86)\Opera\23.0.1522.75\opera.exe

() C:\Program Files (x86)\Opera\23.0.1522.75\opera_crashreporter.exe

(Opera Software) C:\Program Files (x86)\Opera\23.0.1522.75\opera.exe

(Samsung Electronics CO., LTD.) C:\Program Files\Samsung\Support Center\GuaranaAgent.exe

(Farbar) C:\Users\TFOX\Desktop\FRST64 (1).exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13191824 2012-08-10] (Realtek Semiconductor)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2917688 2012-10-16] (Synaptics Incorporated)

HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-09-12] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [Norton Online Backup] => C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [2995904 2012-07-10] (Symantec Corporation)

HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [35736 2012-04-03] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [843712 2012-04-03] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [97392 2012-08-15] (CyberLink Corp.)

HKLM-x32\...\Run: [CLMLServer_For_P2G8] => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-07] (CyberLink)

HKLM-x32\...\Run: [CLVirtualDrive] => C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-12] (CyberLink Corp.)

HKLM-x32\...\Run: [ZoneAlarm] => C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe [137352 2014-05-30] (Check Point Software Technologies Ltd.)

HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2014\avgui.exe [5187088 2014-08-11] (AVG Technologies CZ, s.r.o.)

HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)

HKLM-x32\...\Run: [PrivDogService] => C:\Program Files (x86)\AdTrustMedia\PrivDog\1.8.0.15\trustedadssvc.exe [525480 2013-11-15] (AdTrustMedia)

HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [133760 2014-01-07] ( (Qualcomm®Atheros®))

HKU\S-1-5-21-1746658525-1637020874-184723657-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

HKU\S-1-5-21-1746658525-1637020874-184723657-1001\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 1

HKU\S-1-5-21-1746658525-1637020874-184723657-1001\...\Policies\Explorer: [NoResolveSearch] 1

HKU\S-1-5-21-1746658525-1637020874-184723657-1001\...\Policies\Explorer: [NoInternetOpenWith] 1

BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://samsung13.msn.com

SearchScopes: HKLM - DefaultScope {1F3B464E-B7C3-4993-AAA9-CE041DA631B3} URL = http://www.bing.com/...E10TR&pc=MASMJS

SearchScopes: HKLM - {1F3B464E-B7C3-4993-AAA9-CE041DA631B3} URL = http://www.bing.com/...E10TR&pc=MASMJS

SearchScopes: HKLM-x32 - DefaultScope {1F3B464E-B7C3-4993-AAA9-CE041DA631B3} URL = http://www.bing.com/...E10TR&pc=MASMJS

SearchScopes: HKLM-x32 - {1F3B464E-B7C3-4993-AAA9-CE041DA631B3} URL = http://www.bing.com/...E10TR&pc=MASMJS

SearchScopes: HKCU - DefaultScope {1F3B464E-B7C3-4993-AAA9-CE041DA631B3} URL =

SearchScopes: HKCU - {1F3B464E-B7C3-4993-AAA9-CE041DA631B3} URL =

BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO: PrivDog Extension -> {FB16E5C3-A9E2-47A2-8EFC-319E775E62CC} -> C:\Program Files\AdTrustMedia\PrivDog\1.8.0.15\trustedads.dll (AdTrustMedia)

BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)

BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: PrivDog Extension -> {FB16E5C3-A9E2-47A2-8EFC-319E775E62CC} -> C:\Program Files (x86)\AdTrustMedia\PrivDog\1.8.0.15\trustedads.dll (AdTrustMedia)

Tcpip\Parameters: [DhcpNameServer] 75.75.75.75 75.75.76.76

FireFox:

========

FF ProfilePath: C:\Users\TFOX\AppData\Roaming\Mozilla\Firefox\Profiles\7t5mzkd2.default-1406505348723

FF Homepage: https://www.google.com/?gws_rd=ssl

FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()

FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Extension: PrivDog - C:\Users\TFOX\AppData\Roaming\Mozilla\Firefox\Profiles\7t5mzkd2.default-1406505348723\Extensions\[email protected] [2014-08-14]

FF HKLM\...\Thunderbird\Extensions: [[email protected]] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird

FF HKLM-x32\...\Thunderbird\Extensions: [[email protected]] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird

Chrome:

=======

CHR HKLM-x32\...\Chrome\Extension: [cmaiofennmphjldldcpphcechfnnohja] - C:\Program Files (x86)\AdTrustMedia\PrivDog\PrivDog_chrome.crx [2014-08-14]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 a2AntiMalware; C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe [3045688 2011-10-03] (Emsi Software GmbH)

R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [318592 2014-01-07] (Windows ® Win 7 DDK provider)

R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3244048 2014-08-11] (AVG Technologies CZ, s.r.o.)

R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [289328 2014-08-11] (AVG Technologies CZ, s.r.o.)

R2 Easy Launcher; C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe [1593152 2014-01-29] (Samsung Electronics CO., LTD.)

R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [3939008 2012-07-10] (Symantec Corporation)

R2 SWUpdateService; C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe [3020632 2014-04-04] (Samsung Electronics CO., LTD.)

R2 vsmon; C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe [3592120 2014-05-30] (Check Point Software Technologies Ltd.)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-06-15] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-06-15] (Microsoft Corporation)

R2 ZAPrivacyService; C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZAPrivacyService.exe [90936 2014-05-29] (Check Point Software Technologies, Ltd.)

R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2014-01-07] (Atheros) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 a2acc; C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\a2accx64.sys [85800 2011-02-20] (Emsi Software GmbH)

R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [35496 2012-07-09] (Advanced Micro Devices, Inc.)

S2 APXACC; C:\Windows\system32\DRIVERS\appexDrv.sys [199008 2012-06-22] (AppEx Networks Corporation)

R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [91648 2012-08-20] (Advanced Micro Devices)

S0 Avgboota; C:\Windows\System32\DRIVERS\avgboota.sys [20496 2013-09-04] (AVG Technologies CZ, s.r.o.)

R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [152344 2014-06-30] (AVG Technologies CZ, s.r.o.)

R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [242968 2014-06-17] (AVG Technologies CZ, s.r.o.)

R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [190744 2014-06-17] (AVG Technologies CZ, s.r.o.)

R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [235800 2014-06-17] (AVG Technologies CZ, s.r.o.)

R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [328984 2014-06-17] (AVG Technologies CZ, s.r.o.)

R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123672 2014-06-17] (AVG Technologies CZ, s.r.o.)

R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31512 2014-06-17] (AVG Technologies CZ, s.r.o.)

R1 Avgwfpa; C:\Windows\system32\DRIVERS\avgwfpa.sys [270104 2014-06-30] (AVG Technologies CZ, s.r.o.)

R3 BTATH_HID; C:\Windows\system32\DRIVERS\btath_hid.sys [223432 2014-01-07] (Qualcomm Atheros)

R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2014-01-07] (Qualcomm Atheros)

R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)

R1 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0401000.00B\ccSetx64.sys [168608 2012-05-25] (Symantec Corporation)

R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-24] (CyberLink)

R3 RadioHIDMini; C:\Windows\System32\drivers\RadioHIDMini.sys [23408 2012-07-27] (Windows ® Win 7 DDK provider)

R1 vrvd5; C:\Windows\system32\DRIVERS\vrvd5.sys [13344 2014-06-14] (Rsupport Corporation)

R1 Vsdatant; C:\Windows\System32\drivers\vsdatant.sys [450968 2014-05-30] (Check Point Software Technologies Ltd.)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-06-15] (Microsoft Corporation)

S3 MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-15 13:41 - 2014-08-15 13:42 - 00015064 _____ () C:\Users\TFOX\Desktop\FRST.txt

2014-08-15 13:41 - 2014-08-15 13:41 - 00000000 ____D () C:\FRST

2014-08-15 13:40 - 2014-08-15 13:40 - 02100224 _____ (Farbar) C:\Users\TFOX\Desktop\FRST64 (1).exe

2014-08-15 13:36 - 2014-08-15 13:36 - 02100224 _____ (Farbar) C:\Users\TFOX\Downloads\FRST64.exe

2014-08-15 13:34 - 2014-08-15 13:34 - 00000000 ___RD () C:\Users\TFOX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices

2014-08-14 15:57 - 2014-08-14 15:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-08-14 15:57 - 2014-08-14 15:57 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-08-14 15:57 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys

2014-08-14 15:57 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys

2014-08-14 15:57 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys

2014-08-14 15:56 - 2014-08-14 15:56 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\TFOX\Downloads\mbam-setup-2.0.2.1012 (1).exe

2014-08-14 13:36 - 2014-08-14 13:36 - 00000000 ____D () C:\Users\TFOX\AppData\Local\AdTrustMedia

2014-08-14 13:34 - 2014-08-14 13:34 - 01060864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc71.dll

2014-08-14 13:34 - 2014-08-14 13:34 - 00000000 ____D () C:\Program Files\AdTrustMedia

2014-08-14 13:34 - 2014-08-14 13:34 - 00000000 ____D () C:\Program Files (x86)\AdTrustMedia

2014-08-14 13:32 - 2014-08-14 13:32 - 00000000 ____D () C:\ProgramData\Adtrustmedia

2014-08-14 13:31 - 2014-08-14 15:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Comodo

2014-08-14 13:31 - 2014-08-14 15:47 - 00000000 ____D () C:\Program Files\COMODO

2014-08-14 13:29 - 2014-08-14 15:47 - 00000000 ____D () C:\ProgramData\Comodo

2014-08-14 13:23 - 2014-08-14 13:28 - 230403208 _____ (COMODO) C:\Users\TFOX\Downloads\cav_installer.exe

2014-08-14 11:24 - 2014-07-25 07:52 - 23645696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2014-08-14 11:24 - 2014-07-25 06:51 - 17524224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2014-08-14 11:24 - 2014-07-25 06:28 - 00548352 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll

2014-08-14 11:24 - 2014-07-25 06:25 - 02774528 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll

2014-08-14 11:24 - 2014-07-25 06:25 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll

2014-08-14 11:24 - 2014-07-25 05:59 - 00758272 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll

2014-08-14 11:24 - 2014-07-25 05:40 - 00452096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll

2014-08-14 11:24 - 2014-07-25 05:34 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll

2014-08-14 11:24 - 2014-07-25 05:30 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll

2014-08-14 11:24 - 2014-07-25 05:28 - 05824512 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2014-08-14 11:24 - 2014-07-25 05:28 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\JavaScriptCollectionAgent.dll

2014-08-14 11:24 - 2014-07-25 05:21 - 02184704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

2014-08-14 11:24 - 2014-07-25 05:17 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll

2014-08-14 11:24 - 2014-07-25 05:10 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll

2014-08-14 11:24 - 2014-07-25 05:08 - 00597504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll

2014-08-14 11:24 - 2014-07-25 05:06 - 04204032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2014-08-14 11:24 - 2014-07-25 04:52 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll

2014-08-14 11:24 - 2014-07-25 04:47 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll

2014-08-14 11:24 - 2014-07-25 04:43 - 00333312 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll

2014-08-14 11:24 - 2014-07-25 04:43 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JavaScriptCollectionAgent.dll

2014-08-14 11:24 - 2014-07-25 04:42 - 00692736 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe

2014-08-14 11:24 - 2014-07-25 04:39 - 02087936 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl

2014-08-14 11:24 - 2014-07-25 04:34 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll

2014-08-14 11:24 - 2014-07-25 04:29 - 00239616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll

2014-08-14 11:24 - 2014-07-25 04:23 - 13547008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2014-08-14 11:24 - 2014-07-25 04:13 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll

2014-08-14 11:24 - 2014-07-25 04:09 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll

2014-08-14 11:24 - 2014-07-25 04:07 - 02001920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl

2014-08-14 11:24 - 2014-07-25 04:03 - 11772928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2014-08-14 11:24 - 2014-07-25 03:52 - 02266624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll

2014-08-14 11:24 - 2014-07-25 03:26 - 01431040 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll

2014-08-14 11:24 - 2014-07-25 03:17 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll

2014-08-14 11:24 - 2014-07-25 03:09 - 00704512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll

2014-08-14 11:24 - 2014-07-25 03:05 - 01792512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll

2014-08-14 11:24 - 2014-07-25 03:00 - 01169920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll

2014-08-14 11:22 - 2014-06-19 18:48 - 01273184 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll

2014-08-14 11:22 - 2014-06-19 16:52 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll

2014-08-14 11:22 - 2014-06-12 18:15 - 00517528 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll

2014-08-14 11:22 - 2014-06-12 18:14 - 01557848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys

2014-08-14 11:22 - 2014-06-12 17:10 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll

2014-08-14 11:22 - 2014-06-06 04:34 - 02133504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll

2014-08-14 11:18 - 2014-06-09 15:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe

2014-08-14 11:18 - 2014-06-09 15:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe

2014-08-14 11:17 - 2014-08-06 15:38 - 00697856 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll

2014-08-14 11:17 - 2014-08-01 22:44 - 00527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll

2014-08-14 11:17 - 2014-06-05 07:13 - 00216368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rsaenh.dll

2014-08-14 11:17 - 2014-06-05 06:14 - 00189016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rsaenh.dll

2014-08-14 11:17 - 2014-06-01 19:10 - 00423768 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll

2014-08-14 11:17 - 2014-05-31 03:07 - 00467800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS

2014-08-14 11:17 - 2014-05-31 03:07 - 00440664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbport.sys

2014-08-14 11:17 - 2014-05-31 03:07 - 00419672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys

2014-08-14 11:17 - 2014-05-31 03:07 - 00089944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbehci.sys

2014-08-14 11:17 - 2014-05-31 03:07 - 00027480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbd.sys

2014-08-14 11:17 - 2014-05-30 23:30 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbuhci.sys

2014-08-14 11:17 - 2014-05-30 23:27 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFPf.sys

2014-08-14 11:17 - 2014-05-30 23:26 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFRd.sys

2014-08-14 11:17 - 2014-05-30 21:01 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFHost.exe

2014-08-14 11:17 - 2014-05-30 21:01 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll

2014-08-14 11:17 - 2014-05-30 21:01 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFSvc.dll

2014-08-14 11:17 - 2014-05-27 08:53 - 02518360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys

2014-08-14 11:17 - 2014-05-27 02:56 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\DaOtpCredentialProvider.dll

2014-08-14 11:17 - 2014-05-27 02:53 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DaOtpCredentialProvider.dll

2014-08-14 11:17 - 2014-05-16 21:59 - 16871936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll

2014-08-14 11:17 - 2014-05-16 21:13 - 12711424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll

2014-08-14 11:16 - 2014-08-06 19:12 - 01336624 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll

2014-08-14 11:16 - 2014-08-06 15:39 - 04148224 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys

2014-08-14 11:16 - 2014-08-01 20:56 - 01064448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll

2014-08-14 11:16 - 2014-08-01 20:11 - 00918528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll

2014-08-14 11:16 - 2014-07-11 21:17 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe

2014-08-14 11:16 - 2014-06-04 02:27 - 00114520 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe

2014-08-14 11:16 - 2014-06-03 22:31 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\msihnd.dll

2014-08-14 11:16 - 2014-06-03 22:22 - 02790912 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll

2014-08-14 11:16 - 2014-06-03 21:43 - 00281088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msihnd.dll

2014-08-14 11:16 - 2014-06-03 21:38 - 03304448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll

2014-08-14 11:16 - 2014-06-03 19:15 - 02642944 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll

2014-08-14 11:16 - 2014-06-03 19:14 - 02318336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll

2014-08-13 17:42 - 2014-08-13 17:42 - 00000000 ____D () C:\Program Files\ESET

2014-08-13 17:37 - 2014-08-13 17:37 - 01696192 _____ (ESET) C:\Users\TFOX\Downloads\eset_nod32_antivirus_live_installer.exe

2014-08-06 14:44 - 2014-08-06 14:44 - 00000000 ____D () C:\Program Files (x86)\ESET

2014-08-06 14:43 - 2014-08-06 14:43 - 02347384 _____ (ESET) C:\Users\TFOX\Downloads\esetsmartinstaller_enu(1).exe

2014-08-03 10:53 - 2014-08-03 10:53 - 00001321 _____ () C:\Users\TFOX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Norton Online Backup.lnk

2014-08-01 13:55 - 2014-08-01 13:55 - 02347384 _____ (ESET) C:\Users\TFOX\Downloads\esetsmartinstaller_enu.exe

2014-07-28 21:20 - 2014-07-28 21:20 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-07-27 16:55 - 2014-07-27 16:55 - 00000000 ____D () C:\Users\TFOX\Desktop\Old Firefox Data

2014-07-26 14:48 - 2014-07-26 15:50 - 00016021 _____ () C:\Users\TFOX\Desktop\avgrep.txt

2014-07-26 13:53 - 2014-07-26 13:53 - 00001103 _____ () C:\Users\Public\Desktop\Emsisoft Anti-Malware.lnk

2014-07-26 13:53 - 2014-07-26 13:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware

2014-07-26 13:52 - 2014-07-26 13:53 - 00000000 ____D () C:\Program Files (x86)\Emsisoft Anti-Malware

2014-07-26 13:52 - 2014-07-26 13:52 - 00000000 ____D () C:\Users\TFOX\Documents\Anti-Malware

2014-07-26 13:50 - 2014-07-26 13:52 - 100029288 _____ (Emsi Software GmbH ) C:\Users\TFOX\Downloads\EmsisoftAntiMalwareSetup(1).exe

2014-07-26 13:47 - 2014-07-26 13:48 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\TFOX\Downloads\mbam-setup-2.0.2.1012(3).exe

2014-07-26 13:45 - 2014-07-26 13:46 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\TFOX\Downloads\mbam-setup-2.0.2.1012(2).exe

2014-07-23 14:44 - 2014-07-23 16:44 - 00000000 ____D () C:\Users\TFOX\AppData\Roaming\Lavasoft

2014-07-23 14:19 - 2014-07-23 14:19 - 00000000 ____D () C:\Users\TFOX\AppData\Roaming\LavasoftStatistics

2014-07-23 14:19 - 2014-07-23 14:19 - 00000000 ____D () C:\Program Files\Lavasoft

2014-07-23 14:16 - 2014-07-23 14:16 - 01707144 _____ () C:\Users\TFOX\Downloads\Adaware_Installer.exe

2014-07-23 14:16 - 2014-07-23 14:16 - 00000000 ____D () C:\ProgramData\Lavasoft

2014-07-18 14:07 - 2014-07-18 14:07 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\TFOX\Downloads\mbam-setup-2.0.2.1012(1).exe

2014-07-18 14:00 - 2014-07-18 14:00 - 05222061 _____ (Swearware) C:\Users\TFOX\Downloads\ComboFix.exe

2014-07-17 18:17 - 2014-07-17 18:18 - 100029288 _____ (Emsi Software GmbH ) C:\Users\TFOX\Downloads\EmsisoftAntiMalwareSetup.exe

2014-07-17 18:11 - 2014-07-17 18:11 - 01402880 _____ () C:\Users\TFOX\Downloads\HijackThis.msi

2014-07-17 18:09 - 2014-08-14 15:48 - 00000121 _____ () C:\WINDOWS\wininit.ini

2014-07-16 22:39 - 2014-08-14 12:54 - 00000981 _____ () C:\Users\Public\Desktop\AVG 2014.lnk

2014-07-16 22:39 - 2014-08-14 12:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG

2014-07-16 22:36 - 2014-07-16 22:36 - 04755832 _____ (AVG Technologies) C:\Users\TFOX\Downloads\avg_free_stb_all_2014_4744_cnet.exe

2014-07-16 22:06 - 2014-07-16 23:46 - 00000000 ____D () C:\WINDOWS\Minidump

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-15 13:42 - 2014-08-15 13:41 - 00015064 _____ () C:\Users\TFOX\Desktop\FRST.txt

2014-08-15 13:41 - 2014-08-15 13:41 - 00000000 ____D () C:\FRST

2014-08-15 13:40 - 2014-08-15 13:40 - 02100224 _____ (Farbar) C:\Users\TFOX\Desktop\FRST64 (1).exe

2014-08-15 13:36 - 2014-08-15 13:36 - 02100224 _____ (Farbar) C:\Users\TFOX\Downloads\FRST64.exe

2014-08-15 13:35 - 2012-10-19 17:55 - 00000000 ____D () C:\ProgramData\WinClon

2014-08-15 13:34 - 2014-08-15 13:34 - 00000000 ___RD () C:\Users\TFOX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices

2014-08-15 13:27 - 2014-03-18 03:03 - 00863592 _____ () C:\WINDOWS\system32\PerfStringBackup.INI

2014-08-15 13:26 - 2014-06-15 19:24 - 00000000 ____D () C:\Users\TFOX

2014-08-15 13:26 - 2014-06-14 19:45 - 00000000 ____D () C:\ProgramData\MFAData

2014-08-15 13:21 - 2013-08-22 07:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT

2014-08-15 13:12 - 2013-08-22 08:36 - 00000000 ____D () C:\WINDOWS\system32\sru

2014-08-15 09:15 - 2014-06-16 16:06 - 00003902 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{43CA6609-76D2-430A-8A0E-33F0A2E00768}

2014-08-15 08:59 - 2014-06-14 23:49 - 00000830 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job

2014-08-15 08:44 - 2012-10-19 18:03 - 00000360 _____ () C:\WINDOWS\Tasks\Xerox PhotoCafe Communicator.job

2014-08-15 03:29 - 2012-07-26 00:59 - 00000000 ____D () C:\WINDOWS\CbsTemp

2014-08-14 16:14 - 2013-08-22 08:36 - 00000000 ____D () C:\WINDOWS\rescache

2014-08-14 16:12 - 2014-06-14 01:14 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1746658525-1637020874-184723657-1001

2014-08-14 16:02 - 2013-08-22 07:44 - 00473528 _____ () C:\WINDOWS\system32\FNTCACHE.DAT

2014-08-14 15:57 - 2014-08-14 15:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-08-14 15:57 - 2014-08-14 15:57 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-08-14 15:56 - 2014-08-14 15:56 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\TFOX\Downloads\mbam-setup-2.0.2.1012 (1).exe

2014-08-14 15:50 - 2014-08-14 13:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Comodo

2014-08-14 15:48 - 2014-07-17 18:09 - 00000121 _____ () C:\WINDOWS\wininit.ini

2014-08-14 15:47 - 2014-08-14 13:31 - 00000000 ____D () C:\Program Files\COMODO

2014-08-14 15:47 - 2014-08-14 13:29 - 00000000 ____D () C:\ProgramData\Comodo

2014-08-14 15:23 - 2014-07-13 13:47 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel

2014-08-14 13:39 - 2013-08-22 08:36 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions

2014-08-14 13:36 - 2014-08-14 13:36 - 00000000 ____D () C:\Users\TFOX\AppData\Local\AdTrustMedia

2014-08-14 13:35 - 2012-10-19 17:51 - 00000000 ____D () C:\Users\EasySurvey

2014-08-14 13:35 - 2012-07-25 22:37 - 00000000 ____D () C:\Users\Default.migrated

2014-08-14 13:34 - 2014-08-14 13:34 - 01060864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc71.dll

2014-08-14 13:34 - 2014-08-14 13:34 - 00000000 ____D () C:\Program Files\AdTrustMedia

2014-08-14 13:34 - 2014-08-14 13:34 - 00000000 ____D () C:\Program Files (x86)\AdTrustMedia

2014-08-14 13:32 - 2014-08-14 13:32 - 00000000 ____D () C:\ProgramData\Adtrustmedia

2014-08-14 13:28 - 2014-08-14 13:23 - 230403208 _____ (COMODO) C:\Users\TFOX\Downloads\cav_installer.exe

2014-08-14 13:16 - 2013-08-22 08:36 - 00000000 ____D () C:\WINDOWS\AppReadiness

2014-08-14 12:54 - 2014-07-16 22:39 - 00000981 _____ () C:\Users\Public\Desktop\AVG 2014.lnk

2014-08-14 12:54 - 2014-07-16 22:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG

2014-08-14 11:09 - 2014-06-15 19:58 - 00428888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS

2014-08-14 11:04 - 2014-03-18 03:13 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe

2014-08-14 11:04 - 2013-08-22 04:45 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb

2014-08-14 11:04 - 2013-08-22 04:44 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll

2014-08-14 11:04 - 2013-08-22 04:21 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll

2014-08-14 11:04 - 2013-08-22 04:03 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe

2014-08-14 11:04 - 2013-08-21 21:17 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb

2014-08-14 11:04 - 2013-08-21 20:55 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll

2014-08-14 11:04 - 2013-08-21 20:46 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll

2014-08-14 11:04 - 2013-08-21 20:16 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll

2014-08-14 11:03 - 2014-03-18 03:13 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll

2014-08-14 11:03 - 2014-03-18 03:13 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll

2014-08-14 11:03 - 2013-08-22 04:22 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll

2014-08-14 11:03 - 2013-08-22 04:10 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll

2014-08-14 11:03 - 2013-08-22 03:32 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll

2014-08-14 11:03 - 2013-08-21 20:45 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll

2014-08-14 11:03 - 2013-08-21 20:40 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe

2014-08-13 17:42 - 2014-08-13 17:42 - 00000000 ____D () C:\Program Files\ESET

2014-08-13 17:37 - 2014-08-13 17:37 - 01696192 _____ (ESET) C:\Users\TFOX\Downloads\eset_nod32_antivirus_live_installer.exe

2014-08-12 19:29 - 2013-08-22 06:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM

2014-08-12 14:43 - 2014-06-28 17:31 - 00003818 _____ () C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1404001885

2014-08-12 14:43 - 2014-06-14 01:54 - 00000000 ____D () C:\Program Files (x86)\Opera

2014-08-06 19:12 - 2014-08-14 11:16 - 01336624 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll

2014-08-06 15:39 - 2014-08-14 11:16 - 04148224 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys

2014-08-06 15:38 - 2014-08-14 11:17 - 00697856 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll

2014-08-06 14:44 - 2014-08-06 14:44 - 00000000 ____D () C:\Program Files (x86)\ESET

2014-08-06 14:43 - 2014-08-06 14:43 - 02347384 _____ (ESET) C:\Users\TFOX\Downloads\esetsmartinstaller_enu(1).exe

2014-08-03 10:53 - 2014-08-03 10:53 - 00001321 _____ () C:\Users\TFOX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Norton Online Backup.lnk

2014-08-01 22:44 - 2014-08-14 11:17 - 00527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll

2014-08-01 20:56 - 2014-08-14 11:16 - 01064448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll

2014-08-01 20:11 - 2014-08-14 11:16 - 00918528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll

2014-08-01 17:17 - 2013-08-22 08:38 - 00704480 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe

2014-08-01 17:17 - 2013-08-22 08:38 - 00105440 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

2014-08-01 13:55 - 2014-08-01 13:55 - 02347384 _____ (ESET) C:\Users\TFOX\Downloads\esetsmartinstaller_enu.exe

2014-07-31 11:28 - 2013-08-22 06:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI

2014-07-29 11:59 - 2014-06-14 20:44 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2014-07-28 22:23 - 2014-06-16 16:06 - 00000000 ____D () C:\Users\TFOX\AppData\Local\DoNotTrackPlus

2014-07-28 21:20 - 2014-07-28 21:20 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-07-27 16:55 - 2014-07-27 16:55 - 00000000 ____D () C:\Users\TFOX\Desktop\Old Firefox Data

2014-07-26 15:50 - 2014-07-26 14:48 - 00016021 _____ () C:\Users\TFOX\Desktop\avgrep.txt

2014-07-26 13:53 - 2014-07-26 13:53 - 00001103 _____ () C:\Users\Public\Desktop\Emsisoft Anti-Malware.lnk

2014-07-26 13:53 - 2014-07-26 13:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware

2014-07-26 13:53 - 2014-07-26 13:52 - 00000000 ____D () C:\Program Files (x86)\Emsisoft Anti-Malware

2014-07-26 13:52 - 2014-07-26 13:52 - 00000000 ____D () C:\Users\TFOX\Documents\Anti-Malware

2014-07-26 13:52 - 2014-07-26 13:50 - 100029288 _____ (Emsi Software GmbH ) C:\Users\TFOX\Downloads\EmsisoftAntiMalwareSetup(1).exe

2014-07-26 13:48 - 2014-07-26 13:47 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\TFOX\Downloads\mbam-setup-2.0.2.1012(3).exe

2014-07-26 13:46 - 2014-07-26 13:45 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\TFOX\Downloads\mbam-setup-2.0.2.1012(2).exe

2014-07-25 07:52 - 2014-08-14 11:24 - 23645696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2014-07-25 06:51 - 2014-08-14 11:24 - 17524224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2014-07-25 06:28 - 2014-08-14 11:24 - 00548352 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll

2014-07-25 06:25 - 2014-08-14 11:24 - 02774528 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll

2014-07-25 06:25 - 2014-08-14 11:24 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll

2014-07-25 05:59 - 2014-08-14 11:24 - 00758272 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll

2014-07-25 05:40 - 2014-08-14 11:24 - 00452096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll

2014-07-25 05:34 - 2014-08-14 11:24 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll

2014-07-25 05:30 - 2014-08-14 11:24 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll

2014-07-25 05:28 - 2014-08-14 11:24 - 05824512 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2014-07-25 05:28 - 2014-08-14 11:24 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\JavaScriptCollectionAgent.dll

2014-07-25 05:21 - 2014-08-14 11:24 - 02184704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

2014-07-25 05:17 - 2014-08-14 11:24 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll

2014-07-25 05:10 - 2014-08-14 11:24 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll

2014-07-25 05:08 - 2014-08-14 11:24 - 00597504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll

2014-07-25 05:06 - 2014-08-14 11:24 - 04204032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2014-07-25 04:52 - 2014-08-14 11:24 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll

2014-07-25 04:47 - 2014-08-14 11:24 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll

2014-07-25 04:43 - 2014-08-14 11:24 - 00333312 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll

2014-07-25 04:43 - 2014-08-14 11:24 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JavaScriptCollectionAgent.dll

2014-07-25 04:42 - 2014-08-14 11:24 - 00692736 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe

2014-07-25 04:39 - 2014-08-14 11:24 - 02087936 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl

2014-07-25 04:34 - 2014-08-14 11:24 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll

2014-07-25 04:29 - 2014-08-14 11:24 - 00239616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll

2014-07-25 04:23 - 2014-08-14 11:24 - 13547008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2014-07-25 04:13 - 2014-08-14 11:24 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll

2014-07-25 04:09 - 2014-08-14 11:24 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll

2014-07-25 04:07 - 2014-08-14 11:24 - 02001920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl

2014-07-25 04:03 - 2014-08-14 11:24 - 11772928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2014-07-25 03:52 - 2014-08-14 11:24 - 02266624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll

2014-07-25 03:26 - 2014-08-14 11:24 - 01431040 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll

2014-07-25 03:17 - 2014-08-14 11:24 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll

2014-07-25 03:09 - 2014-08-14 11:24 - 00704512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll

2014-07-25 03:05 - 2014-08-14 11:24 - 01792512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll

2014-07-25 03:00 - 2014-08-14 11:24 - 01169920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll

2014-07-23 16:44 - 2014-07-23 14:44 - 00000000 ____D () C:\Users\TFOX\AppData\Roaming\Lavasoft

2014-07-23 14:19 - 2014-07-23 14:19 - 00000000 ____D () C:\Users\TFOX\AppData\Roaming\LavasoftStatistics

2014-07-23 14:19 - 2014-07-23 14:19 - 00000000 ____D () C:\Program Files\Lavasoft

2014-07-23 14:16 - 2014-07-23 14:16 - 01707144 _____ () C:\Users\TFOX\Downloads\Adaware_Installer.exe

2014-07-23 14:16 - 2014-07-23 14:16 - 00000000 ____D () C:\ProgramData\Lavasoft

2014-07-18 14:07 - 2014-07-18 14:07 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\TFOX\Downloads\mbam-setup-2.0.2.1012(1).exe

2014-07-18 14:00 - 2014-07-18 14:00 - 05222061 _____ (Swearware) C:\Users\TFOX\Downloads\ComboFix.exe

2014-07-18 13:50 - 2014-07-12 21:49 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2

2014-07-17 18:18 - 2014-07-17 18:17 - 100029288 _____ (Emsi Software GmbH ) C:\Users\TFOX\Downloads\EmsisoftAntiMalwareSetup.exe

2014-07-17 18:13 - 2014-06-14 01:06 - 00000000 ____D () C:\Users\TFOX\AppData\Local\VirtualStore

2014-07-17 18:11 - 2014-07-17 18:11 - 01402880 _____ () C:\Users\TFOX\Downloads\HijackThis.msi

2014-07-17 18:09 - 2014-07-12 21:49 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy

2014-07-16 23:46 - 2014-07-16 22:06 - 00000000 ____D () C:\WINDOWS\Minidump

2014-07-16 22:39 - 2014-06-14 19:48 - 00000000 ___HD () C:\$AVG

2014-07-16 22:39 - 2014-06-14 19:48 - 00000000 ____D () C:\ProgramData\AVG2014

2014-07-16 22:39 - 2012-07-26 01:12 - 00000000 ___HD () C:\WINDOWS\ELAMBKUP

2014-07-16 22:36 - 2014-07-16 22:36 - 04755832 _____ (AVG Technologies) C:\Users\TFOX\Downloads\avg_free_stb_all_2014_4744_cnet.exe

2014-07-16 16:49 - 2014-06-14 19:38 - 00431192 _____ () C:\WINDOWS\system32\Drivers\vsconfig.xml

Files to move or delete:

====================

C:\ProgramData\MakeMarkerFile.exe

C:\Users\EasySurvey\EasySurvey.exe

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2014-08-07 03:12

==================== End Of Log ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15-08-2014

Ran by TFOX at 2014-08-15 13:43:09

Running from C:\Users\TFOX\Desktop

Boot Mode: Normal

==========================================================

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}

FW: ZoneAlarm Free Firewall Firewall (Enabled) {1B8D532F-88B1-B2AD-ED22-AED92687A1D2}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated)

Adobe Reader X (10.1.3) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.3 - Adobe Systems Incorporated)

AMD Accelerated Video Transcoding (Version: 12.5.100.20912 - Advanced Micro Devices, Inc.) Hidden

AMD APP SDK Runtime (Version: 10.0.938.2 - Advanced Micro Devices Inc.) Hidden

AMD Catalyst Install Manager (HKLM\...\{403A4E7A-D239-04D8-6A3D-31DD203C018D}) (Version: 8.0.881.0 - Advanced Micro Devices, Inc.)

AMD Quick Stream (HKLM\...\{E9EED4AE-682B-4501-9574-D09A21717599}_is1) (Version: 3.3.26.0 - AppEx Networks)

AMD VISION Engine Control Center (x32 Version: 2012.0912.1709.28839 - Advanced Micro Devices, Inc.) Hidden

AVG 2014 (HKLM\...\AVG) (Version: 2014.0.4745 - AVG Technologies)

AVG 2014 (Version: 14.0.4007 - AVG Technologies) Hidden

AVG 2014 (Version: 14.0.4745 - AVG Technologies) Hidden

Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center InstallProxy (x32 Version: 2012.0912.1709.28839 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Localization All (x32 Version: 2012.0912.1709.28839 - Advanced Micro Devices, Inc.) Hidden

CCC Help Chinese Standard (x32 Version: 2012.0912.1708.28839 - Advanced Micro Devices, Inc.) Hidden

CCC Help Chinese Traditional (x32 Version: 2012.0912.1708.28839 - Advanced Micro Devices, Inc.) Hidden

CCC Help Czech (x32 Version: 2012.0912.1708.28839 - Advanced Micro Devices, Inc.) Hidden

CCC Help Danish (x32 Version: 2012.0912.1708.28839 - Advanced Micro Devices, Inc.) Hidden

CCC Help Dutch (x32 Version: 2012.0912.1708.28839 - Advanced Micro Devices, Inc.) Hidden

CCC Help English (x32 Version: 2012.0912.1708.28839 - Advanced Micro Devices, Inc.) Hidden

CCC Help Finnish (x32 Version: 2012.0912.1708.28839 - Advanced Micro Devices, Inc.) Hidden

CCC Help French (x32 Version: 2012.0912.1708.28839 - Advanced Micro Devices, Inc.) Hidden

CCC Help German (x32 Version: 2012.0912.1708.28839 - Advanced Micro Devices, Inc.) Hidden

CCC Help Greek (x32 Version: 2012.0912.1708.28839 - Advanced Micro Devices, Inc.) Hidden

CCC Help Hungarian (x32 Version: 2012.0912.1708.28839 - Advanced Micro Devices, Inc.) Hidden

CCC Help Italian (x32 Version: 2012.0912.1708.28839 - Advanced Micro Devices, Inc.) Hidden

CCC Help Japanese (x32 Version: 2012.0912.1708.28839 - Advanced Micro Devices, Inc.) Hidden

CCC Help Korean (x32 Version: 2012.0912.1708.28839 - Advanced Micro Devices, Inc.) Hidden

CCC Help Norwegian (x32 Version: 2012.0912.1708.28839 - Advanced Micro Devices, Inc.) Hidden

CCC Help Polish (x32 Version: 2012.0912.1708.28839 - Advanced Micro Devices, Inc.) Hidden

CCC Help Portuguese (x32 Version: 2012.0912.1708.28839 - Advanced Micro Devices, Inc.) Hidden

CCC Help Russian (x32 Version: 2012.0912.1708.28839 - Advanced Micro Devices, Inc.) Hidden

CCC Help Spanish (x32 Version: 2012.0912.1708.28839 - Advanced Micro Devices, Inc.) Hidden

CCC Help Swedish (x32 Version: 2012.0912.1708.28839 - Advanced Micro Devices, Inc.) Hidden

CCC Help Thai (x32 Version: 2012.0912.1708.28839 - Advanced Micro Devices, Inc.) Hidden

CCC Help Turkish (x32 Version: 2012.0912.1708.28839 - Advanced Micro Devices, Inc.) Hidden

ccc-utility64 (Version: 2012.0912.1709.28839 - Advanced Micro Devices, Inc.) Hidden

CCleaner (HKLM\...\CCleaner) (Version: 4.14 - Piriform)

CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.0.1912 - CyberLink Corp.)

CyberLink Power2Go 8 (x32 Version: 8.0.0.1912 - CyberLink Corp.) Hidden

CyberLink PowerDVD 10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.4421.02 - CyberLink Corp.)

CyberLink PowerDVD 10 (x32 Version: 10.0.4421.02 - CyberLink Corp.) Hidden

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

Easy File Share (HKLM-x32\...\{A7C37D4B-F37A-42E8-9B6A-B28C18AD4C12}) (Version: 1.3.4 - Samsung Electronics CO.,LTD.)

Emsisoft Anti-Malware 5.1 (HKLM-x32\...\Emsisoft Anti-Malware_is1) (Version: 5.1 - Emsi Software GmbH)

E-POP (HKLM-x32\...\{F06DD8D9-9DC8-430C-835C-C9BF21E05CC1}) (Version: 1.0.1 - Samsung Electronics CO., LTD.)

ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )

Galería de fotos (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden

Galerie de photos (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden

Help Desk (HKLM\...\{AEC9D273-E162-4614-83F1-722B8C74B185}) (Version: 1.0.96 - Samsung Electronics CO., LTD.)

Malwarebytes Anti-Malware version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)

Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden

Microsoft Office Access MUI (English) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden

Microsoft Office Access Setup Metadata MUI (English) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden

Microsoft Office Excel MUI (English) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden

Microsoft Office Groove MUI (English) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden

Microsoft Office InfoPath MUI (English) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden

Microsoft Office Office 64-bit Components 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden

Microsoft Office OneNote MUI (English) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden

Microsoft Office Outlook MUI (English) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden

Microsoft Office PowerPoint MUI (English) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden

Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.4763.1000 - Microsoft Corporation)

Microsoft Office Professional Plus 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (English) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (French) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (Spanish) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden

Microsoft Office Proofing (English) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden

Microsoft Office Publisher MUI (English) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared 64-bit MUI (English) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared MUI (English) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared Setup Metadata MUI (English) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden

Microsoft Office Word MUI (English) 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)

Movie Maker (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden

Mozilla Firefox 31.0 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 31.0 (x86 en-US)) (Version: 31.0 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 30.0 - Mozilla)

MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden

MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden

MSVCRT110_amd64 (Version: 16.4.1108.0727 - Microsoft) Hidden

Norton Online Backup (HKLM-x32\...\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}) (Version: 2.2.3.45 - Symantec Corporation)

Norton Online Backup ARA (x32 Version: 4.1.0.11 - Symantec Corporation) Hidden

Opera Stable 23.0.1522.75 (HKLM-x32\...\Opera 23.0.1522.75) (Version: 23.0.1522.75 - Opera Software ASA)

Photo Common (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden

Photo Gallery (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden

Plants vs. Zombies (HKLM-x32\...\Plants vs. Zombies) (Version: - PopCap Games)

PrivDog (HKLM-x32\...\PrivDog) (Version: 1.8.0.15 - privdog.com)

Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.314 - Qualcomm Atheros Communications)

Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros)

Quick Starter (HKLM\...\{EC36E2BC-86F7-44C9-84B2-93930F0FBDBF}) (Version: 1.0.2 - Samsung Electronics CO., LTD.)

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.3.730.2012 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6702 - Realtek Semiconductor Corp.)

Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.8400.39030 - Realtek Semiconductor Corp.)

Recovery (HKLM-x32\...\{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}) (Version: 6.0.12.10 - Samsung Electronics CO., LTD.)

S Agent (Version: 1.1.47 - Samsung Electronics CO., LTD.) Hidden

S Service (HKLM-x32\...\{E8336EA1-40A2-48A1-80E8-B78F9EEAB23F}) (Version: 1.0 - Samsung Electronics CO., LTD.)

Settings (HKLM-x32\...\{8CB5C357-12E5-41B1-A024-D57D4E6F32D9}) (Version: 2.0.1 - Samsung Electronics CO., LTD.)

Support Center (HKLM\...\{AB0DEFBB-1A16-47B5-86D2-39F0A2B24AE4}) (Version: 2.1.1210 - Samsung Electronics CO., LTD.)

Support Center FAQ (x32 Version: 1.0.14 - Samsung Electronics CO., LTD.) Hidden

SW Update (HKLM-x32\...\{D2B5F1E3-EA56-4D84-A453-A213B32974CB}) (Version: 2.1.25 - Samsung Electronics CO., LTD.)

Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.2.14.2 - Synaptics Incorporated)

User Guide (HKLM-x32\...\{2888FDD1-5EEC-4D56-84B7-4D20DAC0E090}) (Version: 1.3.00 - Samsung Electronics CO., LTD.)

Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)

Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)

Windows Driver Package - Samsung Electronics Co. Ltd. (RadioHIDMini) HIDClass (07/27/2012 20.57.1.735) (HKLM\...\9F04C462DAB591BDCCE784F77E4D4F1736010B92) (Version: 07/27/2012 20.57.1.735 - Samsung Electronics Co. Ltd.)

Windows Live (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3503.0728 - Microsoft Corporation)

Windows Live (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden

Windows Live Communications Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden

Windows Live Essentials (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden

Windows Live Installer (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden

Windows Live Photo Common (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden

Windows Live PIMT Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden

Windows Live SOXE (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden

Windows Live SOXE Definitions (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden

Windows Live UX Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden

Windows Live UX Platform Language Pack (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden

Xerox PhotoCafe (HKLM-x32\...\Xerox PhotoCafe) (Version: 1.0.0.6162 - Xerox)

ZoneAlarm Firewall (x32 Version: 13.2.015.000 - Check Point Software Technologies Ltd.) Hidden

ZoneAlarm Free Firewall (HKLM-x32\...\ZoneAlarm Free Firewall) (Version: 13.2.015.000 - Check Point)

ZoneAlarm Security (x32 Version: 13.2.015.000 - Check Point Software Technologies Ltd.) Hidden

ZoneAlarm Security Toolbar (HKCU\...\zonealarm) (Version: 1.8.29.17 - Check Point Software Technologies LTD)

ZoneAlarm Security Toolbar (HKLM-x32\...\zonealarm) (Version: 1.8.29.17 - Check Point Software Technologies LTD)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

==================== Restore Points =========================

23-07-2014 21:17:03 AA11

30-07-2014 21:38:57 Scheduled Checkpoint

07-08-2014 11:00:04 Scheduled Checkpoint

14-08-2014 04:58:56 Removed ESET NOD32 Antivirus

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 06:25 - 2013-08-22 06:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {00475E44-06A5-4FD0-A843-0AC3C43C6946} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-08] (Adobe Systems Incorporated)

Task: {01A49552-474E-4584-88E3-8F4929E16B6A} - System32\Tasks\advRecovery => C:\Program Files\Samsung\Recovery\WCScheduler.exe [2014-03-21] (SEC)

Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask

Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList

Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask

Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate

Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-21] (Microsoft Corporation)

Task: {35BA7A3B-85EA-43E2-A818-8BB2C3A59DD5} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network => Sc.exe start wuauserv

Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)

Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance

Task: {49F569FF-977C-4E47-884B-CCB8B48E61D3} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-07-12] (Microsoft Corporation)

Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup

Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task

Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask

Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState

Task: {844EF206-E717-4A6C-B8CF-D237FC2EF6BB} - System32\Tasks\SAgent => C:\Program Files\Samsung\S Agent\CommonAgent.exe [2014-03-19] (Samsung Electronics CO., LTD.)

Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task

Task: {8A68132E-48F6-49AD-9C34-85602401CF4E} - System32\Tasks\Synaptics TouchPad Enhancements => \Program Files\Synaptics\SynTP\SynTPEnh.exe [2012-10-16] (Synaptics Incorporated)

Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask

Task: {9923A950-9EE6-4B07-9D2B-1466D325C48C} - System32\Tasks\Opera scheduled Autoupdate 1404001885 => C:\Program Files (x86)\Opera\launcher.exe [2014-08-08] (Opera Software)

Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work

Task: {B2822C2F-D7CF-41D1-9B5B-3BF3910C9D11} - System32\Tasks\Settings => C:\Program Files (x86)\Samsung\Settings\sSettings.exe [2014-01-29] (Samsung Electronics CO., LTD.)

Task: {BF58E14B-1069-43E0-80DD-BB525A2FD9CD} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics

Task: {C10D3984-E40A-4410-B5E4-54FEC01F7AAB} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-05-20] (Piriform Ltd)

Task: {C7698574-B7AB-46E4-8592-5B5A123A6101} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload

Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask

Task: {D08F1AB1-8F5E-4779-937E-7A750E734C77} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\Windows\system32\cleanmgr.exe [2014-03-18] (Microsoft Corporation)

Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing

Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization

Task: {E2ACF668-4308-4463-9ECA-B3DD4467FB01} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Validation

Task: {E3BDCA69-0278-4D27-AE94-D673C4802877} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Management

Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE

Task: {F3977534-62E9-4971-825F-CF7BEBAD3C07} - System32\Tasks\Xerox PhotoCafe Communicator => C:\ProgramData\Xerox PhotoCafe\MessageCheck.exe [2011-10-26] ()

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

Task: C:\WINDOWS\Tasks\Xerox PhotoCafe Communicator.job => C:\ProgramData\Xerox PhotoCafe\MessageCheck.exe

==================== Loaded Modules (whitelisted) =============

2014-01-29 13:20 - 2014-01-29 13:20 - 00084800 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdServer.exe

2010-01-30 02:40 - 2010-01-30 02:40 - 04254560 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF

2010-03-24 21:38 - 2010-03-24 21:38 - 08794976 _____ () C:\Program Files\Microsoft Office\Office14\1033\GrooveIntlResource.dll

2014-01-07 01:29 - 2014-01-07 01:29 - 00011264 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll

2014-01-07 01:26 - 2014-01-07 01:26 - 00086016 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\Map\MAP.dll

2014-01-07 01:32 - 2014-01-07 01:32 - 00012928 _____ () C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe

2014-03-19 11:41 - 2014-03-19 11:41 - 00088624 _____ () C:\Program Files\Samsung\S Agent\ToastX64.dll

2014-08-12 14:42 - 2014-08-12 14:42 - 01401464 _____ () C:\Program Files (x86)\Opera\23.0.1522.75\opera_crashreporter.exe

2014-01-29 13:20 - 2014-01-29 13:20 - 00027968 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdWrapper.dll

2014-01-29 13:20 - 2014-01-29 13:20 - 01141056 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmd.dll

2014-01-29 13:20 - 2014-01-29 13:20 - 00109888 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsBase.dll

2014-01-29 13:20 - 2014-01-29 13:20 - 00056440 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\HookDllPS2.dll

2014-01-29 13:20 - 2014-01-29 13:20 - 00211064 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\WinCRT.dll

2014-01-29 13:20 - 2014-01-29 13:20 - 00025920 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsAPI.dll

2014-01-29 13:20 - 2014-01-29 13:20 - 00109888 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsBase.dll

2014-01-29 13:20 - 2014-01-29 13:20 - 00059712 _____ () C:\Program Files (x86)\Samsung\Settings\EasyMovieEnhancer.dll

2014-01-29 13:20 - 2014-01-29 13:20 - 00102720 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsCmdClient.dll

2012-10-19 18:01 - 2012-06-07 20:34 - 00627216 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll

2012-06-07 19:34 - 2012-06-07 19:34 - 00016400 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll

2014-08-12 14:42 - 2014-08-12 14:42 - 00880248 _____ () C:\Program Files (x86)\Opera\23.0.1522.75\libglesv2.dll

2014-08-12 14:42 - 2014-08-12 14:42 - 00135800 _____ () C:\Program Files (x86)\Opera\23.0.1522.75\libegl.dll

2014-08-12 14:42 - 2014-08-12 14:42 - 00957048 _____ () C:\Program Files (x86)\Opera\23.0.1522.75\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:

==================

Error: (08/15/2014 01:40:18 PM) (Source: SideBySide) (EventID: 78) (User: )

Description: Activation context generation failed for "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1".Error in manifest or policy file "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" on line C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3.

A component version required by the application conflicts with another component version already active.

Conflicting components are:.

Component 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest.

Component 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.

Error: (08/15/2014 01:40:18 PM) (Source: SideBySide) (EventID: 78) (User: )

A component version required by the application conflicts with another component version already active.

Conflicting components are:.

Component 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest.

Component 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.

Error: (08/15/2014 01:23:42 PM) (Source: Windows Search Service) (EventID: 7010) (User: )

Description: The index cannot be initialized.

Details:

The specified object cannot be found. Specify the name of an existing object. (HRESULT : 0x80040d06) (0x80040d06)

Error: (08/15/2014 01:23:42 PM) (Source: Windows Search Service) (EventID: 3058) (User: )

Description: The application cannot be initialized.

Context: Windows Application

Details:

The specified object cannot be found. Specify the name of an existing object. (HRESULT : 0x80040d06) (0x80040d06)

Error: (08/15/2014 01:23:42 PM) (Source: Windows Search Service) (EventID: 3028) (User: )

Description: The gatherer object cannot be initialized.

Context: Windows Application, SystemIndex Catalog

Details:

The specified object cannot be found. Specify the name of an existing object. (HRESULT : 0x80040d06) (0x80040d06)

Error: (08/15/2014 01:23:42 PM) (Source: Windows Search Service) (EventID: 3029) (User: )

Description: The plug-in in <Search.TripoliIndexer> cannot be initialized.

Context: Windows Application, SystemIndex Catalog

Details:

The specified object cannot be found. Specify the name of an existing object. (HRESULT : 0x80040d06) (0x80040d06)

Error: (08/15/2014 01:23:42 PM) (Source: Windows Search Service) (EventID: 3057) (User: )

Description: The plug-in manager <Search.TripoliIndexer> cannot be initialized.

Context: Windows Application

Details:

(HRESULT : 0x8e5e0210) (0x8e5e0210)

Error: (08/15/2014 01:23:42 PM) (Source: Windows Search Service) (EventID: 7042) (User: )

Description: The Windows Search Service is being stopped because there is a problem with the indexer: The catalog is corrupt.

Details:

The content index catalog is corrupt. 0xc0041801 (0xc0041801)

Error: (08/15/2014 01:23:42 PM) (Source: Windows Search Service) (EventID: 7040) (User: )

Description: The search service has detected corrupted data files in the index {id=4810 - enduser\mssearch2\search\ytrip\common\util\jetutil.cpp (167)}. The service will attempt to automatically correct this problem by rebuilding the index.

Details:

0x8e5e0210 (0x8e5e0210)

Error: (08/15/2014 01:23:42 PM) (Source: ESENT) (EventID: 455) (User: )

Description: SearchIndexer (3768) Windows: Error -1811 (0xfffff8ed) occurred while opening logfile C:\ProgramData\Microsoft\Search\Data\Applications\Windows\edb0000D.log.

System errors:

=============

Error: (08/15/2014 01:25:00 PM) (Source: Service Control Manager) (EventID: 7032) (User: )

Description: The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Windows Search service, but this action failed with the following error:

%%1056

Error: (08/15/2014 01:23:42 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: The Windows Search service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.

Error: (08/15/2014 01:23:42 PM) (Source: Service Control Manager) (EventID: 7024) (User: )

Description: The Windows Search service terminated with the following service-specific error:

%%2147749126

Error: (08/15/2014 01:21:13 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: The AppEx Networks Accelerator LWF service failed to start due to the following error:

%%31

Error: (08/15/2014 01:21:13 PM) (Source: APXACC) (EventID: 1003) (User: )

Description: The NDIS6 LWF initialization has failed. (0xC0000001)

Error: (08/15/2014 01:21:13 PM) (Source: EventLog) (EventID: 6008) (User: )

Description: The previous system shutdown at 8:55:08 AM on ‎8/‎15/‎2014 was unexpected.

Error: (08/14/2014 04:02:18 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: The AppEx Networks Accelerator LWF service failed to start due to the following error:

%%31

Error: (08/14/2014 04:02:18 PM) (Source: APXACC) (EventID: 1003) (User: )

Description: The NDIS6 LWF initialization has failed. (0xC0000001)

Error: (08/14/2014 03:46:03 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: The AppEx Networks Accelerator LWF service failed to start due to the following error:

%%31

Error: (08/14/2014 03:46:03 PM) (Source: APXACC) (EventID: 1003) (User: )

Description: The NDIS6 LWF initialization has failed. (0xC0000001)

Microsoft Office Sessions:

=========================

Error: (08/15/2014 01:40:18 PM) (Source: SideBySide) (EventID: 78) (User: )

Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Users\TFOX\Downloads\esetsmartinstaller_enu.exe

Error: (08/15/2014 01:40:18 PM) (Source: SideBySide) (EventID: 78) (User: )

Error: (08/15/2014 01:23:42 PM) (Source: Windows Search Service) (EventID: 7010) (User: )

Description:

Details:

The specified object cannot be found. Specify the name of an existing object. (HRESULT : 0x80040d06) (0x80040d06)

Error: (08/15/2014 01:23:42 PM) (Source: Windows Search Service) (EventID: 3058) (User: )

Description: Context: Windows Application

Details:

The specified object cannot be found. Specify the name of an existing object. (HRESULT : 0x80040d06) (0x80040d06)

Error: (08/15/2014 01:23:42 PM) (Source: Windows Search Service) (EventID: 3028) (User: )

Description: Context: Windows Application, SystemIndex Catalog

Details:

The specified object cannot be found. Specify the name of an existing object. (HRESULT : 0x80040d06) (0x80040d06)

Error: (08/15/2014 01:23:42 PM) (Source: Windows Search Service) (EventID: 3029) (User: )

Description: Context: Windows Application, SystemIndex Catalog

Details:

The specified object cannot be found. Specify the name of an existing object. (HRESULT : 0x80040d06) (0x80040d06)

Search.TripoliIndexer

Error: (08/15/2014 01:23:42 PM) (Source: Windows Search Service) (EventID: 3057) (User: )

Description: Context: Windows Application

Details:

(HRESULT : 0x8e5e0210) (0x8e5e0210)

Search.TripoliIndexer

Error: (08/15/2014 01:23:42 PM) (Source: Windows Search Service) (EventID: 7042) (User: )

Description:

Details:

The content index catalog is corrupt. 0xc0041801 (0xc0041801)

The catalog is corrupt

Error: (08/15/2014 01:23:42 PM) (Source: Windows Search Service) (EventID: 7040) (User: )

Description:

Details:

0x8e5e0210 (0x8e5e0210)

4810 - enduser\mssearch2\search\ytrip\common\util\jetutil.cpp (167)

Error: (08/15/2014 01:23:42 PM) (Source: ESENT) (EventID: 455) (User: )

Description: SearchIndexer3768Windows: C:\ProgramData\Microsoft\Search\Data\Applications\Windows\edb0000D.log-1811 (0xfffff8ed)

CodeIntegrity Errors:

===================================

Date: 2014-08-14 13:47:18.538

Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\guard64.dll because the set of per-page image hashes could not be found on the system.

==================== Memory info ===========================

Processor: AMD A6-4400M APU with Radeon™ HD Graphics

Percentage of memory in use: 40%

Total physical RAM: 3547.1 MB

Available physical RAM: 2115.07 MB

Total Pagefile: 4251.1 MB

Available Pagefile: 2572.66 MB

Total Virtual: 131072 MB

Available Virtual: 131071.8 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:439.99 GB) (Free:405.59 GB) NTFS

==================== MBR & Partition Table ==================

========================================================

Disk: 0 (Size: 466 GB) (Disk ID: 8D49466C)

Partition: GPT Partition Type.

==================== End Of Log ============================

#4
Essexboy

Posted 16 August 2014 - 09:19 AM

GeekU Moderator

Retired Staff
69,964 posts

I can see nothing untoward on the system apart from a few bits of adware. What file is Emisoft reporting as an infection, do you have a log ?

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

C:\ProgramData\MakeMarkerFile.exe
C:\Users\EasySurvey\EasySurvey.exe
EmptyTemp:
CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe
Run FRST and press Fix
On completion a log will be generated please post that

THEN

Download aswMBR.exe ( 4.5mb ) to your desktop.
Double click the aswMBR.exe to run it.
You may be offered the option of using virtualisation, accept that
When it offers to download the virus database allow that as well
Click the "Scan" button to start scan

AswMBR%20scan.JPG

On completion of the scan click save log, save it to your desktop and post in your next reply

#5
azul20

Posted 16 August 2014 - 06:57 PM

Member

Topic Starter
Member
122 posts

Unfortunately, I do not have the original Emisoft log . Here is the log that you have requested. Thank you again for the help.

Run date: 2014-08-16 16:33:04

-----------------------------

16:33:04.065 OS Version: Windows x64 6.2.9200

16:33:04.065 Number of processors: 2 586 0x1001

16:33:04.065 ComputerName: FOX UserName:

16:33:05.269 Initialize success

16:33:05.269 VM: initialized successfully

16:33:05.284 VM: Amd CPU supported

16:33:06.987 VM: supported disk I/O storport.sys

16:33:37.409 AVAST engine defs: 14081601

17:00:08.225 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\0000001d

17:00:08.225 Disk 0 Vendor: ST9500325AS 0011LVM1 Size: 476940MB BusType: 11

17:00:08.417 Disk 0 MBR read successfully

17:00:08.417 Disk 0 MBR scan

17:00:08.433 Disk 0 unknown MBR code

17:00:08.433 Disk 0 Partition 1 00 EE GPT 2097151 MB offset 1

17:00:08.621 Disk 0 scanning C:\WINDOWS\system32\drivers

17:00:24.585 Service scanning

17:00:58.967 Modules scanning

17:00:58.967 Disk 0 trace - called modules:

17:00:59.030 ntoskrnl.exe CLASSPNP.SYS disk.sys amdxata.sys storport.sys hal.dll amdsata.sys

17:00:59.045 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xffffe00079b57060]

17:00:59.045 3 CLASSPNP.SYS[fffff8010cf9027b] -> nt!IofCallDriver -> [0xffffe0007ab68040]

17:00:59.061 5 amdxata.sys[fffff8010cad86b4] -> nt!IofCallDriver -> \Device\0000001d[0xffffe0007ab6c060]

17:01:00.613 AVAST engine scan C:\WINDOWS

17:01:08.068 AVAST engine scan C:\WINDOWS\system32

17:06:15.180 AVAST engine scan C:\WINDOWS\system32\drivers

17:06:35.283 AVAST engine scan C:\Users\TFOX

17:08:42.797 AVAST engine scan C:\ProgramData

17:15:09.673 Scan finished successfully

17:52:09.457 Disk 0 MBR has been saved successfully to "C:\Users\TFOX\Desktop\MBR.dat"

17:52:09.457 The log file has been saved successfully to "C:\Users\TFOX\Desktop\aswMBR.txt"

#6
Essexboy

Posted 17 August 2014 - 04:09 AM

GeekU Moderator

Retired Staff
69,964 posts

Nothing apparent at all .. What problems are you experiencing ?

#7
azul20

Posted 17 August 2014 - 03:24 PM

Member

Topic Starter
Member
122 posts

My laptop constantly freezes, and the only way to get it back to normal is to force a restart. Sometimes, an AVG pop up will appear that says something like multiple threats have been detected on your system.

#8
Essexboy

Posted 17 August 2014 - 03:31 PM

GeekU Moderator

Retired Staff
69,964 posts

Do you have a log from AVG stating what these threats are ?

Please run a free online scan with the ESET Online Scanner:

IMPORTANT: You MUST use Internet Explorer for this step!

Visit the ESET Online Scanner Web Page
Select the blue Run ESET Online Scanner button:
Tick the box next to YES, I accept the Terms of Use and click Start
When asked, allow the ActiveX control to install.
Select Enable detection of potentially unwanted applications and select Advanced Settings:
Make sure to check the options Remove found threats and Enable Anti-Stealth technology are checked:
Click Start. (This scan can take several hours, so please be patient):
Once the scan is completed, select List of found threats:
Select Export to text file... and save the file as ESETlog.txt on your Desktop:
Click the Back button.
Click the Finish button:
Use Notepad to open the saved log file (on your Desktop- ESET.txt)[/b]
Copy and paste that log as a reply to this topic.

#9
azul20

Posted 18 August 2014 - 08:31 PM

Member

Topic Starter
Member
122 posts

The ESET online scanner did not pick up any threats, and there was no way for me to get a log. I don't know what is going on. I do not see any infections on the AVG logs, they all say 0 infected files. I do not know why Emisoft reported these infections.

#10
Essexboy

Posted 19 August 2014 - 07:07 AM

GeekU Moderator

Retired Staff
69,964 posts

In that case I would be inclined to ignore the Emisoft findings

Are you still experiencing the freezes ?

Please download MiniToolBox, save it to your desktop and run it.
https://dl.dropbox.c...minitoolbox.JPG
Checkmark the following checkboxes:

Flush DNS
Report IE Proxy Settings
Reset IE Proxy Settings
Report FF Proxy Settings
Reset FF Proxy Settings
List content of Hosts
List IP configuration
List Winsock Entries
List last 10 Event Viewer log
List Installed Programs
List Devices
List Users, Partitions and Memory size.
List Minidump Files

Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run.

Note: When using "Reset FF Proxy Settings" option Firefox should be closed.

#11
azul20

Posted 19 August 2014 - 05:50 PM

Member

Topic Starter
Member
122 posts

Yes, the laptop freezes all the time. Here is the log that you asked for. Thank you for continuing to provide support.

MiniToolBox by Farbar Version: 21-07-2014

Ran by TFOX (administrator) on 19-08-2014 at 16:44:51

Running from "C:\Users\TFOX\Downloads"

Microsoft Windows 8.1 (X64)

Boot Mode: Normal

***************************************************************************

========================= Flush DNS: ===================================

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========================= IE Proxy Settings: ==============================

Proxy is not enabled.

No Proxy Server is set.

"Reset IE Proxy Settings": IE Proxy Settings were reset.

========================= FF Proxy Settings: ==============================

"Reset FF Proxy Settings": Firefox Proxy settings were reset.

========================= Hosts content: =================================

========================= IP Configuration: ================================

Qualcomm Atheros AR9485WB-EG Wireless Network Adapter = Wi-Fi (Connected)

Realtek PCIe GBE Family Controller = Ethernet (Media disconnected)

Bluetooth Device (Personal Area Network) = Bluetooth Network Connection (Media disconnected)

# ----------------------------------

# IPv4 Configuration

# ----------------------------------

pushd interface ipv4

reset

set global icmpredirects=enabled

set interface interface="Local Area Connection* 1" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled

set interface interface="Wi-Fi" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled

set interface interface="Ethernet" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled

set interface interface="Bluetooth Network Connection" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled

set interface interface="Local Area Connection* 12" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled

set interface interface="ethernet_3" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled

set interface interface="Local Area Connection* 2" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled

popd

# End of IPv4 configuration

Windows IP Configuration

Host Name . . . . . . . . . . . . : Fox

Primary Dns Suffix . . . . . . . :

Node Type . . . . . . . . . . . . : Hybrid

IP Routing Enabled. . . . . . . . : No

WINS Proxy Enabled. . . . . . . . : No

DNS Suffix Search List. . . . . . : home.network

Wireless LAN adapter Local Area Connection* 2:

Media State . . . . . . . . . . . : Media disconnected

Connection-specific DNS Suffix . :

Description . . . . . . . . . . . : Microsoft Hosted Network Virtual Adapter

Physical Address. . . . . . . . . : 52-B7-C3-5F-17-01

DHCP Enabled. . . . . . . . . . . : Yes

Autoconfiguration Enabled . . . . : Yes

Wireless LAN adapter Local Area Connection* 12:

Media State . . . . . . . . . . . : Media disconnected

Connection-specific DNS Suffix . :

Description . . . . . . . . . . . : Microsoft Wi-Fi Direct Virtual Adapter

Physical Address. . . . . . . . . : 12-B7-C3-5F-17-01

DHCP Enabled. . . . . . . . . . . : Yes

Autoconfiguration Enabled . . . . : Yes

Ethernet adapter Bluetooth Network Connection:

Media State . . . . . . . . . . . : Media disconnected

Connection-specific DNS Suffix . :

Description . . . . . . . . . . . : Bluetooth Device (Personal Area Network)

Physical Address. . . . . . . . . : 50-B7-C3-5F-17-02

DHCP Enabled. . . . . . . . . . . : Yes

Autoconfiguration Enabled . . . . : Yes

Ethernet adapter Ethernet:

Media State . . . . . . . . . . . : Media disconnected

Connection-specific DNS Suffix . :

Description . . . . . . . . . . . : Realtek PCIe GBE Family Controller

Physical Address. . . . . . . . . : 20-89-84-10-15-AC

DHCP Enabled. . . . . . . . . . . : Yes

Autoconfiguration Enabled . . . . : Yes

Wireless LAN adapter Wi-Fi:

Connection-specific DNS Suffix . : home.network

Description . . . . . . . . . . . : Qualcomm Atheros AR9485WB-EG Wireless Network Adapter

Physical Address. . . . . . . . . : 50-B7-C3-5F-17-01

DHCP Enabled. . . . . . . . . . . : Yes

Autoconfiguration Enabled . . . . : Yes

Link-local IPv6 Address . . . . . : fe80::1951:93dc:4fa9:5265%3(Preferred)

IPv4 Address. . . . . . . . . . . : 10.0.0.8(Preferred)

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Lease Obtained. . . . . . . . . . : Tuesday, August 19, 2014 1:27:06 PM

Lease Expires . . . . . . . . . . : Tuesday, August 26, 2014 1:27:11 PM

Default Gateway . . . . . . . . . : 10.0.0.1

DHCP Server . . . . . . . . . . . : 10.0.0.1

DHCPv6 IAID . . . . . . . . . . . : 266863514

DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1B-2F-E9-EB-20-89-84-10-15-AC

DNS Servers . . . . . . . . . . . : 75.75.75.75

75.75.76.76

NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter isatap.home.network:

Media State . . . . . . . . . . . : Media disconnected

Connection-specific DNS Suffix . : home.network

Description . . . . . . . . . . . : Microsoft ISATAP Adapter

Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0

DHCP Enabled. . . . . . . . . . . : No

Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Teredo Tunneling Pseudo-Interface:

Connection-specific DNS Suffix . :

Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface

Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0

DHCP Enabled. . . . . . . . . . . : No

Autoconfiguration Enabled . . . . : Yes

IPv6 Address. . . . . . . . . . . : 2001:0:5ef5:79fb:2046:eee:f5ff:fff7(Preferred)

Link-local IPv6 Address . . . . . : fe80::2046:eee:f5ff:fff7%10(Preferred)

Default Gateway . . . . . . . . . : ::

DHCPv6 IAID . . . . . . . . . . . : 184549376

DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1B-2F-E9-EB-20-89-84-10-15-AC

NetBIOS over Tcpip. . . . . . . . : Disabled

Server: cdns01.comcast.net

Address: 75.75.75.75

Name: google.com

Addresses: 2607:f8b0:4005:802::1004

74.125.239.135

74.125.239.134

74.125.239.129

74.125.239.142

74.125.239.133

74.125.239.128

74.125.239.136

74.125.239.137

74.125.239.130

74.125.239.131

74.125.239.132

Pinging google.com [74.125.239.129] with 32 bytes of data:

Reply from 74.125.239.129: bytes=32 time=24ms TTL=55

Ping statistics for 74.125.239.129:

Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 24ms, Maximum = 24ms, Average = 24ms

Server: cdns01.comcast.net

Address: 75.75.75.75

Name: yahoo.com

Addresses: 206.190.36.45

98.138.253.109

98.139.183.24

Pinging yahoo.com [206.190.36.45] with 32 bytes of data:

Reply from 206.190.36.45: bytes=32 time=44ms TTL=50

Reply from 206.190.36.45: bytes=32 time=47ms TTL=50

Ping statistics for 206.190.36.45:

Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 44ms, Maximum = 47ms, Average = 45ms

Pinging 127.0.0.1 with 32 bytes of data:

Reply from 127.0.0.1: bytes=32 time=1ms TTL=128

Ping statistics for 127.0.0.1:

Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 1ms, Maximum = 1ms, Average = 1ms

===========================================================================

Interface List

9...52 b7 c3 5f 17 01 ......Microsoft Hosted Network Virtual Adapter

8...12 b7 c3 5f 17 01 ......Microsoft Wi-Fi Direct Virtual Adapter

6...50 b7 c3 5f 17 02 ......Bluetooth Device (Personal Area Network)

4...20 89 84 10 15 ac ......Realtek PCIe GBE Family Controller

3...50 b7 c3 5f 17 01 ......Qualcomm Atheros AR9485WB-EG Wireless Network Adapter

1...........................Software Loopback Interface 1

7...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter

10...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface

===========================================================================

IPv4 Route Table

===========================================================================

Active Routes:

Network Destination Netmask Gateway Interface Metric

0.0.0.0 0.0.0.0 10.0.0.1 10.0.0.8 25

10.0.0.0 255.255.255.0 On-link 10.0.0.8 281

10.0.0.8 255.255.255.255 On-link 10.0.0.8 281

10.0.0.255 255.255.255.255 On-link 10.0.0.8 281

127.0.0.0 255.0.0.0 On-link 127.0.0.1 306

127.0.0.1 255.255.255.255 On-link 127.0.0.1 306

127.255.255.255 255.255.255.255 On-link 127.0.0.1 306

224.0.0.0 240.0.0.0 On-link 127.0.0.1 306

224.0.0.0 240.0.0.0 On-link 10.0.0.8 281

255.255.255.255 255.255.255.255 On-link 127.0.0.1 306

255.255.255.255 255.255.255.255 On-link 10.0.0.8 281

===========================================================================

Persistent Routes:

None

IPv6 Route Table

===========================================================================

Active Routes:

If Metric Network Destination Gateway

10 306 ::/0 On-link

1 306 ::1/128 On-link

10 306 2001::/32 On-link

10 306 2001:0:5ef5:79fb:2046:eee:f5ff:fff7/128

On-link

3 281 fe80::/64 On-link

10 306 fe80::/64 On-link

3 281 fe80::1951:93dc:4fa9:5265/128

On-link

10 306 fe80::2046:eee:f5ff:fff7/128

On-link

1 306 ff00::/8 On-link

3 281 ff00::/8 On-link

10 306 ff00::/8 On-link

===========================================================================

Persistent Routes:

None

========================= Winsock entries =====================================

Catalog5 01 C:\WINDOWS\SysWOW64\napinsp.dll [53760] (Microsoft Corporation)

Catalog5 02 C:\WINDOWS\SysWOW64\pnrpnsp.dll [68096] (Microsoft Corporation)

Catalog5 03 C:\WINDOWS\SysWOW64\pnrpnsp.dll [68096] (Microsoft Corporation)

Catalog5 04 C:\WINDOWS\SysWOW64\NLAapi.dll [64000] (Microsoft Corporation)

Catalog5 05 C:\WINDOWS\SysWOW64\mswsock.dll [270848] (Microsoft Corporation)

Catalog5 06 C:\WINDOWS\SysWOW64\winrnr.dll [21504] (Microsoft Corporation)

Catalog5 07 C:\WINDOWS\SysWOW64\wshbth.dll [51200] (Microsoft Corporation)

Catalog9 01 C:\WINDOWS\SysWOW64\mswsock.dll [270848] (Microsoft Corporation)

Catalog9 02 C:\WINDOWS\SysWOW64\mswsock.dll [270848] (Microsoft Corporation)

Catalog9 03 C:\WINDOWS\SysWOW64\mswsock.dll [270848] (Microsoft Corporation)

Catalog9 04 C:\WINDOWS\SysWOW64\mswsock.dll [270848] (Microsoft Corporation)

Catalog9 05 C:\WINDOWS\SysWOW64\mswsock.dll [270848] (Microsoft Corporation)

Catalog9 06 C:\WINDOWS\SysWOW64\mswsock.dll [270848] (Microsoft Corporation)

Catalog9 07 C:\WINDOWS\SysWOW64\mswsock.dll [270848] (Microsoft Corporation)

Catalog9 08 C:\WINDOWS\SysWOW64\mswsock.dll [270848] (Microsoft Corporation)

Catalog9 09 C:\WINDOWS\SysWOW64\mswsock.dll [270848] (Microsoft Corporation)

Catalog9 10 C:\WINDOWS\SysWOW64\mswsock.dll [270848] (Microsoft Corporation)

Catalog9 11 C:\WINDOWS\SysWOW64\mswsock.dll [270848] (Microsoft Corporation)

x64-Catalog5 01 C:\Windows\System32\napinsp.dll [67584] (Microsoft Corporation)

x64-Catalog5 02 C:\Windows\System32\pnrpnsp.dll [87040] (Microsoft Corporation)

x64-Catalog5 03 C:\Windows\System32\pnrpnsp.dll [87040] (Microsoft Corporation)

x64-Catalog5 04 C:\Windows\System32\NLAapi.dll [84480] (Microsoft Corporation)

x64-Catalog5 05 C:\Windows\System32\mswsock.dll [338432] (Microsoft Corporation)

x64-Catalog5 06 C:\Windows\System32\winrnr.dll [30208] (Microsoft Corporation)

x64-Catalog5 07 C:\Windows\System32\wshbth.dll [63488] (Microsoft Corporation)

x64-Catalog9 01 C:\Windows\System32\mswsock.dll [338432] (Microsoft Corporation)

x64-Catalog9 02 C:\Windows\System32\mswsock.dll [338432] (Microsoft Corporation)

x64-Catalog9 03 C:\Windows\System32\mswsock.dll [338432] (Microsoft Corporation)

x64-Catalog9 04 C:\Windows\System32\mswsock.dll [338432] (Microsoft Corporation)

x64-Catalog9 05 C:\Windows\System32\mswsock.dll [338432] (Microsoft Corporation)

x64-Catalog9 06 C:\Windows\System32\mswsock.dll [338432] (Microsoft Corporation)

x64-Catalog9 07 C:\Windows\System32\mswsock.dll [338432] (Microsoft Corporation)

x64-Catalog9 08 C:\Windows\System32\mswsock.dll [338432] (Microsoft Corporation)

x64-Catalog9 09 C:\Windows\System32\mswsock.dll [338432] (Microsoft Corporation)

x64-Catalog9 10 C:\Windows\System32\mswsock.dll [338432] (Microsoft Corporation)

x64-Catalog9 11 C:\Windows\System32\mswsock.dll [338432] (Microsoft Corporation)

========================= Event log errors: ===============================

Application errors:

==================

Error: (08/19/2014 01:40:54 PM) (Source: SideBySide) (User: )

A component version required by the application conflicts with another component version already active.

Conflicting components are:.

Component 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest.

Component 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.

Error: (08/19/2014 01:29:19 PM) (Source: Windows Search Service) (User: )

Description: The index cannot be initialized.

Details:

The specified object cannot be found. Specify the name of an existing object. (HRESULT : 0x80040d06) (0x80040d06)

Error: (08/19/2014 01:29:19 PM) (Source: Windows Search Service) (User: )

Description: The application cannot be initialized.

Context: Windows Application

Details:

The specified object cannot be found. Specify the name of an existing object. (HRESULT : 0x80040d06) (0x80040d06)

Error: (08/19/2014 01:29:19 PM) (Source: Windows Search Service) (User: )

Description: The gatherer object cannot be initialized.

Context: Windows Application, SystemIndex Catalog

Details:

The specified object cannot be found. Specify the name of an existing object. (HRESULT : 0x80040d06) (0x80040d06)

Error: (08/19/2014 01:29:19 PM) (Source: Windows Search Service) (User: )

Description: The plug-in in <Search.TripoliIndexer> cannot be initialized.

Context: Windows Application, SystemIndex Catalog

Details:

The specified object cannot be found. Specify the name of an existing object. (HRESULT : 0x80040d06) (0x80040d06)

Error: (08/19/2014 01:29:19 PM) (Source: Windows Search Service) (User: )

Description: The plug-in manager <Search.TripoliIndexer> cannot be initialized.

Context: Windows Application

Details:

(HRESULT : 0x8e5e0210) (0x8e5e0210)

Error: (08/19/2014 01:29:19 PM) (Source: Windows Search Service) (User: )

Description: The Windows Search Service is being stopped because there is a problem with the indexer: The catalog is corrupt.

Details:

The content index catalog is corrupt. 0xc0041801 (0xc0041801)

Error: (08/19/2014 01:29:19 PM) (Source: Windows Search Service) (User: )

Details:

0x8e5e0210 (0x8e5e0210)

Error: (08/19/2014 01:29:19 PM) (Source: ESENT) (User: )

Description: SearchIndexer (1684) Windows: Error -1811 (0xfffff8ed) occurred while opening logfile C:\ProgramData\Microsoft\Search\Data\Applications\Windows\edb0000C.log.

Error: (08/18/2014 01:59:32 PM) (Source: Perflib) (User: )

Description: BITSC:\Windows\System32\bitsperf.dll8

System errors:

=============

Error: (08/19/2014 03:21:35 PM) (Source: DCOM) (User: Fox)

Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (08/19/2014 01:30:37 PM) (Source: Service Control Manager) (User: )

%%1056

Error: (08/19/2014 01:29:19 PM) (Source: Service Control Manager) (User: )

Description: The Windows Search service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.

Error: (08/19/2014 01:29:19 PM) (Source: Service Control Manager) (User: )

Description: The Windows Search service terminated with the following service-specific error:

%%2147749126

Error: (08/19/2014 01:27:00 PM) (Source: Service Control Manager) (User: )

Description: The AppEx Networks Accelerator LWF service failed to start due to the following error:

%%31

Error: (08/19/2014 01:27:00 PM) (Source: APXACC) (User: )

Description: The NDIS6 LWF initialization has failed. (0xC0000001)

Error: (08/19/2014 01:26:59 PM) (Source: EventLog) (User: )

Description: The previous system shutdown at 12:59:07 PM on ‎8/‎19/‎2014 was unexpected.

Error: (08/19/2014 00:18:17 PM) (Source: DCOM) (User: Fox)

Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (08/19/2014 00:17:47 PM) (Source: DCOM) (User: Fox)

Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (08/19/2014 01:01:04 AM) (Source: cdrom) (User: )

Description: The device, \Device\CdRom0, is not ready for access yet.

Microsoft Office Sessions:

=========================

Error: (08/19/2014 01:40:54 PM) (Source: SideBySide)(User: )

Error: (08/19/2014 01:29:19 PM) (Source: Windows Search Service)(User: )

Description:

Details:

The specified object cannot be found. Specify the name of an existing object. (HRESULT : 0x80040d06) (0x80040d06)

Error: (08/19/2014 01:29:19 PM) (Source: Windows Search Service)(User: )

Description: Context: Windows Application

Details:

The specified object cannot be found. Specify the name of an existing object. (HRESULT : 0x80040d06) (0x80040d06)

Error: (08/19/2014 01:29:19 PM) (Source: Windows Search Service)(User: )

Description: Context: Windows Application, SystemIndex Catalog

Details:

The specified object cannot be found. Specify the name of an existing object. (HRESULT : 0x80040d06) (0x80040d06)

Error: (08/19/2014 01:29:19 PM) (Source: Windows Search Service)(User: )

Description: Context: Windows Application, SystemIndex Catalog

Details:

The specified object cannot be found. Specify the name of an existing object. (HRESULT : 0x80040d06) (0x80040d06)

Search.TripoliIndexer

Error: (08/19/2014 01:29:19 PM) (Source: Windows Search Service)(User: )

Description: Context: Windows Application

Details:

(HRESULT : 0x8e5e0210) (0x8e5e0210)

Search.TripoliIndexer

Error: (08/19/2014 01:29:19 PM) (Source: Windows Search Service)(User: )

Description:

Details:

The content index catalog is corrupt. 0xc0041801 (0xc0041801)

The catalog is corrupt

Error: (08/19/2014 01:29:19 PM) (Source: Windows Search Service)(User: )

Description:

Details:

0x8e5e0210 (0x8e5e0210)

4810 - enduser\mssearch2\search\ytrip\common\util\jetutil.cpp (167)

Error: (08/19/2014 01:29:19 PM) (Source: ESENT)(User: )

Description: SearchIndexer1684Windows: C:\ProgramData\Microsoft\Search\Data\Applications\Windows\edb0000C.log-1811 (0xfffff8ed)

Error: (08/18/2014 01:59:32 PM) (Source: Perflib)(User: )

Description: BITSC:\Windows\System32\bitsperf.dll8

CodeIntegrity Errors:

===================================

Date: 2014-08-14 13:47:18.538

=========================== Installed Programs ============================