[myrti]

Hi,

 

I'm covering for Naathim while he's gone. Do you use the programs identified? Datamngr, community alert, universal downloader and ilivid player? They are considered potentially unwanted as they are often installed without your consent, but if you use them knowingly anyways, then we would keep them.

 

regards

myrti

[Advertisements]

Hi myrti,

 

Thanks for chiming in.  Don't use any of those programs.

[rocket985]

Hi myrti,

 

Thanks for chiming in.  Don't use any of those programs.

[myrti]

Hi,

let's use adwcleaner to remove these entries:

Please download AdwCleaner by Xplode and save to your Desktop.

• Double click on AdwCleaner.exe to run the tool.
  Vista/Windows 7/8 users right-click and select Run As Administrator
• Click on the Scan button.
• AdwCleaner will begin...be patient as the scan may take some time to complete.
• After the scan has finished, click on the Report button...a logfile (AdwCleaner[R#].txt) will open in Notepad for review (where the largest value of # represents the most recent report).
• The contents of the log file may be confusing. Unless you see a program name that you know should not be removed, don't worry about it. If you see an entry you want to keep, let me know about it.
• Copy and paste the contents of that logfile in your next reply.
• A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.

This will create a report for now, afterwards we will rerun it to remove the entries.

regards
myrti

[rocket985]

Have not seem improvement.

 

 

AdwCleaner report:

  

 

 

# AdwCleaner v3.310 - Report created 16/09/2014 at 11:15:31

# Updated 12/09/2014 by Xplode

# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)

# Username : dad - JOHN-D0FA019223

# Running from : C:\Documents and Settings\dad.JOHN-D0FA019223\Desktop\AdwCleaner.exe

# Option : Scan

 

***** [ Services ] *****

 

 

***** [ Files / Folders ] *****

 

Folder Found : C:\Documents and Settings\All Users.WINDOWS\Application Data\Viewpoint

Folder Found : C:\Program Files\Conduit

Folder Found : C:\Program Files\iWin

Folder Found : C:\Program Files\Viewpoint

 

***** [ Scheduled Tasks ] *****

 

 

***** [ Shortcuts ] *****

 

 

***** [ Registry ] *****

 

Key Found : HKCU\Software\AppDataLow\Software\Conduit

Key Found : HKCU\Software\Conduit

Key Found : HKCU\Software\SmartBar

Key Found : HKCU\Software\Softonic

Key Found : HKCU\Software\YahooPartnerToolbar

Key Found : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtl

Key Found : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtl.1

Key Found : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtlSecondary

Key Found : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtlSecondary.1

Key Found : HKLM\SOFTWARE\Classes\CLSID\{03F998B2-0E00-11D3-A498-00104B6EB52E}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{9AFB8248-617F-460D-9366-D71CDEDA3179}

Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT3201318

Key Found : HKLM\SOFTWARE\Conduit

Key Found : HKLM\SOFTWARE\MetaStream

Key Found : HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{03F998B2-0E00-11D3-A498-00104B6EB52E}

Key Found : HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}

Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ViewpointMediaPlayer

Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6

Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA

Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59

Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ViewpointMediaPlayer

Key Found : HKLM\SOFTWARE\MozillaPlugins\@viewpoint.com/VMP

Key Found : HKLM\SOFTWARE\Viewpoint

 

***** [ Browsers ] *****

 

-\\ Internet Explorer v8.0.6001.18702

 

 

-\\ Mozilla Firefox v32.0 (x86 en-US)

 

*************************

 

AdwCleaner[R0].txt - [2573 octets] - [16/09/2014 11:15:31]

 

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [2633 octets] ##########

 

[Naathim]

Hi

This was only the scan mode. Now let's try to deal with our findings.



Fix with AdwCleaner

Please re-run AdwCleaner.

• Right-click on icon and select Run as Administrator to start the tool.
• Follow the prompts and click Scan.
• When finished, please click Clean.
• Upon completion, click Report. A log (AdwCleaner[S*].txt) will open.

Please include the contents of that file in your reply.

[rocket985]

Hi Natt,

 

Latest scan:

 

 

 

# AdwCleaner v3.310 - Report created 18/09/2014 at 06:41:22

# Updated 12/09/2014 by Xplode

# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)

# Username : dad - JOHN-D0FA019223

# Running from : C:\Documents and Settings\dad.JOHN-D0FA019223\Desktop\AdwCleaner.exe

# Option : Clean

 

***** [ Services ] *****

 

 

***** [ Files / Folders ] *****

 

Folder Deleted : C:\Documents and Settings\All Users.WINDOWS\Application Data\Viewpoint

Folder Deleted : C:\Program Files\Viewpoint

 

***** [ Scheduled Tasks ] *****

 

 

***** [ Shortcuts ] *****

 

 

***** [ Registry ] *****

 

Key Deleted : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtl

Key Deleted : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtl.1

Key Deleted : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtlSecondary

Key Deleted : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtlSecondary.1

Key Deleted : HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{03F998B2-0E00-11D3-A498-00104B6EB52E}

Key Deleted : HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}

Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@viewpoint.com/VMP

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{03F998B2-0E00-11D3-A498-00104B6EB52E}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}

Key Deleted : HKLM\SOFTWARE\MetaStream

Key Deleted : HKLM\SOFTWARE\Viewpoint

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ViewpointMediaPlayer

 

***** [ Browsers ] *****

 

-\\ Internet Explorer v8.0.6001.18702

 

 

-\\ Mozilla Firefox v32.0 (x86 en-US)

 

*************************

 

AdwCleaner[R0].txt - [2713 octets] - [16/09/2014 11:15:31]

AdwCleaner[R1].txt - [1876 octets] - [18/09/2014 06:12:30]

AdwCleaner[S0].txt - [2830 octets] - [17/09/2014 06:56:15]

AdwCleaner[S1].txt - [1825 octets] - [18/09/2014 06:41:22]

 

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1885 octets] ##########

[Naathim]

Good Next round:



Fix with Junkware Removal Tool

Please download JRT by Thisisu and save the file to your desktop.
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.

• Right-click on icon and select Run as Administrator to start the tool.
• Follow the prompts and let this process run uninterrupted.
• This scan can take a while, depending on your System specs.
• Upon completion, a log (JRT.txt) will open on your desktop.

Please include the contents of that file in your reply.
Do not forget to re-enable your previously switched off protection software!
Please also manually reboot your machine after this procedure.

[rocket985]

Next run.

 

 

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.1.6 (09.18.2014:1)

OS: Microsoft Windows XP x86

Ran by dad on Thu 09/18/2014 at 10:28:22.54

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

 

 

 

~~~ Services

 

 

 

~~~ Registry Values

 

 

 

~~~ Registry Keys

 

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\axmetastream.metastreamctl

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\axmetastream.metastreamctl.1

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\axmetastream.metastreamctlsecondary

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\axmetastream.metastreamctlsecondary.1

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\viewpointmediaplayer

 

 

 

~~~ Files

 

 

 

~~~ Folders

 

Successfully deleted: [Folder] "C:\Documents and Settings\All Users.WINDOWS\application data\boost_interprocess"

Successfully deleted: [Folder] "C:\Documents and Settings\All Users.WINDOWS\application data\viewpoint"

Successfully deleted: [Folder] "C:\Documents and Settings\dad.JOHN-D0FA019223\Application Data\searchquband"

Successfully deleted: [Folder] "C:\Documents and Settings\dad.JOHN-D0FA019223\appdata\locallow\datamngr"

Successfully deleted: [Folder] "C:\Documents and Settings\dad.JOHN-D0FA019223\Local Settings\Application Data\conduit"

Successfully deleted: [Folder] "C:\Documents and Settings\dad.JOHN-D0FA019223\Local Settings\Application Data\ilivid player"

Successfully deleted: [Folder] "C:\Program Files\coupons"

Failed to delete: [Folder] "C:\Program Files\viewpoint"

 

 

 

~~~ FireFox

 

Successfully deleted: [File] C:\Documents and Settings\dad.JOHN-D0FA019223\Application Data\mozilla\firefox\profiles\3mgk3tqf.default\user.js

Successfully deleted the following from C:\Documents and Settings\dad.JOHN-D0FA019223\Application Data\mozilla\firefox\profiles\3mgk3tqf.default\prefs.js

 

user_pref("browser.search.defaulturl", "hxxp://search.aol.com/aolcom/search?invocationType=tb50ffTB50CL-chromesbox-en-us&query=");

Emptied folder: C:\Documents and Settings\dad.JOHN-D0FA019223\Application Data\mozilla\firefox\profiles\3mgk3tqf.default\minidumps [10 files]

 

 

 

 

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on Thu 09/18/2014 at 10:38:32.71

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

[Naathim]

Ok. Now please post me fresh FRST set of logfiles.


Scan with Farbar Recovery Scan Tool

Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.

• Right-click on icon and select Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Make sure that Addition option is checked.
• Press Scan button and wait.
• The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.

Please include their content in your next reply.

[rocket985]

The fresh stuff.

 

 

 

 

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 07-09-2014

Ran by dad at 2014-09-18 15:19:17

Running from C:\Documents and Settings\dad.JOHN-D0FA019223\Desktop

Boot Mode: Normal

==========================================================

 

 

==================== Security Center ========================

 

(If an entry is included in the fixlist, it will be removed.)

 

AV: avast! Antivirus (Disabled - Up to date) {7591DB91-41F0-48A3-B128-1A293FD8233D}

 

==================== Installed Programs ======================

 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

 

Adblock Plus for IE (32-bit) (HKLM\...\{21B632E1-4B3D-4AC2-9ABD-E00544F67D48}) (Version: 1.1 - Eyeo GmbH)

Adblock Plus for IE (HKLM\...\{fd97d1e2-368a-4cd9-af63-8eeff938044a}) (Version: 1.1 - )

Adobe Flash Player 15 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 15.0.0.152 - Adobe Systems Incorporated)

Adobe Flash Player 15 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.08) (HKLM\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.08 - Adobe Systems Incorporated)

AOL Uninstaller (Choose which Products to Remove) (HKLM\...\AOL Uninstaller) (Version:  - AOL Inc.)

avast! Free Antivirus (HKLM\...\avast) (Version: 9.0.2021 - AVAST Software)

Critical Update for Windows Media Player 11 (KB959772) (HKLM\...\KB959772_WM11) (Version:  - Microsoft Corporation)

Dell Driver Download Manager (HKCU\...\309a46b1dc89b774) (Version: 1.0.0.0 - Dell Inc.)

EPSON Printer Software (HKLM\...\EPSON Printer and Utilities) (Version:  - )

GoZone iSync (Version: 2.0.0 - Virgin HealthMiles) Hidden

HP PrecisionScan LTX (HKLM\...\HP PrecisionScan LTX) (Version:  - )

HP ScanJet Scan-to-Web Wizard (HKLM\...\Scan-To-Web) (Version:  - )

Java 7 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.510 - Oracle)

Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden

Java™ 6 Update 21 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83216015FF}) (Version: 6.0.210 - Sun Microsystems, Inc.)

JavaFX 2.1.0 (HKLM\...\{1111706F-666A-4037-7777-210328764D10}) (Version: 2.1.0 - Oracle Corporation)

Malwarebytes Anti-Malware version 2.0.2.1012 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)

Microsoft .NET Framework 2.0 Service Pack 2 (HKLM\...\{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}) (Version: 2.2.30729 - Microsoft Corporation)

Microsoft .NET Framework 3.0 Service Pack 2 (HKLM\...\{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}) (Version: 3.2.30729 - Microsoft Corporation)

Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version:  - Microsoft Corporation)

Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) Hidden

Microsoft Compression Client Pack 1.0 for Windows XP (HKLM\...\MSCompPackV1) (Version: 1 - Microsoft Corporation)

Microsoft Internationalized Domain Names Mitigation APIs (Version:  - Microsoft Corporation) Hidden

Microsoft National Language Support Downlevel APIs (Version:  - Microsoft Corporation) Hidden

Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)

Microsoft Office 2007 Service Pack 3 (SP3) (Version:  - Microsoft) Hidden

Microsoft Office Excel MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)

Microsoft Office Home and Student 2007 (HKLM\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)

Microsoft Office Home and Student 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office OneNote MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office PowerPoint MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (Spanish) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proofing (English) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden

Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (Version:  - Microsoft) Hidden

Microsoft Office Shared MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Word MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Software Update for Web Folders  (English) 12 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft User-Mode Driver Framework Feature Pack 1.0 (HKLM\...\Wudf01000) (Version:  - Microsoft Corporation)

Microsoft VC9 runtime libraries (Version: 1.0.0 - AOL Inc.) Hidden

Microsoft VC9 runtime libraries (Version: 1.0.0 - AOL LLC) Hidden

Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Mozilla Firefox 32.0 (x86 en-US) (HKLM\...\Mozilla Firefox 32.0 (x86 en-US)) (Version: 32.0 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 30.0 - Mozilla)

Panda Cloud Cleaner (HKLM\...\{92B2B132-C7F0-43DC-921A-4493C04F78A4}_is1) (Version: 1.0.104 - Panda Security)

QuickTime (HKLM\...\{C78EAC6F-7A73-452E-8134-DBB2165C5A68}) (Version: 7.62.14.0 - Apple Inc.)

RangeMax™ NEXT Wireless Adapter WN311B (HKLM\...\{1047106F-3AED-4661-B919-6D377BF641CF}) (Version:  - )

RealPlayer Basic (HKLM\...\RealPlayer 6.0) (Version:  - )

SoundMAX (HKLM\...\{F0A37341-D692-11D4-A984-009027EC0A9C}) (Version: 5.12.01.5246 - Analog Devices)

swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)

Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (HKLM\...\{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707) (Version: 1 - Microsoft Corporation)

Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version:  - Microsoft)

Update for Windows Internet Explorer 8 (KB2598845) (HKLM\...\KB2598845-IE8) (Version: 1 - Microsoft Corporation)

Update for Windows XP (KB2141007) (HKLM\...\KB2141007) (Version: 1 - Microsoft Corporation)

Update for Windows XP (KB2345886) (HKLM\...\KB2345886) (Version: 1 - Microsoft Corporation)

Update for Windows XP (KB2467659) (HKLM\...\KB2467659) (Version: 1 - Microsoft Corporation)

Update for Windows XP (KB2541763) (HKLM\...\KB2541763) (Version: 1 - Microsoft Corporation)

Update for Windows XP (KB2607712) (HKLM\...\KB2607712) (Version: 1 - Microsoft Corporation)

Update for Windows XP (KB2616676) (HKLM\...\KB2616676) (Version: 1 - Microsoft Corporation)

Update for Windows XP (KB2641690) (HKLM\...\KB2641690) (Version: 1 - Microsoft Corporation)

Update for Windows XP (KB2661254-v2) (HKLM\...\KB2661254-v2) (Version: 2 - Microsoft Corporation)

Update for Windows XP (KB2718704) (HKLM\...\KB2718704) (Version: 1 - Microsoft Corporation)

Update for Windows XP (KB2736233) (HKLM\...\KB2736233) (Version: 1 - Microsoft Corporation)

Update for Windows XP (KB2749655) (HKLM\...\KB2749655) (Version: 1 - Microsoft Corporation)

Update for Windows XP (KB2863058) (HKLM\...\KB2863058) (Version: 1 - Microsoft Corporation)

Update for Windows XP (KB2904266) (HKLM\...\KB2904266) (Version: 1 - Microsoft Corporation)

Update for Windows XP (KB2934207) (HKLM\...\KB2934207) (Version: 1 - Microsoft Corporation)

Update for Windows XP (KB951978) (Version: 1 - Microsoft Corporation) Hidden

Update for Windows XP (KB955759) (HKLM\...\KB955759) (Version: 1 - Microsoft Corporation)

Update for Windows XP (KB955839) (HKLM\...\KB955839) (Version: 1 - Microsoft Corporation)

Update for Windows XP (KB967715) (HKLM\...\KB967715) (Version: 1 - Microsoft Corporation)

Update for Windows XP (KB968389) (HKLM\...\KB968389) (Version: 1 - Microsoft Corporation)

Update for Windows XP (KB971029) (HKLM\...\KB971029) (Version: 1 - Microsoft Corporation)

Update for Windows XP (KB971737) (HKLM\...\KB971737) (Version: 1 - Microsoft Corporation)

Update for Windows XP (KB973687) (HKLM\...\KB973687) (Version: 1 - Microsoft Corporation)

Update for Windows XP (KB973815) (HKLM\...\KB973815) (Version: 1 - Microsoft Corporation)

WebFldrs XP (Version: 9.50.7523 - Microsoft Corporation) Hidden

Windows Genuine Advantage Validation Tool (KB892130) (HKLM\...\KB892130) (Version:  - Microsoft Corporation)

Windows Genuine Advantage Validation Tool (KB892130) (HKLM\...\WGA) (Version: 1.7.0069.2 - Microsoft Corporation)

Windows Internet Explorer 7 (Version: 20070813.185237 - Microsoft Corporation) Hidden

Windows Internet Explorer 8 (HKLM\...\ie8) (Version: 20090308.140743 - Microsoft Corporation)

Windows Media Format 11 runtime (HKLM\...\Windows Media Format Runtime) (Version:  - )

Windows Media Format 11 runtime (Version:  - Microsoft Corporation) Hidden

Windows Media Player 11 (HKLM\...\Windows Media Player) (Version:  - )

Windows Media Player 11 (Version:  - Microsoft Corporation) Hidden

Windows XP Service Pack 3 (HKLM\...\Windows XP Service Pack) (Version: 20080414.031525 - Microsoft Corporation)

 

==================== Custom CLSID (selected items): ==========================

 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

 

 

==================== Restore Points  =========================

 

18-09-2014 10:51:31 System Checkpoint

 

==================== Hosts content: ==========================

 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

 

2004-08-04 06:00 - 2014-09-09 11:29 - 00000753 ____A C:\WINDOWS\system32\Drivers\etc\hosts

 

127.0.0.1       localhost 

 

==================== Scheduled Tasks (whitelisted) =============

 

 

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

 

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\WINDOWS\Tasks\avast! Emergency Update.job => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe

Task: C:\WINDOWS\Tasks\Microsoft Windows XP End of Service Notification Logon.job => C:\WINDOWS\system32\xp_eos.exe

Task: C:\WINDOWS\Tasks\Microsoft Windows XP End of Service Notification Monthly.job => C:\WINDOWS\system32\xp_eos.exe

 

==================== Loaded Modules (whitelisted) =============

 

2011-09-21 07:35 - 2014-08-04 15:45 - 00301152 _____ () C:\Program Files\AVAST Software\Avast\aswProperty.dll

2014-09-17 07:14 - 2014-09-17 07:14 - 02865152 _____ () C:\Program Files\AVAST Software\Avast\defs\14091701\algo.dll

2009-04-09 18:07 - 2007-01-18 10:29 - 00102400 _____ () C:\WINDOWS\system32\ASupplicant.dll

2013-12-03 08:44 - 2014-08-04 15:45 - 19329904 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll

2014-07-02 05:17 - 2014-07-02 05:17 - 00048640 _____ () C:\Program Files\AOL Desktop 9.7b\zlib.dll

2014-07-02 05:17 - 2014-07-02 05:17 - 21151232 _____ () C:\Program Files\AOL Desktop 9.7b\libcef.dll

2014-07-02 05:17 - 2014-07-02 05:17 - 00648704 _____ () C:\Program Files\AOL Desktop 9.7b\libglesv2.dll

2014-07-02 05:17 - 2014-07-02 05:17 - 00122880 _____ () C:\Program Files\AOL Desktop 9.7b\libegl.dll

2014-07-02 05:17 - 2014-07-02 05:17 - 00094208 _____ () C:\Program Files\AOL Desktop 9.7b\Components\Tier2Svc.dll

2014-07-02 05:17 - 2014-07-02 05:17 - 00060928 _____ () C:\Program Files\AOL Desktop 9.7b\Components\DataSvcs.dll

2014-09-09 15:45 - 2014-09-09 15:45 - 16825520 _____ () C:\WINDOWS\system32\Macromed\Flash\NPSWF32_15_0_0_152.dll

 

==================== Alternate Data Streams (whitelisted) =========

 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

 

 

==================== Safe Mode (whitelisted) ===================

 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

 

 

==================== EXE Association (whitelisted) =============

 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

 

 

==================== MSCONFIG/TASK MANAGER disabled items =========

 

(Currently there is no automatic fix for this section.)

 

MSCONFIG\startupreg: CTFMON.EXE => 

MSCONFIG\startupreg: MSMSGS => 

MSCONFIG\startupreg: QuickTime Task => 

MSCONFIG\startupreg: RealTray => 

MSCONFIG\startupreg: SunJavaUpdateSched => 

 

==================== Faulty Device Manager Devices =============

 

Name: Video Controller (VGA Compatible)

Description: Video Controller (VGA Compatible)

Class Guid: {4D36E97E-E325-11CE-BFC1-08002BE10318}

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

 

Name: Video Controller

Description: Video Controller

Class Guid: {4D36E97E-E325-11CE-BFC1-08002BE10318}

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

 

Name: Ethernet Controller

Description: Ethernet Controller

Class Guid: {4D36E97E-E325-11CE-BFC1-08002BE10318}

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

 

 

==================== Event log errors: =========================

 

Application errors:

==================

Error: (09/11/2014 07:03:35 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application frst.exe, version 7.9.2014.0, faulting module frst.exe, version 7.9.2014.0, fault address 0x0001f09e.

Processing media-specific event for [frst.exe!ws!]

 

Error: (09/10/2014 05:43:39 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application plugin-container.exe, version 32.0.0.5350, faulting module mozalloc.dll, version 32.0.0.5350, fault address 0x0000141b.

Processing media-specific event for [plugin-container.exe!ws!]

 

Error: (09/09/2014 00:01:10 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application plugin-container.exe, version 32.0.0.5350, faulting module mozalloc.dll, version 32.0.0.5350, fault address 0x0000141b.

Processing media-specific event for [plugin-container.exe!ws!]

 

Error: (09/06/2014 03:34:34 PM) (Source: crypt32) (EventID: 11) (User: )

Description: Failed extract of third-party root list from auto update cab at: <http://www.download....authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.

 

Error: (09/06/2014 03:34:34 PM) (Source: crypt32) (EventID: 11) (User: )

Description: Failed extract of third-party root list from auto update cab at: <http://www.download....authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.

 

Error: (08/22/2014 02:36:46 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application plugin-container.exe, version 31.0.0.5310, faulting module mozalloc.dll, version 31.0.0.5310, fault address 0x0000141b.

Processing media-specific event for [plugin-container.exe!ws!]

 

Error: (08/11/2014 09:30:37 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application plugin-container.exe, version 31.0.0.5310, faulting module mozalloc.dll, version 31.0.0.5310, fault address 0x0000141b.

Processing media-specific event for [plugin-container.exe!ws!]

 

Error: (08/11/2014 09:30:33 AM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Hanging application firefox.exe, version 31.0.0.5310, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

 

Error: (08/11/2014 09:28:31 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application plugin-container.exe, version 31.0.0.5310, faulting module mozalloc.dll, version 31.0.0.5310, fault address 0x0000141b.

Processing media-specific event for [plugin-container.exe!ws!]

 

Error: (07/28/2014 00:32:21 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application plugin-container.exe, version 30.0.0.5269, faulting module mozalloc.dll, version 30.0.0.5269, fault address 0x0000141b.

Processing media-specific event for [plugin-container.exe!ws!]

 

 

System errors:

=============

Error: (09/18/2014 06:46:28 AM) (Source: 0) (EventID: 1) (User: )

Description: 0xC0000043HarddiskVolume2

 

Error: (09/18/2014 06:42:24 AM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: The Print Spooler service failed to start due to the following error: 

%%1053

 

Error: (09/18/2014 06:42:24 AM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Timeout (30000 milliseconds) waiting for the Print Spooler service to connect.

 

Error: (09/18/2014 06:41:24 AM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: The AOL Connectivity Service service terminated unexpectedly.  It has done this 1 time(s).

 

Error: (09/18/2014 06:41:24 AM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: The Print Spooler service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.

 

Error: (09/18/2014 06:41:24 AM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: The WAN Miniport (ATW) Service service terminated unexpectedly.  It has done this 1 time(s).

 

Error: (09/17/2014 08:10:46 AM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: The Application Layer Gateway Service service terminated unexpectedly.  It has done this 1 time(s).

 

Error: (09/17/2014 08:10:45 AM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: The Java Quick Starter service terminated unexpectedly.  It has done this 1 time(s).

 

Error: (09/17/2014 06:56:17 AM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: The Print Spooler service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.

 

Error: (09/17/2014 06:56:17 AM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: The Java Quick Starter service terminated unexpectedly.  It has done this 1 time(s).

 

 

Microsoft Office Sessions:

=========================

 

==================== Memory info =========================== 

 

Processor:  Intel® Pentium® 4 CPU 2.80GHz

Percentage of memory in use: 73%

Total physical RAM: 502.08 MB

Available physical RAM: 133.35 MB

Total Pagefile: 1226.89 MB

Available Pagefile: 711.11 MB

Total Virtual: 2047.88 MB

Available Virtual: 1945.74 MB

 

==================== Drives ================================

 

Drive c: () (Fixed) (Total:70.92 GB) (Free:16.43 GB) NTFS ==>[Drive with boot components (Windows XP)]

 

==================== MBR & Partition Table ==================

 

========================================================

Disk: 0 (MBR Code: Windows XP) (Size: 74.5 GB) (Disk ID: D0F4738C)

Partition 1: (Not Active) - (Size=39 MB) - (Type=DE)

Partition 2: (Active) - (Size=70.9 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=3.5 GB) - (Type=DB)

 

==================== End Of Log ============================

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 07-09-2014

Ran by dad at 2014-09-18 15:19:17

Running from C:\Documents and Settings\dad.JOHN-D0FA019223\Desktop

Boot Mode: Normal

==========================================================

 

 

==================== Security Center ========================

 

(If an entry is included in the fixlist, it will be removed.)

 

AV: avast! Antivirus (Disabled - Up to date) {7591DB91-41F0-48A3-B128-1A293FD8233D}

 

==================== Installed Programs ======================

 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

 

Adblock Plus for IE (32-bit) (HKLM\...\{21B632E1-4B3D-4AC2-9ABD-E00544F67D48}) (Version: 1.1 - Eyeo GmbH)

Adblock Plus for IE (HKLM\...\{fd97d1e2-368a-4cd9-af63-8eeff938044a}) (Version: 1.1 - )

Adobe Flash Player 15 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 15.0.0.152 - Adobe Systems Incorporated)

Adobe Flash Player 15 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.08) (HKLM\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.08 - Adobe Systems Incorporated)

AOL Uninstaller (Choose which Products to Remove) (HKLM\...\AOL Uninstaller) (Version:  - AOL Inc.)

avast! Free Antivirus (HKLM\...\avast) (Version: 9.0.2021 - AVAST Software)

Critical Update for Windows Media Player 11 (KB959772) (HKLM\...\KB959772_WM11) (Version:  - Microsoft Corporation)

Dell Driver Download Manager (HKCU\...\309a46b1dc89b774) (Version: 1.0.0.0 - Dell Inc.)

EPSON Printer Software (HKLM\...\EPSON Printer and Utilities) (Version:  - )

GoZone iSync (Version: 2.0.0 - Virgin HealthMiles) Hidden

HP PrecisionScan LTX (HKLM\...\HP PrecisionScan LTX) (Version:  - )

HP ScanJet Scan-to-Web Wizard (HKLM\...\Scan-To-Web) (Version:  - )

Java 7 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.510 - Oracle)

Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden

Java™ 6 Update 21 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83216015FF}) (Version: 6.0.210 - Sun Microsystems, Inc.)

JavaFX 2.1.0 (HKLM\...\{1111706F-666A-4037-7777-210328764D10}) (Version: 2.1.0 - Oracle Corporation)

Malwarebytes Anti-Malware version 2.0.2.1012 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)

Microsoft .NET Framework 2.0 Service Pack 2 (HKLM\...\{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}) (Version: 2.2.30729 - Microsoft Corporation)

Microsoft .NET Framework 3.0 Service Pack 2 (HKLM\...\{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}) (Version: 3.2.30729 - Microsoft Corporation)

Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version:  - Microsoft Corporation)

Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) Hidden

Microsoft Compression Client Pack 1.0 for Windows XP (HKLM\...\MSCompPackV1) (Version: 1 - Microsoft Corporation)

Microsoft Internationalized Domain Names Mitigation APIs (Version:  - Microsoft Corporation) Hidden

Microsoft National Language Support Downlevel APIs (Version:  - Microsoft Corporation) Hidden

Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)

Microsoft Office 2007 Service Pack 3 (SP3) (Version:  - Microsoft) Hidden

Microsoft Office Excel MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)

Microsoft Office Home and Student 2007 (HKLM\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)

Microsoft Office Home and Student 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office OneNote MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office PowerPoint MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (Spanish) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proofing (English) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden

Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (Version:  - Microsoft) Hidden

Microsoft Office Shared MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Word MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Software Update for Web Folders  (English) 12 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft User-Mode Driver Framework Feature Pack 1.0 (HKLM\...\Wudf01000) (Version:  - Microsoft Corporation)

Microsoft VC9 runtime libraries (Version: 1.0.0 - AOL Inc.) Hidden

Microsoft VC9 runtime libraries (Version: 1.0.0 - AOL LLC) Hidden

Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Mozilla Firefox 32.0 (x86 en-US) (HKLM\...\Mozilla Firefox 32.0 (x86 en-US)) (Version: 32.0 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 30.0 - Mozilla)

Panda Cloud Cleaner (HKLM\...\{92B2B132-C7F0-43DC-921A-4493C04F78A4}_is1) (Version: 1.0.104 - Panda Security)

QuickTime (HKLM\...\{C78EAC6F-7A73-452E-8134-DBB2165C5A68}) (Version: 7.62.14.0 - Apple Inc.)

RangeMax™ NEXT Wireless Adapter WN311B (HKLM\...\{1047106F-3AED-4661-B919-6D377BF641CF}) (Version:  - )

RealPlayer Basic (HKLM\...\RealPlayer 6.0) (Version:  - )

SoundMAX (HKLM\...\{F0A37341-D692-11D4-A984-009027EC0A9C}) (Version: 5.12.01.5246 - Analog Devices)

swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)

Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (HKLM\...\{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707) (Version: 1 - Microsoft Corporation)

Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version:  - Microsoft)

Update for Windows Internet Explorer 8 (KB2598845) (HKLM\...\KB2598845-IE8) (Version: 1 - Microsoft Corporation)

Update for Windows XP (KB2141007) (HKLM\...\KB2141007) (Version: 1 - Microsoft Corporation)

Update for Windows XP (KB2345886) (HKLM\...\KB2345886) (Version: 1 - Microsoft Corporation)

Update for Windows XP (KB2467659) (HKLM\...\KB2467659) (Version: 1 - Microsoft Corporation)

Update for Windows XP (KB2541763) (HKLM\...\KB2541763) (Version: 1 - Microsoft Corporation)

Update for Windows XP (KB2607712) (HKLM\...\KB2607712) (Version: 1 - Microsoft Corporation)

Update for Windows XP (KB2616676) (HKLM\...\KB2616676) (Version: 1 - Microsoft Corporation)

Update for Windows XP (KB2641690) (HKLM\...\KB2641690) (Version: 1 - Microsoft Corporation)

Update for Windows XP (KB2661254-v2) (HKLM\...\KB2661254-v2) (Version: 2 - Microsoft Corporation)

Update for Windows XP (KB2718704) (HKLM\...\KB2718704) (Version: 1 - Microsoft Corporation)

Update for Windows XP (KB2736233) (HKLM\...\KB2736233) (Version: 1 - Microsoft Corporation)

Update for Windows XP (KB2749655) (HKLM\...\KB2749655) (Version: 1 - Microsoft Corporation)

Update for Windows XP (KB2863058) (HKLM\...\KB2863058) (Version: 1 - Microsoft Corporation)

Update for Windows XP (KB2904266) (HKLM\...\KB2904266) (Version: 1 - Microsoft Corporation)

Update for Windows XP (KB2934207) (HKLM\...\KB2934207) (Version: 1 - Microsoft Corporation)

Update for Windows XP (KB951978) (Version: 1 - Microsoft Corporation) Hidden

Update for Windows XP (KB955759) (HKLM\...\KB955759) (Version: 1 - Microsoft Corporation)

Update for Windows XP (KB955839) (HKLM\...\KB955839) (Version: 1 - Microsoft Corporation)

Update for Windows XP (KB967715) (HKLM\...\KB967715) (Version: 1 - Microsoft Corporation)

Update for Windows XP (KB968389) (HKLM\...\KB968389) (Version: 1 - Microsoft Corporation)

Update for Windows XP (KB971029) (HKLM\...\KB971029) (Version: 1 - Microsoft Corporation)

Update for Windows XP (KB971737) (HKLM\...\KB971737) (Version: 1 - Microsoft Corporation)

Update for Windows XP (KB973687) (HKLM\...\KB973687) (Version: 1 - Microsoft Corporation)

Update for Windows XP (KB973815) (HKLM\...\KB973815) (Version: 1 - Microsoft Corporation)

WebFldrs XP (Version: 9.50.7523 - Microsoft Corporation) Hidden

Windows Genuine Advantage Validation Tool (KB892130) (HKLM\...\KB892130) (Version:  - Microsoft Corporation)

Windows Genuine Advantage Validation Tool (KB892130) (HKLM\...\WGA) (Version: 1.7.0069.2 - Microsoft Corporation)

Windows Internet Explorer 7 (Version: 20070813.185237 - Microsoft Corporation) Hidden

Windows Internet Explorer 8 (HKLM\...\ie8) (Version: 20090308.140743 - Microsoft Corporation)

Windows Media Format 11 runtime (HKLM\...\Windows Media Format Runtime) (Version:  - )

Windows Media Format 11 runtime (Version:  - Microsoft Corporation) Hidden

Windows Media Player 11 (HKLM\...\Windows Media Player) (Version:  - )

Windows Media Player 11 (Version:  - Microsoft Corporation) Hidden

Windows XP Service Pack 3 (HKLM\...\Windows XP Service Pack) (Version: 20080414.031525 - Microsoft Corporation)

 

==================== Custom CLSID (selected items): ==========================

 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

 

 

==================== Restore Points  =========================

 

18-09-2014 10:51:31 System Checkpoint

 

==================== Hosts content: ==========================

 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

 

2004-08-04 06:00 - 2014-09-09 11:29 - 00000753 ____A C:\WINDOWS\system32\Drivers\etc\hosts

 

127.0.0.1       localhost 

 

==================== Scheduled Tasks (whitelisted) =============

 

 

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

 

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\WINDOWS\Tasks\avast! Emergency Update.job => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe

Task: C:\WINDOWS\Tasks\Microsoft Windows XP End of Service Notification Logon.job => C:\WINDOWS\system32\xp_eos.exe

Task: C:\WINDOWS\Tasks\Microsoft Windows XP End of Service Notification Monthly.job => C:\WINDOWS\system32\xp_eos.exe

 

==================== Loaded Modules (whitelisted) =============

 

2011-09-21 07:35 - 2014-08-04 15:45 - 00301152 _____ () C:\Program Files\AVAST Software\Avast\aswProperty.dll

2014-09-17 07:14 - 2014-09-17 07:14 - 02865152 _____ () C:\Program Files\AVAST Software\Avast\defs\14091701\algo.dll

2009-04-09 18:07 - 2007-01-18 10:29 - 00102400 _____ () C:\WINDOWS\system32\ASupplicant.dll

2013-12-03 08:44 - 2014-08-04 15:45 - 19329904 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll

2014-07-02 05:17 - 2014-07-02 05:17 - 00048640 _____ () C:\Program Files\AOL Desktop 9.7b\zlib.dll

2014-07-02 05:17 - 2014-07-02 05:17 - 21151232 _____ () C:\Program Files\AOL Desktop 9.7b\libcef.dll

2014-07-02 05:17 - 2014-07-02 05:17 - 00648704 _____ () C:\Program Files\AOL Desktop 9.7b\libglesv2.dll

2014-07-02 05:17 - 2014-07-02 05:17 - 00122880 _____ () C:\Program Files\AOL Desktop 9.7b\libegl.dll

2014-07-02 05:17 - 2014-07-02 05:17 - 00094208 _____ () C:\Program Files\AOL Desktop 9.7b\Components\Tier2Svc.dll

2014-07-02 05:17 - 2014-07-02 05:17 - 00060928 _____ () C:\Program Files\AOL Desktop 9.7b\Components\DataSvcs.dll

2014-09-09 15:45 - 2014-09-09 15:45 - 16825520 _____ () C:\WINDOWS\system32\Macromed\Flash\NPSWF32_15_0_0_152.dll

 

==================== Alternate Data Streams (whitelisted) =========

 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

 

 

==================== Safe Mode (whitelisted) ===================

 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

 

 

==================== EXE Association (whitelisted) =============

 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

 

 

==================== MSCONFIG/TASK MANAGER disabled items =========

 

(Currently there is no automatic fix for this section.)

 

MSCONFIG\startupreg: CTFMON.EXE => 

MSCONFIG\startupreg: MSMSGS => 

MSCONFIG\startupreg: QuickTime Task => 

MSCONFIG\startupreg: RealTray => 

MSCONFIG\startupreg: SunJavaUpdateSched => 

 

==================== Faulty Device Manager Devices =============

 

Name: Video Controller (VGA Compatible)

Description: Video Controller (VGA Compatible)

Class Guid: {4D36E97E-E325-11CE-BFC1-08002BE10318}

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

 

Name: Video Controller

Description: Video Controller

Class Guid: {4D36E97E-E325-11CE-BFC1-08002BE10318}

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

 

Name: Ethernet Controller

Description: Ethernet Controller

Class Guid: {4D36E97E-E325-11CE-BFC1-08002BE10318}

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

 

 

==================== Event log errors: =========================

 

Application errors:

==================

Error: (09/11/2014 07:03:35 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application frst.exe, version 7.9.2014.0, faulting module frst.exe, version 7.9.2014.0, fault address 0x0001f09e.

Processing media-specific event for [frst.exe!ws!]

 

Error: (09/10/2014 05:43:39 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application plugin-container.exe, version 32.0.0.5350, faulting module mozalloc.dll, version 32.0.0.5350, fault address 0x0000141b.

Processing media-specific event for [plugin-container.exe!ws!]

 

Error: (09/09/2014 00:01:10 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application plugin-container.exe, version 32.0.0.5350, faulting module mozalloc.dll, version 32.0.0.5350, fault address 0x0000141b.

Processing media-specific event for [plugin-container.exe!ws!]

 

Error: (09/06/2014 03:34:34 PM) (Source: crypt32) (EventID: 11) (User: )

Description: Failed extract of third-party root list from auto update cab at: <http://www.download....authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.

 

Error: (09/06/2014 03:34:34 PM) (Source: crypt32) (EventID: 11) (User: )

Description: Failed extract of third-party root list from auto update cab at: <http://www.download....authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.

 

Error: (08/22/2014 02:36:46 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application plugin-container.exe, version 31.0.0.5310, faulting module mozalloc.dll, version 31.0.0.5310, fault address 0x0000141b.

Processing media-specific event for [plugin-container.exe!ws!]

 

Error: (08/11/2014 09:30:37 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application plugin-container.exe, version 31.0.0.5310, faulting module mozalloc.dll, version 31.0.0.5310, fault address 0x0000141b.

Processing media-specific event for [plugin-container.exe!ws!]

 

Error: (08/11/2014 09:30:33 AM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Hanging application firefox.exe, version 31.0.0.5310, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

 

Error: (08/11/2014 09:28:31 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application plugin-container.exe, version 31.0.0.5310, faulting module mozalloc.dll, version 31.0.0.5310, fault address 0x0000141b.

Processing media-specific event for [plugin-container.exe!ws!]

 

Error: (07/28/2014 00:32:21 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application plugin-container.exe, version 30.0.0.5269, faulting module mozalloc.dll, version 30.0.0.5269, fault address 0x0000141b.

Processing media-specific event for [plugin-container.exe!ws!]

 

 

System errors:

=============

Error: (09/18/2014 06:46:28 AM) (Source: 0) (EventID: 1) (User: )

Description: 0xC0000043HarddiskVolume2

 

Error: (09/18/2014 06:42:24 AM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: The Print Spooler service failed to start due to the following error: 

%%1053

 

Error: (09/18/2014 06:42:24 AM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Timeout (30000 milliseconds) waiting for the Print Spooler service to connect.

 

Error: (09/18/2014 06:41:24 AM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: The AOL Connectivity Service service terminated unexpectedly.  It has done this 1 time(s).

 

Error: (09/18/2014 06:41:24 AM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: The Print Spooler service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.

 

Error: (09/18/2014 06:41:24 AM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: The WAN Miniport (ATW) Service service terminated unexpectedly.  It has done this 1 time(s).

 

Error: (09/17/2014 08:10:46 AM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: The Application Layer Gateway Service service terminated unexpectedly.  It has done this 1 time(s).

 

Error: (09/17/2014 08:10:45 AM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: The Java Quick Starter service terminated unexpectedly.  It has done this 1 time(s).

 

Error: (09/17/2014 06:56:17 AM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: The Print Spooler service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.

 

Error: (09/17/2014 06:56:17 AM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: The Java Quick Starter service terminated unexpectedly.  It has done this 1 time(s).

 

 

Microsoft Office Sessions:

=========================

 

==================== Memory info =========================== 

 

Processor:  Intel® Pentium® 4 CPU 2.80GHz

Percentage of memory in use: 73%

Total physical RAM: 502.08 MB

Available physical RAM: 133.35 MB

Total Pagefile: 1226.89 MB

Available Pagefile: 711.11 MB

Total Virtual: 2047.88 MB

Available Virtual: 1945.74 MB

 

==================== Drives ================================

 

Drive c: () (Fixed) (Total:70.92 GB) (Free:16.43 GB) NTFS ==>[Drive with boot components (Windows XP)]

 

==================== MBR & Partition Table ==================

 

========================================================

Disk: 0 (MBR Code: Windows XP) (Size: 74.5 GB) (Disk ID: D0F4738C)

Partition 1: (Not Active) - (Size=39 MB) - (Type=DE)

Partition 2: (Active) - (Size=70.9 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=3.5 GB) - (Type=DB)

 

==================== End Of Log ============================

 

 

[Naathim]

Hi

You have posted twice addition.txt file, while I need as well FRST.txt one.

[rocket985]

Ooops.   

 

 

 

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 07-09-2014 (ATTENTION: ====> FRST version is 11 days old and could be outdated)

Ran by dad (administrator) on JOHN-D0FA019223 on 18-09-2014 15:16:44

Running from C:\Documents and Settings\dad.JOHN-D0FA019223\Desktop

Platform: Microsoft Windows XP Home Edition Service Pack 3 (X86) OS Language: English (United States)

Internet Explorer Version 8

Boot Mode: Normal

 

The only official download link for FRST:

Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 

Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 

Download link from any site other than Bleeping Computer is unpermitted or outdated.

See tutorial for FRST: http://www.geekstogo...very-scan-tool/

 

==================== Processes (Whitelisted) =================

 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

 

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe

(Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe

(America Online, Inc.) C:\WINDOWS\wanmpsvc.exe

(Foxconn Corporation) C:\Program Files\NETGEAR\WN311B\Utility\WN311B.exe

(Analog Devices, Inc.) C:\Program Files\Analog Devices\Core\smax4pnp.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe

(Microsoft Corporation) C:\WINDOWS\SYSTEM32\taskmgr.exe

(Microsoft Corporation) C:\WINDOWS\SYSTEM32\spider.exe

(AOL Inc.) C:\Program Files\AOL Desktop 9.7b\waol.exe

(AOL Inc.) C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe

(AOL Inc.) C:\Program Files\Common Files\AOL\1239305799\ee\aolsoftware.exe

(AOL Inc.) C:\Program Files\Common Files\AOL\TopSpeed\3.0\aoltpsd3.exe

(AOL Inc.) C:\Program Files\AOL Desktop 9.7b\aolbrowser.exe

 

 

==================== Registry (Whitelisted) ==================

 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

 

HKLM\...\Run: [AS00_WN311B] => C:\Program Files\NETGEAR\WN311B\Utility\WN311B.exe [3002368 2008-09-17] (Foxconn Corporation)

HKLM\...\Run: [HostManager] => C:\Program Files\Common Files\AOL\1239305799\ee\AOLSoftware.exe [41800 2010-03-08] (AOL Inc.)

HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

HKLM\...\Run: [SoundMAXPnP] => C:\Program Files\Analog Devices\Core\smax4pnp.exe [1404928 2004-10-14] (Analog Devices, Inc.)

HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-08-04] (AVAST Software)

HKLM\...\Policies\Explorer: [NoCDBurning] 0

HKU\S-1-5-21-220523388-573735546-682003330-1004\...\Run: [AOL Fast Start] => C:\Program Files\AOL Desktop 9.7b\AOL.EXE [72296 2014-07-02] (AOL Inc.)

HKU\S-1-5-21-220523388-573735546-682003330-1004\...\MountPoints2: {bd74eebb-94ee-11e3-90f7-00038a000015} - "F:\WD Drive Unlock.exe" autoplay=true

Startup: C:\Documents and Settings\dad.JOHN-D0FA019223\Start Menu\Programs\Startup\GoZone iSync.lnk

ShortcutTarget: GoZone iSync.lnk -> C:\Program Files\GoZone\GoZone_iSync.exe (Virgin HealthMiles Inc.)

ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software)

 

==================== Internet (Whitelisted) ====================

 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft...=ie&ar=iesearch

SearchScopes: HKCU - {5C360052-17AB-43B1-8402-ADFE4EA4B852} URL = http://www.google.co...age={startPage}

BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll (Adblock Plus)

Toolbar: HKCU - &Address - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)

Toolbar: HKCU - &Links - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation)

DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} https://mygp.gp.com/...SetupClient.cab

Tcpip\Parameters: [DhcpNameServer] 192.168.1.254

 

FireFox:

========

FF ProfilePath: C:\Documents and Settings\dad.JOHN-D0FA019223\Application Data\Mozilla\Firefox\Profiles\3mgk3tqf.default

FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_15_0_0_152.dll ()

FF Plugin: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF Plugin: @viewpoint.com/VMP -> C:\Program Files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll No File

FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFFICE.DLL (Microsoft Corporation)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npunagi2.dll (America Online, Inc.)

FF SearchPlugin: C:\Documents and Settings\dad.JOHN-D0FA019223\Application Data\Mozilla\Firefox\Profiles\3mgk3tqf.default\searchplugins\aol-search.xml

FF Extension: No Name - C:\Documents and Settings\dad.JOHN-D0FA019223\Application Data\Mozilla\Firefox\Profiles\3mgk3tqf.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b} [2012-04-04]

FF Extension: Microsoft .NET Framework Assistant - C:\Documents and Settings\dad.JOHN-D0FA019223\Application Data\Mozilla\Firefox\Profiles\3mgk3tqf.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}.xpi [2012-04-02]

FF Extension: Talkback - C:\Program Files\Mozilla Firefox\extensions\talkback@mozilla(2).org [2014-09-04]

FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension

FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-07-28]

FF HKLM\...\Firefox\Extensions: [[email protected]] - C:\Program Files\AVAST Software\Avast\WebRep\FF

FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2011-09-21]

 

Chrome: 

=======

CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-08-04]

 

========================== Services (Whitelisted) =================

 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

 

R2 AOL ACS; C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe [46184 2014-02-06] (AOL Inc.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-08-04] (AVAST Software)

S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]

R2 JavaQuickStarterService; C:\Program Files\Java\jre7\bin\jqs.exe [182696 2013-12-18] (Oracle Corporation)

R2 WANMiniportService; C:\WINDOWS\wanmpsvc.exe [65536 2003-08-27] (America Online, Inc.) [File not signed]

 

==================== Drivers (Whitelisted) ====================

 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

 

R2 ASCTRM; C:\WINDOWS\system32\Drivers\ASCTRM.sys [8552 2013-04-24] (Windows ® 2000 DDK provider) [File not signed]

R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24184 2014-08-04] ()

R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [67824 2014-08-04] (AVAST Software)

R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [55112 2014-08-04] (AVAST Software)

R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49944 2014-08-04] ()

R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [779536 2014-08-04] (AVAST Software)

R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [414520 2014-08-04] (AVAST Software)

R1 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57800 2014-08-04] (AVAST Software)

R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [192352 2014-08-04] ()

R3 AWINDIS5; C:\WINDOWS\system32\AWINDIS5.SYS [16194 2002-04-11] (AMBIT Microsystems Corporation.) [File not signed]

R3 BCM43XX; C:\WINDOWS\System32\DRIVERS\wn311b.sys [822400 2007-09-06] (Broadcom Corporation)

S0 cercsr6; C:\WINDOWS\system32\Drivers\cercsr6.sys [39904 2004-12-13] (Adaptec, Inc.) [File not signed]

R3 wanatw; C:\WINDOWS\System32\DRIVERS\wanatw4.sys [33588 2003-01-10] (America Online, Inc.)

U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation)

 

==================== NetSvcs (Whitelisted) ===================

 

 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

 

 

==================== One Month Created Files and Folders ========

 

(If an entry is included in the fixlist, the file\folder will be moved.)

 

2014-09-18 10:38 - 2014-09-18 10:38 - 00002540 _____ () C:\Documents and Settings\dad.JOHN-D0FA019223\Desktop\JRT.txt

2014-09-18 10:27 - 2014-09-18 10:27 - 00000000 ____D () C:\WINDOWS\ERUNT

2014-09-18 10:20 - 2014-09-18 10:20 - 01016830 _____ (Thisisu) C:\Documents and Settings\dad.JOHN-D0FA019223\Desktop\JRT.exe

2014-09-18 08:05 - 2014-09-18 08:08 - 00000664 _____ () C:\Documents and Settings\dad.JOHN-D0FA019223\Local Settings\Application Data\d3d9caps.tmp

2014-09-18 06:57 - 2014-09-18 06:57 - 00000000 ____D () C:\Program Files\Viewpoint

2014-09-16 11:14 - 2014-09-18 06:41 - 00000000 ____D () C:\AdwCleaner

2014-09-16 11:10 - 2014-09-16 11:11 - 01373475 _____ () C:\Documents and Settings\dad.JOHN-D0FA019223\Desktop\AdwCleaner.exe

2014-09-14 10:49 - 2014-09-14 10:49 - 00007184 _____ () C:\Documents and Settings\dad.JOHN-D0FA019223\Desktop\PCloudcleaner.log

2014-09-14 08:27 - 2014-09-14 09:48 - 00000935 _____ () C:\Documents and Settings\All Users.WINDOWS\Desktop\Panda Cloud Cleaner.lnk

2014-09-14 08:27 - 2014-09-14 08:27 - 00000000 ____D () C:\Program Files\Panda Security

2014-09-14 08:27 - 2014-09-14 08:27 - 00000000 ____D () C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\Panda Security

2014-09-14 08:27 - 2014-09-14 08:27 - 00000000 ____D () C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\Panda Security

2014-09-14 08:19 - 2014-09-14 08:20 - 32305576 _____ (Panda Security ) C:\Documents and Settings\dad.JOHN-D0FA019223\Desktop\PandaCloudCleaner.exe

2014-09-11 08:00 - 2014-09-11 08:01 - 00022578 _____ () C:\Documents and Settings\dad.JOHN-D0FA019223\Desktop\Addition.txt

2014-09-11 07:03 - 2014-09-18 15:17 - 00010983 _____ () C:\Documents and Settings\dad.JOHN-D0FA019223\Desktop\FRST.txt

2014-09-09 15:44 - 2014-09-09 15:45 - 17903792 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerInstaller.exe

2014-09-09 11:41 - 2014-09-09 11:41 - 00000000 ____D () C:\WINDOWS\jumpshot.com

2014-09-09 11:33 - 2014-09-18 15:17 - 00000000 ____D () C:\Documents and Settings\dad.JOHN-D0FA019223\Local Settings\Temp

2014-09-09 11:33 - 2014-09-09 11:33 - 00000000 ____D () C:\Documents and Settings\NetworkService\Local Settings\Temp

2014-09-09 11:33 - 2014-09-09 11:33 - 00000000 ____D () C:\Documents and Settings\NetworkService.NT AUTHORITY\Local Settings\Temp

2014-09-09 11:33 - 2014-09-09 11:33 - 00000000 ____D () C:\Documents and Settings\LocalService\Local Settings\Temp

2014-09-09 11:33 - 2014-09-09 11:33 - 00000000 ____D () C:\Documents and Settings\Default User\Local Settings\Temp

2014-09-09 11:33 - 2014-09-09 11:33 - 00000000 ____D () C:\Documents and Settings\Default User.WINDOWS\Local Settings\Temp

2014-09-09 11:33 - 2014-09-09 11:33 - 00000000 ____D () C:\Documents and Settings\Dad\Local Settings\Temp

2014-09-09 11:33 - 2014-09-09 11:16 - 00024064 _____ () C:\WINDOWS\zoek-delete.exe

2014-09-09 11:28 - 2014-09-05 22:18 - 00031807 _____ () C:\zoek-results2014-09-06-021843.log

2014-09-09 11:16 - 2014-09-09 11:16 - 01290240 _____ () C:\Documents and Settings\dad.JOHN-D0FA019223\Desktop\zoek.exe

2014-09-08 10:15 - 2014-09-08 10:15 - 00021490 _____ () C:\Documents and Settings\dad.JOHN-D0FA019223\Desktop\gmer.log

2014-09-08 09:50 - 2014-09-08 09:50 - 00380416 _____ () C:\Documents and Settings\dad.JOHN-D0FA019223\Desktop\xw1fmxqn.exe

2014-09-08 07:04 - 2014-09-08 07:04 - 00000000 ____D () C:\Documents and Settings\dad.JOHN-D0FA019223\Desktop\FRST-OlderVersion

2014-09-06 15:33 - 2014-09-18 15:17 - 00000000 ____D () C:\FRST

2014-09-06 15:27 - 2014-09-08 07:04 - 01097728 _____ (Farbar) C:\Documents and Settings\dad.JOHN-D0FA019223\Desktop\FRST.exe

2014-09-05 22:08 - 2014-09-09 11:39 - 00005273 _____ () C:\zoek-results.log

2014-09-05 21:56 - 2014-09-09 11:39 - 00000000 ____D () C:\zoek_backup

2014-09-05 17:58 - 2014-09-05 17:58 - 00000000 ____D () C:\_OTL

2014-09-04 18:17 - 2014-09-13 20:45 - 00110296 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys

2014-09-04 18:13 - 2014-09-04 18:13 - 00000777 _____ () C:\Documents and Settings\All Users.WINDOWS\Desktop\Malwarebytes Anti-Malware.lnk

2014-09-04 18:13 - 2014-09-04 18:13 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware

2014-09-04 18:13 - 2014-05-12 07:26 - 00053208 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys

2014-09-04 18:13 - 2014-05-12 07:25 - 00023256 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys

2014-09-04 11:24 - 2014-09-17 08:10 - 00000000 ____D () C:\Program Files\Mozilla Firefox

2014-09-04 11:23 - 2014-09-04 11:23 - 00053314 _____ () C:\Documents and Settings\dad.JOHN-D0FA019223\Desktop\OTL.Txt

2014-09-04 11:23 - 2014-09-04 11:23 - 00039752 _____ () C:\Documents and Settings\dad.JOHN-D0FA019223\Desktop\Extras.Txt

2014-09-04 10:32 - 2014-09-04 10:32 - 00602112 _____ (OldTimer Tools) C:\Documents and Settings\dad.JOHN-D0FA019223\Desktop\OTL.exe

2014-08-24 08:45 - 2014-09-18 13:31 - 00000664 _____ () C:\Documents and Settings\dad.JOHN-D0FA019223\Local Settings\Application Data\d3d9caps.dat

 

==================== One Month Modified Files and Folders =======

 

(If an entry is included in the fixlist, the file\folder will be moved.)

 

2014-09-18 15:17 - 2014-09-11 07:03 - 00010983 _____ () C:\Documents and Settings\dad.JOHN-D0FA019223\Desktop\FRST.txt

2014-09-18 15:17 - 2014-09-09 11:33 - 00000000 ____D () C:\Documents and Settings\dad.JOHN-D0FA019223\Local Settings\Temp

2014-09-18 15:17 - 2014-09-06 15:33 - 00000000 ____D () C:\FRST

2014-09-18 14:44 - 2012-11-06 10:13 - 00000830 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job

2014-09-18 13:31 - 2014-08-24 08:45 - 00000664 _____ () C:\Documents and Settings\dad.JOHN-D0FA019223\Local Settings\Application Data\d3d9caps.dat

2014-09-18 10:38 - 2014-09-18 10:38 - 00002540 _____ () C:\Documents and Settings\dad.JOHN-D0FA019223\Desktop\JRT.txt

2014-09-18 10:27 - 2014-09-18 10:27 - 00000000 ____D () C:\WINDOWS\ERUNT

2014-09-18 10:20 - 2014-09-18 10:20 - 01016830 _____ (Thisisu) C:\Documents and Settings\dad.JOHN-D0FA019223\Desktop\JRT.exe

2014-09-18 08:08 - 2014-09-18 08:05 - 00000664 _____ () C:\Documents and Settings\dad.JOHN-D0FA019223\Local Settings\Application Data\d3d9caps.tmp

2014-09-18 06:57 - 2014-09-18 06:57 - 00000000 ____D () C:\Program Files\Viewpoint

2014-09-18 06:51 - 2009-04-09 17:44 - 01644454 _____ () C:\WINDOWS\WindowsUpdate.log

2014-09-18 06:45 - 2012-07-11 06:41 - 00000364 ____H () C:\WINDOWS\Tasks\avast! Emergency Update.job

2014-09-18 06:44 - 2014-03-27 06:35 - 00000218 _____ () C:\WINDOWS\Tasks\Microsoft Windows XP End of Service Notification Logon.job

2014-09-18 06:44 - 2009-04-09 17:51 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT

2014-09-18 06:44 - 2009-04-09 10:07 - 00000159 _____ () C:\WINDOWS\wiadebug.log

2014-09-18 06:44 - 2009-04-09 10:07 - 00000049 _____ () C:\WINDOWS\wiaservc.log

2014-09-18 06:42 - 2009-04-09 17:52 - 00000178 ___SH () C:\Documents and Settings\dad.JOHN-D0FA019223\ntuser.ini

2014-09-18 06:42 - 2009-04-09 17:51 - 00032436 _____ () C:\WINDOWS\SchedLgU.Txt

2014-09-18 06:41 - 2014-09-16 11:14 - 00000000 ____D () C:\AdwCleaner

2014-09-17 08:10 - 2014-09-04 11:24 - 00000000 ____D () C:\Program Files\Mozilla Firefox

2014-09-16 11:11 - 2014-09-16 11:10 - 01373475 _____ () C:\Documents and Settings\dad.JOHN-D0FA019223\Desktop\AdwCleaner.exe

2014-09-14 10:49 - 2014-09-14 10:49 - 00007184 _____ () C:\Documents and Settings\dad.JOHN-D0FA019223\Desktop\PCloudcleaner.log

2014-09-14 09:48 - 2014-09-14 08:27 - 00000935 _____ () C:\Documents and Settings\All Users.WINDOWS\Desktop\Panda Cloud Cleaner.lnk

2014-09-14 08:27 - 2014-09-14 08:27 - 00000000 ____D () C:\Program Files\Panda Security

2014-09-14 08:27 - 2014-09-14 08:27 - 00000000 ____D () C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\Panda Security

2014-09-14 08:27 - 2014-09-14 08:27 - 00000000 ____D () C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\Panda Security

2014-09-14 08:20 - 2014-09-14 08:19 - 32305576 _____ (Panda Security ) C:\Documents and Settings\dad.JOHN-D0FA019223\Desktop\PandaCloudCleaner.exe

2014-09-13 20:45 - 2014-09-04 18:17 - 00110296 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys

2014-09-13 17:53 - 2014-03-30 19:10 - 00000000 ____D () C:\Documents and Settings\dad.JOHN-D0FA019223\Local Settings\Application Data\Adblock Plus for IE

2014-09-12 03:19 - 2013-08-01 09:19 - 00000000 ____D () C:\WINDOWS\system32\MRT

2014-09-12 03:05 - 2009-04-09 20:31 - 98758480 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2014-09-11 08:01 - 2014-09-11 08:00 - 00022578 _____ () C:\Documents and Settings\dad.JOHN-D0FA019223\Desktop\Addition.txt

2014-09-09 15:45 - 2014-09-09 15:44 - 17903792 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerInstaller.exe

2014-09-09 15:45 - 2012-07-11 06:36 - 00701104 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe

2014-09-09 15:45 - 2011-07-31 08:08 - 00071344 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl

2014-09-09 11:41 - 2014-09-09 11:41 - 00000000 ____D () C:\WINDOWS\jumpshot.com

2014-09-09 11:39 - 2014-09-05 22:08 - 00005273 _____ () C:\zoek-results.log

2014-09-09 11:39 - 2014-09-05 21:56 - 00000000 ____D () C:\zoek_backup

2014-09-09 11:39 - 2009-04-09 17:51 - 00000000 ____D () C:\Documents and Settings\LocalService.NT AUTHORITY\Local Settings\Temp

2014-09-09 11:33 - 2014-09-09 11:33 - 00000000 ____D () C:\Documents and Settings\NetworkService\Local Settings\Temp

2014-09-09 11:33 - 2014-09-09 11:33 - 00000000 ____D () C:\Documents and Settings\NetworkService.NT AUTHORITY\Local Settings\Temp

2014-09-09 11:33 - 2014-09-09 11:33 - 00000000 ____D () C:\Documents and Settings\LocalService\Local Settings\Temp

2014-09-09 11:33 - 2014-09-09 11:33 - 00000000 ____D () C:\Documents and Settings\Default User\Local Settings\Temp

2014-09-09 11:33 - 2014-09-09 11:33 - 00000000 ____D () C:\Documents and Settings\Default User.WINDOWS\Local Settings\Temp

2014-09-09 11:33 - 2014-09-09 11:33 - 00000000 ____D () C:\Documents and Settings\Dad\Local Settings\Temp

2014-09-09 11:16 - 2014-09-09 11:33 - 00024064 _____ () C:\WINDOWS\zoek-delete.exe

2014-09-09 11:16 - 2014-09-09 11:16 - 01290240 _____ () C:\Documents and Settings\dad.JOHN-D0FA019223\Desktop\zoek.exe

2014-09-08 15:00 - 2014-03-27 06:35 - 00000212 _____ () C:\WINDOWS\Tasks\Microsoft Windows XP End of Service Notification Monthly.job

2014-09-08 10:15 - 2014-09-08 10:15 - 00021490 _____ () C:\Documents and Settings\dad.JOHN-D0FA019223\Desktop\gmer.log

2014-09-08 09:50 - 2014-09-08 09:50 - 00380416 _____ () C:\Documents and Settings\dad.JOHN-D0FA019223\Desktop\xw1fmxqn.exe

2014-09-08 07:21 - 2013-04-13 16:56 - 00002347 _____ () C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\Adobe Reader XI.lnk

2014-09-08 07:21 - 2013-04-13 16:56 - 00002347 _____ () C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\Adobe Reader XI.lnk

2014-09-08 07:04 - 2014-09-08 07:04 - 00000000 ____D () C:\Documents and Settings\dad.JOHN-D0FA019223\Desktop\FRST-OlderVersion

2014-09-08 07:04 - 2014-09-06 15:27 - 01097728 _____ (Farbar) C:\Documents and Settings\dad.JOHN-D0FA019223\Desktop\FRST.exe

2014-09-07 18:32 - 2009-05-13 12:04 - 00000000 ____D () C:\Documents and Settings\dad.JOHN-D0FA019223\My Documents\Rockets

2014-09-06 19:23 - 2011-10-13 03:02 - 00346133 _____ () C:\WINDOWS\setupapi.log

2014-09-05 22:18 - 2014-09-09 11:28 - 00031807 _____ () C:\zoek-results2014-09-06-021843.log

2014-09-05 18:05 - 2014-07-24 07:02 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service

2014-09-05 17:58 - 2014-09-05 17:58 - 00000000 ____D () C:\_OTL

2014-09-04 18:13 - 2014-09-04 18:13 - 00000777 _____ () C:\Documents and Settings\All Users.WINDOWS\Desktop\Malwarebytes Anti-Malware.lnk

2014-09-04 18:13 - 2014-09-04 18:13 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware

2014-09-04 18:13 - 2011-08-29 07:58 - 00000000 ____D () C:\Documents and Settings\dad.JOHN-D0FA019223\Application Data\Malwarebytes

2014-09-04 18:13 - 2011-08-29 07:58 - 00000000 ____D () C:\Documents and Settings\All Users.WINDOWS\Application Data\Malwarebytes

2014-09-04 18:13 - 2011-08-29 07:58 - 00000000 ____D () C:\Documents and Settings\All Users.WINDOWS\Application Data\Malwarebytes

2014-09-04 11:23 - 2014-09-04 11:23 - 00053314 _____ () C:\Documents and Settings\dad.JOHN-D0FA019223\Desktop\OTL.Txt

2014-09-04 11:23 - 2014-09-04 11:23 - 00039752 _____ () C:\Documents and Settings\dad.JOHN-D0FA019223\Desktop\Extras.Txt

2014-09-04 10:32 - 2014-09-04 10:32 - 00602112 _____ (OldTimer Tools) C:\Documents and Settings\dad.JOHN-D0FA019223\Desktop\OTL.exe

2014-09-04 07:37 - 2009-04-09 17:41 - 00097857 _____ () C:\WINDOWS\wmsetup.log

2014-09-01 22:02 - 2004-08-04 06:00 - 00002206 _____ () C:\WINDOWS\system32\wpa.dbl

 

Files to move or delete:

====================

C:\Documents and Settings\Dad\neoteris_read_21006965.reg

C:\Documents and Settings\Dad\neoteris_read_5312057.reg

C:\Documents and Settings\dad.JOHN-D0FA019223\jagex_runescape_preferences.dat

C:\Documents and Settings\dad.JOHN-D0FA019223\jagex_runescape_preferences2.dat

C:\Documents and Settings\dad.JOHN-D0FA019223\jagex__preferences3.dat

 

 

Some content of TEMP:

====================

C:\Documents and Settings\dad.JOHN-D0FA019223\Local Settings\Temp\Quarantine.exe

 

 

==================== Bamital & volsnap Check =================

 

(There is no automatic fix for files that do not pass verification.)

 

C:\WINDOWS\explorer.exe => File is digitally signed

C:\WINDOWS\system32\winlogon.exe => File is digitally signed

C:\WINDOWS\system32\svchost.exe => File is digitally signed

C:\WINDOWS\system32\services.exe => File is digitally signed

C:\WINDOWS\system32\User32.dll => File is digitally signed

C:\WINDOWS\system32\userinit.exe => File is digitally signed

C:\WINDOWS\system32\rpcss.dll => File is digitally signed

C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

 

==================== End Of Log ============================

[Naathim]

OK. Describe me current state of your machine. Any improvement?

[Naathim]

Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.