[nfmaharaj]

CKScanner 2.4 - Additional Security Risks - These are not necessarily bad

hosts 127.0.0.1 activate.adobe.com

hosts 127.0.0.1 3dns-3.adobe.com

hosts 127.0.0.1 adobe-dns-2.adobe.com

hosts 127.0.0.1 adobe-dns-3.adobe.com

hosts 127.0.0.1 ereg.wip3.adobe.com

hosts 127.0.0.1 activate-sea.adobe.com

hosts 127.0.0.1 wip3.adobe.com

hosts 127.0.0.1 wwis-dubc1-vip60.adobe.com

hosts 127.0.0.1 activate-sjc0.adobe.com

hosts 127.0.0.1 practivate.adobe.com

hosts 127.0.0.1 ereg.adobe.com

hosts 127.0.0.1 activate.wip3.adobe.com

hosts 127.0.0.1 3dns-2.adobe.com

hosts 127.0.0.1 adobe-dns.adobe.com

scanner sequence 3.IE.11.SCBBE0

 ----- EOF ----- 

 

 

OK.... see you tomorrow and have a good night 

[Advertisements]

Hi
 
 
Now that we have this bad part finished, we may start thinking about getting on the right track. Please perform a fresh FRST scan.



Scan with Farbar Recovery Scan Tool

Please re-run Farbar Recovery Scan Tool.

• Right-click on icon and select Run as Administrator to start the tool.
  > XP users click run after receipt of Windows Security Warning - Open File.
  > 8 users will be prompted about Windows SmartScreen protection - click More information and Run.
• Make sure that Addition option is checked.
• Press Scan button and wait.
• The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.

Please include their content in your next reply.

[Naathim]

Hi
 
 
Now that we have this bad part finished, we may start thinking about getting on the right track. Please perform a fresh FRST scan.



Scan with Farbar Recovery Scan Tool

Please re-run Farbar Recovery Scan Tool.

• Right-click on icon and select Run as Administrator to start the tool.
  > XP users click run after receipt of Windows Security Warning - Open File.
  > 8 users will be prompted about Windows SmartScreen protection - click More information and Run.
• Make sure that Addition option is checked.
• Press Scan button and wait.
• The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.

Please include their content in your next reply.

[nfmaharaj]

 

 

LastRegBack: 2014-10-16 21:17

 

==================== End Of Log ============================

 

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 20-10-2014

Ran by Nigel at 2014-10-20 09:09:21

Running from C:\Users\Nigel\Downloads\Geeks_To_Go_Help\FRST Results

Boot Mode: Normal

==========================================================

 

 

==================== Security Center ========================

 

(If an entry is included in the fixlist, it will be removed.)

 

AV: Microsoft Security Essentials (Enabled - Up to date) {4F35CFC4-45A3-FC37-EF17-759A02E39AB1}

AS: Microsoft Security Essentials (Enabled - Up to date) {F4542E20-6399-F3B9-D5A7-4EE87964D00C}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: IObit Malware Fighter (Disabled - Up to date) {A751AC20-3B48-5237-898A-78C4436BB78D}

 

==================== Installed Programs ======================

 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

 

µTorrent (HKCU\...\uTorrent) (Version: 3.4.2.34309 - BitTorrent Inc.)

Adobe AIR (x32 Version: 3.4.0.2710 - Adobe Systems Incorporated) Hidden

Adobe Community Help (x32 Version: 3.4.980 - Adobe Systems Incorporated.) Hidden

Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 2.5.1.369 - Adobe Systems Incorporated)

Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.167 - Adobe Systems Incorporated)

Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated)

AMD APP SDK Runtime (Version: 10.0.938.2 - Advanced Micro Devices Inc.) Hidden

AMD Catalyst Control Center (x32 Version: 2013.0830.1944.33589 - Advanced Micro Devices, Inc.) Hidden

AMD Catalyst Install Manager (HKLM\...\{13351E83-6DCD-4E97-2A8C-5D496259A47F}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)

AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden

AMD Fuel (Version: 2013.0830.1944.33589 - Advanced Micro Devices, Inc.) Hidden

AMD Media Foundation Decoders (Version: 1.0.71116.1554 - Advanced Micro Devices, Inc.) Hidden

Apple Application Support (HKLM-x32\...\{78002155-F025-4070-85B3-7C0453561701}) (Version: 3.0.6 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{B678797F-DF38-4556-8A31-8B818E261868}) (Version: 8.0.0.23 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

Bing Bar (HKLM-x32\...\{D322A9E3-758B-4D60-A7C4-65C88FD378D0}) (Version: 7.2.241.0 - Microsoft Corporation)

Bing Desktop (HKLM-x32\...\{7D095455-D971-4D4C-9EFD-9AF6A6584F3A}) (Version: 1.1.166.0 - Microsoft Corporation)

BlueStacks App Player (HKLM-x32\...\BlueStacks App Player) (Version: 0.7.8.829 - BlueStack Systems, Inc.)

Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)

Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.3.5.0 - Canon Inc.)

Canon MG2100 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG2100_series) (Version:  - Canon Inc.)

Canon MG2100 series On-screen Manual (HKLM-x32\...\Canon MG2100 series On-screen Manual) (Version:  - )

Canon MG2100 series User Registration (HKLM-x32\...\Canon MG2100 series User Registration) (Version:  - )

Canon MP Navigator EX 5.0 (HKLM-x32\...\MP Navigator EX 5.0) (Version:  - )

Canon My Image Garden (HKLM-x32\...\Canon My Image Garden) (Version: 2.0.1 - Canon Inc.)

Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 2.0.0 - Canon Inc.)

Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: 3.1.0 - Canon Inc.)

Canon Solution Menu EX (HKLM-x32\...\CanonSolutionMenuEX) (Version:  - )

Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden

Catalyst Control Center Core Implementation (x32 Version: 2009.0702.1239.20840 - ATI) Hidden

Catalyst Control Center Graphics Full Existing (x32 Version: 2009.0702.1239.20840 - ATI) Hidden

Catalyst Control Center Graphics Full New (x32 Version: 2009.0702.1239.20840 - ATI) Hidden

Catalyst Control Center Graphics Light (x32 Version: 2009.0702.1239.20840 - ATI) Hidden

Catalyst Control Center Graphics Previews Common (x32 Version: 2013.0830.1944.33589 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Graphics Previews Vista (x32 Version: 2009.0702.1239.20840 - ATI) Hidden

Catalyst Control Center InstallProxy (x32 Version: 2012.0704.2139.36919 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center InstallProxy (x32 Version: 2013.0830.1944.33589 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Localization All (x32 Version: 2009.0702.1239.20840 - ATI) Hidden

Catalyst Control Center Localization All (x32 Version: 2013.0830.1944.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Chinese Standard (x32 Version: 2009.0702.1238.20840 - ATI) Hidden

CCC Help Chinese Standard (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Chinese Traditional (x32 Version: 2009.0702.1238.20840 - ATI) Hidden

CCC Help Chinese Traditional (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Czech (x32 Version: 2009.0702.1238.20840 - ATI) Hidden

CCC Help Czech (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Danish (x32 Version: 2009.0702.1238.20840 - ATI) Hidden

CCC Help Danish (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Dutch (x32 Version: 2009.0702.1238.20840 - ATI) Hidden

CCC Help Dutch (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help English (x32 Version: 2009.0702.1238.20840 - ATI) Hidden

CCC Help English (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Finnish (x32 Version: 2009.0702.1238.20840 - ATI) Hidden

CCC Help Finnish (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help French (x32 Version: 2009.0702.1238.20840 - ATI) Hidden

CCC Help French (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help German (x32 Version: 2009.0702.1238.20840 - ATI) Hidden

CCC Help German (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Greek (x32 Version: 2009.0702.1238.20840 - ATI) Hidden

CCC Help Greek (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Hungarian (x32 Version: 2009.0702.1238.20840 - ATI) Hidden

CCC Help Hungarian (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Italian (x32 Version: 2009.0702.1238.20840 - ATI) Hidden

CCC Help Italian (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Japanese (x32 Version: 2009.0702.1238.20840 - ATI) Hidden

CCC Help Japanese (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Korean (x32 Version: 2009.0702.1238.20840 - ATI) Hidden

CCC Help Korean (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Norwegian (x32 Version: 2009.0702.1238.20840 - ATI) Hidden

CCC Help Norwegian (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Polish (x32 Version: 2009.0702.1238.20840 - ATI) Hidden

CCC Help Polish (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Portuguese (x32 Version: 2009.0702.1238.20840 - ATI) Hidden

CCC Help Portuguese (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Russian (x32 Version: 2009.0702.1238.20840 - ATI) Hidden

CCC Help Russian (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Spanish (x32 Version: 2009.0702.1238.20840 - ATI) Hidden

CCC Help Spanish (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Swedish (x32 Version: 2009.0702.1238.20840 - ATI) Hidden

CCC Help Swedish (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Thai (x32 Version: 2009.0702.1238.20840 - ATI) Hidden

CCC Help Thai (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Turkish (x32 Version: 2009.0702.1238.20840 - ATI) Hidden

CCC Help Turkish (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

ccc-core-static (x32 Version: 2009.0702.1239.20840 - ATI) Hidden

ccc-utility64 (Version: 2009.0702.1239.20840 - ATI) Hidden

ccc-utility64 (Version: 2013.0830.1944.33589 - Advanced Micro Devices, Inc.) Hidden

Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)

Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)

Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)

Cloud System Booster (HKLM-x32\...\Cloud System Booster) (Version: 3.5 - Anvisoft)

DC-Bass Source 1.3.0 (HKLM-x32\...\DC-Bass Source) (Version:  - )

DirectVobSub 2.40.4209 (HKLM-x32\...\vsfilter_is1) (Version: 2.40.4209 - MPC-HC Team)

DivX Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.3.52 - DivX, LLC)

DMG Extractor (HKCU\...\DMG Extractor) (Version: 1.2.3.0 - Reincubate Ltd)

Driver Booster (HKLM-x32\...\Driver Booster_is1) (Version: 1.5 - IObit)

ffdshow v1.1.4399 [2012-03-22] (HKLM-x32\...\ffdshow_is1) (Version: 1.1.4399.0 - )

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 37.0.2062.103 - Google Inc.)

Google Talk (remove only) (HKCU\...\{226b64e8-dc75-4eea-a6c8-abcb496320f2}-Google Talk) (Version:  - )

Google Talk Plugin (HKLM-x32\...\{217CEB43-6D22-3E1F-A311-DC0D7BFEE0A2}) (Version: 5.4.1.18709 - Google)

Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)

Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden

Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden

iCloud (HKLM\...\{6096C0CC-7E19-4355-87F0-627EC5AA146D}) (Version: 4.0.3.56 - Apple Inc.)

ImTOO iPhone Photo Transfer (HKLM-x32\...\ImTOO iPhone Photo Transfer) (Version: 1.1.4.20131114 - ImTOO)

ImTOO iPhone SMS Backup (HKLM-x32\...\ImTOO iPhone SMS Backup) (Version: 1.0.13.20140211 - ImTOO)

IObit Apps Toolbar v8.3 (HKLM-x32\...\{B14D51F5-F44F-4D77-86D0-777D6CB6C235}) (Version: 8.3 - Spigot, Inc.) <==== ATTENTION

IObit Malware Fighter (HKLM-x32\...\IObit Malware Fighter_is1) (Version: 2.4 - IObit)

iPhone Backup Extractor (HKCU\...\iPhone Backup Extractor) (Version: 4.6.6.0 - Reincubate Ltd)

iPhoneBrowser (HKLM-x32\...\{C1FCDCA1-2759-4E5E-84EE-3A665BB2F513}) (Version: 1.9.3 - Cranium Consulting and Custom Software)

iTunes (HKLM\...\{F46AA0F1-E284-4878-A462-5F11B9166C0E}) (Version: 11.4.0.18 - Apple Inc.)

Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217067FF}) (Version: 7.0.670 - Oracle)

Java Auto Updater (x32 Version: 2.1.9.0 - Sun Microsystems, Inc.) Hidden

JMicron 1394 Filter Driver (HKLM-x32\...\{13C96625-28E4-4c58-ADE0-CDAFC64752EB}) (Version: 1.00.25.03 - JMicron Technology Corp.)

Lagarith Lossless Codec (1.3.27) (HKLM-x32\...\{F59AC46C-10C3-4023-882C-4212A92283B3}_is1) (Version:  - )

LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version:  - )

Malwarebytes Anti-Malware version 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)

Marvell Miniport Driver (HKLM-x32\...\Marvell Miniport Driver) (Version: 12.10.14.3 - Marvell)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)

Microsoft Mouse and Keyboard Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.1.177.0 - Microsoft Corporation)

Microsoft Office Language Pack 2010 - English (HKLM\...\Office14.OMUI.en-us) (Version: 14.0.7015.1000 - Microsoft Corporation)

Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)

Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.6.305.0 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)

Microsoft Silverlight 5 Toolkit December 2011 (HKLM-x32\...\{EC35EE8E-87D1-4E3E-B5CC-D8B1544615F5}) (Version: 5.0.51209.1124 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Windows Debugging Symbols (HKLM-x32\...\{8DD62FB6-083D-40B9-9D7D-48449FDDDED5}) (Version: 7601 - Microsoft)

Microsoft Windows Debugging Symbols (HKLM-x32\...\{C6DB958A-50CC-481B-9ED8-3BAD236F7B49}) (Version: 7601 - Microsoft)

Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)

Mozilla Firefox 18.0.2 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 18.0.2 (x86 en-US)) (Version: 18.0.2 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 18.0.2 - Mozilla)

MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

Notification Center (HKLM-x32\...\{FDAD2767-11CA-4D38-9CC4-48770CE3CC7B}) (Version: 0.7.8.829 - BlueStack Systems, Inc.)

NVIDIA 3D Vision Controller Driver 340.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 340.50 - NVIDIA Corporation)

NVIDIA 3D Vision Driver 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 340.52 - NVIDIA Corporation)

NVIDIA Control Panel 340.52 (Version: 340.52 - NVIDIA Corporation) Hidden

NVIDIA GeForce Experience 2.1.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.2 - NVIDIA Corporation)

NVIDIA GeForce Experience Service (Version: 16.13.42 - NVIDIA Corporation) Hidden

NVIDIA Graphics Driver 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 340.52 - NVIDIA Corporation)

NVIDIA HD Audio Driver 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)

NVIDIA Install Application (Version: 2.1002.162.1274 - NVIDIA Corporation) Hidden

NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden

NVIDIA Network Service (Version: 2.0 - NVIDIA Corporation) Hidden

NVIDIA PhysX (x32 Version: 9.13.1220 - NVIDIA Corporation) Hidden

NVIDIA PhysX System Software 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)

NVIDIA ShadowPlay 16.13.42 (Version: 16.13.42 - NVIDIA Corporation) Hidden

NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.12.6514 - NVIDIA Corporation) Hidden

NVIDIA Update 16.13.42 (Version: 16.13.42 - NVIDIA Corporation) Hidden

NVIDIA Update Core (Version: 16.13.42 - NVIDIA Corporation) Hidden

NVIDIA Virtual Audio 1.2.25 (Version: 1.2.25 - NVIDIA Corporation) Hidden

OpenSource Flash Video Splitter 1.0.0.5 (HKLM-x32\...\OpenSource Flash Video Splitter) (Version: 1.0.0.5 - )

PE988 (HKLM\...\{6F8ECA7B-420F-4D63-B866-B83737EB3E76}) (Version: 6.0.77 - YUAN)

Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)

QuickShare (HKLM-x32\...\{62BC7EFB-47F5-4619-9B74-7DDA72D5AF7E}) (Version: 1.6.1.949 - Linkury Inc.) <==== ATTENTION

QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)

RealDownloader (x32 Version: 1.3.0 - RealNetworks, Inc.) Hidden

RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0 - RealNetworks, Inc) Hidden

RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0 - RealNetworks, Inc) Hidden

RealPlayer Cloud (HKLM-x32\...\RealPlayer 17.0) (Version: 17.0.2 - RealNetworks)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7246 - Realtek Semiconductor Corp.)

RealUpgrade 1.1 (x32 Version: 1.1.0 - RealNetworks, Inc.) Hidden

Recuva (HKLM\...\Recuva) (Version: 1.51 - Piriform)

RocketDock 1.3.5 (HKLM-x32\...\RocketDock_is1) (Version:  - Punk Software)

Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version:  - Microsoft)

Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version:  - Microsoft) Hidden

Service Pack 2 for Microsoft Office 2010 Language Pack (KB2687449) 64-Bit Edition (HKLM\...\{90140000-0100-0409-1000-0000000FF1CE}_Office14.OMUI.en-us_{E8C86A07-99F1-4750-A6CF-C4ED5211A146}) (Version:  - Microsoft)

Service Pack 2 for Microsoft Office 2010 Language Pack (KB2687449) 64-Bit Edition (Version:  - Microsoft) Hidden

SHIELD Streaming (Version: 3.1.200 - NVIDIA Corporation) Hidden

SHIELD Wireless Controller Driver (Version: 16.13.42 - NVIDIA Corporation) Hidden

Torch (HKCU\...\Torch) (Version: 33.0.0.7723 - Torch Media, Inc) <==== ATTENTION

UpdateService (x32 Version: 1.0.0 - RealNetworks, Inc.) Hidden

VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden

VideoDownloaderUltimate (HKCU\...\VideoDownloaderUltimateWinApp) (Version: 1.0.1.23 - Link64)

Visual Studio 2010 x64 Redistributables (HKLM\...\{21B133D6-5979-47F0-BE1C-F6A6B304693F}) (Version: 13.0.0.1 - AVG Technologies)

Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)

Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)

VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)

Windows Driver Package - Advanced Micro Devices (amdide64) hdc  (12/04/2012 5.2.2.0179) (HKLM\...\92CABF192AE59FEC7A26BF526AE067A4C700A858) (Version: 12/04/2012 5.2.2.0179 - Advanced Micro Devices)

Windows Driver Package - Apple (Netaapl) Net  (07/12/2011 1.8.4.2) (HKLM\...\E3446990DE8D5843AECCB8B0EF4E7D8DBF5E78B2) (Version: 07/12/2011 1.8.4.2 - Apple)

Windows Driver Package - Broadcom Corporation (BTHUSB) Bluetooth  (01/20/2010 6.3.0.3500) (HKLM\...\79B5284AC8847651E6939E5B2FB1A473E6C9D19B) (Version: 01/20/2010 6.3.0.3500 - Broadcom Corporation)

Windows Driver Package - Broadcom Corporation (BTHUSB) Bluetooth  (01/28/2010 6.3.0.3800) (HKLM\...\5BB2352543C023211B5CDA6229832626C218EB7F) (Version: 01/28/2010 6.3.0.3800 - Broadcom Corporation)

Windows Driver Package - YUAN TV DRIVER (cxpl_mhd) Media  (11/08/2011 6.0.32.0077) (HKLM\...\34BE71CBF435D6B34FFAF9BA68AD921E99CF4065) (Version: 11/08/2011 6.0.32.0077 - YUAN TV DRIVER)

Windows Resource Kit Tools - SubInAcl.exe (HKLM-x32\...\{D3EE034D-5B92-4A55-AA02-2E6D0A6A96EE}) (Version: 5.2.3790.1164 - Microsoft Corporation)

WinZip 18.5 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240E3}) (Version: 18.5.11111 - WinZip Computing, S.L. )

XBMC (HKCU\...\XBMC) (Version:  - Team XBMC)

Xvid Video Codec (HKLM-x32\...\Xvid Video Codec 1.3.2) (Version: 1.3.2 - Xvid Team)

 

==================== Custom CLSID (selected items): ==========================

 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

 

 

==================== Restore Points  =========================

 

24-09-2014 09:37:16 Windows Update

24-09-2014 16:21:35 Windows Update

24-09-2014 16:45:02 Installed DirectX

28-09-2014 09:37:09 Windows Update

28-09-2014 23:00:28 Windows Backup

02-10-2014 05:14:16 Windows Update

04-10-2014 15:26:38 Removed iCloud

04-10-2014 15:30:47 Installed iCloud

05-10-2014 15:50:44 Windows Update

05-10-2014 23:00:22 Windows Backup

08-10-2014 19:37:35 Windows Update

10-10-2014 04:01:33 Microsoft Antimalware Checkpoint

12-10-2014 00:32:26 Windows Update

12-10-2014 23:01:33 Windows Backup

14-10-2014 18:00:01 Restore Operation

14-10-2014 19:36:04 Windows Backup

14-10-2014 21:20:04 Windows Update

16-10-2014 19:17:02 Windows Backup

16-10-2014 23:08:12 Reimage Express Restore Point

17-10-2014 12:55:06 Reimage Express Restore Point

17-10-2014 13:09:23 Uninstalled with Total Uninstall ""

17-10-2014 15:53:12 Revo Uninstaller's restore point - Google+ Auto Backup

17-10-2014 16:51:36 Installed STOPzilla

17-10-2014 17:00:05 STOPzilla Restore Point.

17-10-2014 18:00:24 Removed STOPzilla

18-10-2014 17:58:42 Windows Update

19-10-2014 16:17:02 Microsoft Antimalware Checkpoint

19-10-2014 19:50:27 Removed Adobe Acrobat XI Pro.

19-10-2014 23:03:13 Windows Backup

 

==================== Hosts content: ==========================

 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

 

2014-03-01 02:10 - 2014-10-19 12:41 - 00449787 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 localhost

127.0.0.1 activate.adobe.com

127.0.0.1 3dns-3.adobe.com

127.0.0.1 adobe-dns-2.adobe.com

127.0.0.1 adobe-dns-3.adobe.com

127.0.0.1 ereg.wip3.adobe.com

127.0.0.1 activate-sea.adobe.com

127.0.0.1 wip3.adobe.com

127.0.0.1 wwis-dubc1-vip60.adobe.com

127.0.0.1 activate-sjc0.adobe.com

127.0.0.1 practivate.adobe.com

127.0.0.1 ereg.adobe.com

127.0.0.1 activate.wip3.adobe.com

127.0.0.1 3dns-2.adobe.com

127.0.0.1 adobe-dns.adobe.com

127.0.0.1 www.iobit.com

127.0.0.1 www.007guard.com

127.0.0.1 007guard.com

127.0.0.1 008i.com

127.0.0.1 www.008k.com

127.0.0.1 008k.com

127.0.0.1 www.00hq.com

127.0.0.1 00hq.com

127.0.0.1 010402.com

127.0.0.1 www.032439.com

127.0.0.1 032439.com

127.0.0.1 www.0scan.com

127.0.0.1 0scan.com

127.0.0.1 1000gratisproben.com

 

There are 1000 more lines.

 

 

==================== Scheduled Tasks (whitelisted) =============

 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

 

Task: {000612EA-70A0-4C63-89A1-8C5AEA7EFE8D} - System32\Tasks\{2C7ACBC0-7276-4542-8CD7-529B4D9AA8CC} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

Task: {006F7C01-5F0E-4150-9C4D-DE30C78C24A1} - System32\Tasks\{5FB22839-DCD7-44B2-8A12-F735271B7366} => C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe [2012-11-27] ()

Task: {02E826AC-35DE-482B-94B2-15A0559936CE} - System32\Tasks\{81C5B8D4-8F2D-4A27-9184-EED41C281D3E} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

Task: {05A07841-8538-4FA8-A72E-58D63EF246DB} - System32\Tasks\{A2992F5E-09C1-403A-B59B-A743630AD888} => C:\Users\Nigel\Desktop\System Drivers\SetupBtwDownloadSE.exe

Task: {079ADE9F-71D9-4F2F-ACD6-13E8E77D1F92} - System32\Tasks\Csb_IdleScan_Task => C:/Program Files (x86)/Anvisoft/Cloud System Booster/CloudSystemBooster.exe [2014-08-20] (Anvisoft)

Task: {093963F0-A29D-40AE-99C1-75A26902A885} - System32\Tasks\Test TimeTrigger => C:\Users\Nigel\AppData\Local\Temp\Runner.exe <==== ATTENTION

Task: {0A818F3C-A3E3-4122-B3F0-19729F7CCE12} - System32\Tasks\{7DB33574-0FEC-4FC6-92B5-1663FE05B401} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

Task: {0DCD46B0-0A93-41AF-A417-D30980C7434D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-24] (Adobe Systems Incorporated)

Task: {1038BF1B-FF84-473E-9470-CF2542F8734B} - System32\Tasks\{621D54F1-F962-49FF-80F3-E4901E48F97F} => C:\NVIDIA\DisplayDriver\326.01\Win8_WinVista_Win7\International\Display.Driver\NvCplSetupInt.exe

Task: {10ADD4C1-18C7-4959-B6A6-55B7612B9981} - System32\Tasks\{9B93F1C1-BAE0-4547-A7F4-436DCB981174} => C:\NVIDIA\DisplayDriver\326.01\Win8_WinVista_Win7\International\Display.Driver\NvCplSetupInt.exe

Task: {123565F3-0D19-410B-A6DA-88F89AD0DB10} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2013-01-29] (Microsoft)

Task: {12EFB081-B6B7-498C-B0EB-5B466DCAC3DB} - System32\Tasks\{C1FD0AF3-F142-4A98-8F71-C27459CCC326} => C:\Users\Public\Documents\ATISetup.exe [2013-02-14] (Advanced Micro Devices, Inc.)

Task: {169AAA98-589D-4EF5-99E6-164E9E990614} - System32\Tasks\{73CE8116-3FE9-4BB0-9ECF-FF9EF71B71CC} => C:\AMD\Support\13-4_vista_win7_win8_64_dd_ccc_whql\Setup.exe [2013-03-28] (Advanced Micro Devices, Inc.)

Task: {169CA07C-AC46-4953-8DA6-2580DBCF974F} - System32\Tasks\{2D439E47-B377-4F2A-84A7-1FFFB9315E27} => C:\Users\Nigel\Desktop\System Drivers\SetupBtwDownloadSE.exe

Task: {186E7797-9FE8-4A70-9B8A-BB997C6DC598} - System32\Tasks\{CC0FD0E2-776D-4B23-B75B-DA619AA69C1B} => C:\Users\Nigel\Desktop\SetupBtwDownloadSE.exe

Task: {1AFB0322-06B1-4B25-A4D1-2EC13633A456} - System32\Tasks\{10054E13-B4D2-4038-A149-7D7CD286D5BC} => C:\Program Files\Microsoft Silverlight\5.1.20125.0\Silverlight.Configuration.exe

Task: {1FE31CA9-9587-4D90-B97B-4874FE0DD994} - System32\Tasks\{3809E01F-7D74-419D-A04E-475AC9AC0104} => C:\Users\Nigel\Desktop\System Drivers\SetupBtwDownloadSE.exe

Task: {2199150D-38EE-40E0-932A-C547AFC1CDCE} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2012-07-03] (Sun Microsystems, Inc.)

Task: {22E21245-ACCB-45D9-86D9-43D186C24EE0} - System32\Tasks\{1C9473D9-9587-4262-BED4-CE9A0A5B7132} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

Task: {22ED1B6B-B453-4340-A791-B7610BD18DAD} - System32\Tasks\ss u helper-S-9665547 => c:\programdata\wintersoft\ss u helper\ss u helper.exe

Task: {23925085-F16B-480C-893C-00F6B4471DB4} - System32\Tasks\{6FCAAA83-1380-4B01-827E-618BDC4C8749} => C:\Users\Nigel\Desktop\SetupBtwDownloadSE.exe

Task: {251F1F0E-642E-4773-9A4F-BEB433A9277B} - System32\Tasks\{0F35E7D5-B3FA-4E4F-B3C2-695339938076} => C:\Users\Public\Documents\ATISetup.exe [2013-02-14] (Advanced Micro Devices, Inc.)

Task: {26D1CC47-7787-49E1-91F4-1C5B5053B481} - System32\Tasks\{28980DF0-B3B8-477B-B624-7B366C1E9F82} => C:\NVIDIA\DisplayDriver\326.01\Win8_WinVista_Win7\International\Display.Driver\NvCplSetupInt.exe

Task: {293E9808-104D-47BB-BAAD-6C879853839B} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-01-29] (Microsoft Corporation)

Task: {2963DDCF-57EB-43AE-890A-DF5A98B7AEC7} - System32\Tasks\GPUpdateCheck => C:\Program Files (x86)\GetPrivate\gpup.exe [2014-09-22] ()

Task: {29FCDBB3-E067-422E-B938-73B7521C3370} - System32\Tasks\{84129D00-A527-4272-9EAF-734B4C1137A6} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

Task: {317E9D0C-E965-4647-AF45-C426E3C47409} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-425073729-1472267466-4260431720-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe [2012-11-29] (RealNetworks, Inc.)

Task: {32608733-4D6D-47E7-89BF-37F1B22B89B9} - System32\Tasks\{DAE296A8-D8A2-4199-8500-2224FE88CDAF} => C:\NVIDIA\DisplayDriver\326.01\Win8_WinVista_Win7\International\Display.Driver\NvCplSetupInt.exe

Task: {349B5B62-DEAF-4B16-93FE-DE7C169ABE66} - System32\Tasks\ReclaimerUpdateFiles_Nigel => C:\Users\Nigel\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\11.02\agent\rnupgagent.exe [2014-09-20] (RealNetworks, Inc.)

Task: {368FD478-750D-48DA-98C1-91A0AC9154BA} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-425073729-1472267466-4260431720-1000Core => C:\Users\Nigel\AppData\Local\Google\Update\GoogleUpdate.exe

Task: {3885C983-81FD-4929-94F2-BADDDEC585E8} - System32\Tasks\{E9D746C0-8108-4D3F-856F-0B8E88844D63} => C:\Users\Nigel\AppData\Roaming\Easeware\DriverEasy\drivers\sqnb3bkh.g5k\13-4_vista_win7_win8_64_dd_ccc_whql.exe

Task: {3A28F420-CA2E-41C7-98E6-090BD717828D} - System32\Tasks\{1BB641A5-4C01-461B-A3CA-3EE7A8AFC753} => C:\Users\Nigel\Desktop\System Drivers\SetupBtwDownloadSE.exe

Task: {3A662C89-E799-4D3F-A277-2C6AE51F2D5D} - System32\Tasks\RNUpgradeHelperLogonPrompt_Nigel => C:\Users\Nigel\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\11.02\agent\rnupgagent.exe [2014-09-20] (RealNetworks, Inc.)

Task: {3AE4BFDD-06D3-4A72-A031-752C12C5A1FC} - System32\Tasks\{3CED81EB-75E9-4886-9345-6F8A59F71133} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

Task: {3AE64DE5-B4CB-4FEE-8261-3C44EC6592F2} - System32\Tasks\{DA2D6784-B468-41D6-A9C3-E6456F0ECEDC} => C:\AMD\Support\13-4_vista_win7_win8_64_dd_ccc_whql\Setup.exe [2013-03-28] (Advanced Micro Devices, Inc.)

Task: {3C0C5E3A-2FD6-4BE1-9044-A2D75313532F} - System32\Tasks\{3A0372C4-11E7-4A9F-97D8-DA624D7A58FD} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

Task: {3FC269B9-8C6C-4A9E-9628-2490CDAF8E1D} - System32\Tasks\{F565868D-6352-46C1-9D78-ACC152BA5AFC} => C:\Users\Nigel\AppData\Roaming\Easeware\DriverEasy\drivers\sqnb3bkh.g5k\13-4_vista_win7_win8_64_dd_ccc_whql.exe

Task: {4351F10C-E69D-4B69-945D-08C1F0EBDD8A} - System32\Tasks\{8F6CAC86-F380-4C50-8006-36939E72777D} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

Task: {449F4E01-3C7C-4D28-ABBA-828539A83685} - System32\Tasks\{C418A8B2-9255-49E4-A6E9-4D7CA82ADDD3} => C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe [2012-11-27] ()

Task: {44E0ECA0-F601-4090-B027-8CD419F677AD} - System32\Tasks\SmartDefrag_Schedule => C:\Program Files (x86)\IObit\Smart Defrag 2\SmartDefrag.exe

Task: {459C1231-E4FD-4849-B9C5-FBA0C5BB8245} - System32\Tasks\{2A23BB18-DE5C-43BD-BC52-72961C9849D3} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

Task: {467D8819-3E3A-417E-863A-3DF0E112FCB5} - System32\Tasks\{AE34398D-666B-4CCE-BC8F-DB48148EA13F} => C:\Users\Nigel\AppData\Roaming\Easeware\DriverEasy\drivers\sqnb3bkh.g5k\13-4_vista_win7_win8_64_dd_ccc_whql.exe

Task: {4BE74FA7-42CD-41FE-B40D-F9E9C441537E} - System32\Tasks\{BAF80243-FBA1-4E89-95EB-C0D3AA496914} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

Task: {4F2DEE36-7405-4E0C-8129-21A2BBD59B4E} - System32\Tasks\{AEE3B048-B798-479B-B577-03A229A26271} => C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe [2012-11-27] ()

Task: {51745400-A8A2-46E2-A2AA-F90FD82B42A5} - System32\Tasks\{924020A1-5A40-46D8-ADE0-8DF0D267C4CA} => C:\Users\Nigel\Downloads\USB Human Interface Device 33b51d98912fa395f47d492c06592e62\USB Human Interface Device 33b51d98912fa395f47d492c06592e62.exe

Task: {51DF843C-2317-46CB-8DCD-9786748EF292} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-425073729-1472267466-4260431720-1000UA => C:\Users\Nigel\AppData\Local\Google\Update\GoogleUpdate.exe

Task: {56459790-A92F-4CDA-AF94-876D74EBEC31} - System32\Tasks\{9FAA2EAA-5333-4F67-897D-042DC1118AEF} => C:\NVIDIA\DisplayDriver\326.01\Win8_WinVista_Win7\International\Display.Driver\NvCplSetupInt.exe

Task: {5852944E-E3BF-47B0-A8CD-EE9B9FCC856C} - System32\Tasks\{48E4D8DA-0C19-4658-B79C-C5078590BEEF} => C:\Program Files (x86)\JMicron\JOHCI_DIR\setup.exe [2010-07-30] (JMicron Technology Corp.)

Task: {59D050C2-9DFB-4BBB-9BEF-9B5072BDAE74} - System32\Tasks\{FE23A538-ED0A-40E0-87B2-0FA07139C608} => C:\Users\Nigel\Desktop\SetupBtwDownloadSE.exe

Task: {5A655E23-C498-4B5F-A959-B0588BD8C6CB} - System32\Tasks\{73825FD6-27E8-44E3-A92D-5506AD1B97FA} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

Task: {5C75FAF9-9DA8-4844-8416-2228A7785B44} - System32\Tasks\{FC2419A3-3ADC-4196-AAA4-5A5977A662CF} => C:\Program Files (x86)\JMicron\JOHCI_DIR\setup.exe [2010-07-30] (JMicron Technology Corp.)

Task: {6032B365-3830-4CD5-AE92-FE6D4561AE51} - System32\Tasks\{881571A8-9200-4CB5-B498-2A83A9E86DA6} => C:\NVIDIA\DisplayDriver\326.01\Win8_WinVista_Win7\International\Display.Driver\NvCplSetupInt.exe

Task: {60E328B8-E650-45BE-8878-404EE5B610F8} - System32\Tasks\{87D481AC-6BB3-4473-B7AD-3607DCEA8756} => C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe [2012-11-27] ()

Task: {6260FD1A-D38B-44C5-A055-52AB153435FD} - System32\Tasks\{11B3F5B9-1B08-4582-8226-996CDA70793D} => C:\Users\Nigel\Desktop\System Drivers\SetupBtwDownloadSE.exe

Task: {65685772-F1F4-4A8B-8875-60D89FD5137A} - \TidyNetwork Update No Task File <==== ATTENTION

Task: {667FC555-EBE8-4B7E-A24B-C32A0943A876} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-01-29] (Microsoft Corporation)

Task: {67309B44-4BBA-46A8-94CE-66F0E4118D55} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {7033CB6B-822E-422C-B3A5-285638759605} - System32\Tasks\{F92FDF9D-A098-4E5B-A8B0-BFD8B84ACFF9} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

Task: {708D0DCC-2C04-499E-BB51-26648D454A7B} - System32\Tasks\{C174E770-DDA8-43A4-B145-1DDB63E80EFB} => C:\Users\Nigel\Desktop\SetupBtwDownloadSE.exe

Task: {77090DF9-6BCB-46BD-A052-595EF90E516D} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-425073729-1472267466-4260431720-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2012-11-29] (RealNetworks, Inc.)

Task: {779B01EA-C171-4A33-A0AA-D9A09F0EEE26} - System32\Tasks\ReimageUpdater => C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe

Task: {79C33A83-58DD-44FC-87EE-B1EAC391332E} - System32\Tasks\{4A2DD742-0F4E-41E5-8164-8C4079E1D14C} => C:\Program Files (x86)\JMicron\JOHCI_DIR\setup.exe [2010-07-30] (JMicron Technology Corp.)

Task: {7C43B3B7-D555-40E2-9548-D0461CBC676F} - System32\Tasks\{7B644DAF-35C5-439A-952A-E355469DEE4A} => C:\AMD\Support\13-4_vista_win7_win8_64_dd_ccc_whql\Setup.exe [2013-03-28] (Advanced Micro Devices, Inc.)

Task: {7CC66EF8-31F6-4E5C-BFE2-92851B0A97E8} - System32\Tasks\ReclaimerUpdateXML_Nigel => C:\Users\Nigel\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\11.02\agent\rnupgagent.exe [2014-09-20] (RealNetworks, Inc.)

Task: {7D16292D-72E8-4AE0-A281-77217F353C3C} - System32\Tasks\{C6D7FCF8-E7B1-4703-8194-D75C03B4DF37} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

Task: {7EC72E42-E0D9-4DB7-B499-3BC25912A497} - System32\Tasks\{4AACEB05-CFC0-4279-9403-CC99773EDDCF} => C:\Users\Nigel\Desktop\System Drivers\SetupBtwDownloadSE.exe

Task: {7F733B87-02E8-479E-8440-514AE88C24A7} - System32\Tasks\{6D7101B6-EC94-4CD8-9786-A08EE5E54F8F} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

Task: {807F5556-47D5-4EC7-8562-1CC7C96009B0} - System32\Tasks\Eakona Update => C:\ProgramData\Eakona\update15.exe

Task: {81A0FB29-85F8-4BFA-8F27-A54082550447} - System32\Tasks\Driver Booster SkipUAC (Nigel) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe [2014-08-06] (IObit)

Task: {83AFC484-8A32-40B4-8A02-9E064C609D88} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-425073729-1472267466-4260431720-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2012-11-29] (RealNetworks, Inc.)

Task: {84589CC3-E682-4196-B545-F1A996BDD4B1} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: {84CFA5CB-FE45-4E62-8842-A69B2BC7833D} - System32\Tasks\{544F44BF-F291-4E18-8BF3-60C0E38A8E9D} => C:\Program Files (x86)\FVD Player\FVD Player.exe

Task: {8565466B-33EA-453A-9A44-FB10FED0EBE0} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-425073729-1472267466-4260431720-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-10-25] (RealNetworks, Inc.)

Task: {8C433082-E77E-4688-BF0E-6CB3A25A77DD} - System32\Tasks\{1D1A5A4A-8E61-4697-AC2F-51D7EE009786} => C:\Users\Nigel\Desktop\SetupBtwDownloadSE.exe

Task: {90473550-E850-4BFB-9244-5EE77EF732AA} - System32\Tasks\{1F60F57D-30CA-4034-BC06-941D7B6CD9F0} => C:\Program Files (x86)\FVD Player\FVD Player.exe

Task: {951DCD93-192C-435E-A657-97B8861D29D7} - System32\Tasks\{72C600E9-A2FB-4A6C-8EDB-4B7FD35F3BE0} => C:\Users\Nigel\Desktop\System Drivers\SetupBtwDownloadSE.exe

Task: {96424976-48F4-4F52-A759-B19F12A6F4AF} - System32\Tasks\YourFileDownloader Installer Starter => C:\Users\Nigel\AppData\Local\Temp\YourFileDownloaderxVijv0Nbf2.exe <==== ATTENTION

Task: {96878061-26E9-49D3-8B8B-6CC548CA5809} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: {992CD035-8FA6-4179-8F27-6451EAC9B25E} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-01-29] (Microsoft Corporation)

Task: {9B7E1E6B-8E4C-4230-9B53-6F404F3C8FA3} - System32\Tasks\RNUpgradeHelperResumePrompt_Nigel => C:\Users\Nigel\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\11.02\agent\rnupgagent.exe [2014-09-20] (RealNetworks, Inc.)

Task: {A08E06B3-13BE-4A64-8BE4-BA75BFE3CF80} - System32\Tasks\{DCD6F798-3E9A-4E0B-BD8F-4F1A56C6E1A5} => C:\Users\Nigel\Downloads\USB Human Interface Device 33b51d98912fa395f47d492c06592e62\USB Human Interface Device 33b51d98912fa395f47d492c06592e62.exe

Task: {A5E73495-E96E-4AB8-AF93-C21EC0416E5A} - System32\Tasks\{1A248453-EA28-4123-BDBE-21B643214981} => C:\Users\Nigel\Desktop\System Drivers\SetupBtwDownloadSE.exe

Task: {A5FEAF99-0991-43FE-AA1F-D8046B57BAEE} - System32\Tasks\{E053BCD8-88B4-40F6-B0E9-54B4C0E2DB24} => C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe [2012-11-27] ()

Task: {A865B493-DC39-4096-A89C-F345384C3AF4} - System32\Tasks\{6F328AA4-E7BC-4E55-8580-8DD694CC3ADB} => C:\Users\Nigel\Desktop\SetupBtwDownloadSE.exe

Task: {A8818490-0854-4337-B395-4A370F92FE89} - System32\Tasks\{21766169-89C2-49F6-BB8F-AB224E395A1B} => C:\NVIDIA\DisplayDriver\326.01\Win8_WinVista_Win7\International\Display.Driver\NvCplSetupInt.exe

Task: {AB23705A-DE13-4C0F-9DC8-275734E6618D} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup

Task: {AB54D713-8B71-4989-A1B2-F224EB44A3AE} - System32\Tasks\{8571D682-9355-4007-A9C8-52B226CC06A8} => C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe [2012-11-27] ()

Task: {AEA2DCEC-1540-4417-808E-F885D955417D} - System32\Tasks\{F42A0C80-5557-42CB-8465-6164EBAD88A8} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

Task: {AEB6797F-3C8C-4FEC-ADF2-D899CAF39D65} - System32\Tasks\{4BD65B01-0AE9-4A43-B2F7-CF6128EA21A9} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

Task: {AF7D2CEF-584D-4481-8C36-2503A983A9DB} - System32\Tasks\AdobeAAMUpdater-1.0-Nigel-PC-Nigel => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2014-02-27] (Adobe Systems Incorporated)

Task: {B2EE0003-6F1B-4C22-8D48-992FB5AABE0A} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-01-29] (Microsoft Corporation)

Task: {B41A22EC-4CB5-4AFE-8BEA-5B01E5AE43EE} - System32\Tasks\{E400AB86-5A44-4228-A3CE-AF605BA9AF62} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

Task: {B7FC23B2-7EC7-4C96-8161-B3CFB715E737} - System32\Tasks\{9ED700B8-ECDA-427C-B8E3-2791A2E2DCD7} => C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe [2012-11-27] ()

Task: {BBC765F7-D309-4BD8-BA18-A107F6F5948E} - System32\Tasks\{077AA7A5-1BD3-4EFA-ABDB-DFB6174D3071} => C:\NVIDIA\DisplayDriver\326.01\Win8_WinVista_Win7\International\Display.Driver\NvCplSetupInt.exe

Task: {C11C6FBD-A367-4737-8923-386DAD5DC884} - System32\Tasks\{B15A5C3F-6909-4D9D-AEEA-7873D50CBFC1} => C:\Users\Nigel\AppData\Roaming\Easeware\DriverEasy\drivers\sqnb3bkh.g5k\13-4_vista_win7_win8_64_dd_ccc_whql.exe

Task: {C3F97A9C-6154-4CED-BFDC-028EF0188789} - System32\Tasks\{F153F805-2E31-4E5B-97C7-FD71BC0BEB55} => C:\NVIDIA\DisplayDriver\326.01\Win8_WinVista_Win7\International\Display.Driver\NvCplSetupInt.exe

Task: {C435B79A-12EE-4AF1-9117-FC0211600E4D} - System32\Tasks\{50FFBF50-AA52-4ED1-B6A2-ABE0AB7A1FA8} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

Task: {CF517E06-FF2E-40D8-90A8-38618541F7C7} - System32\Tasks\{25E512C9-6BF5-4F04-AD7A-771D90B5EA74} => C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe [2012-11-27] ()

Task: {D7F7BD77-BA36-439A-912A-E42FFD28F48F} - System32\Tasks\{D8FD28E2-15C2-4D62-A60C-F8B55E46DD86} => C:\NVIDIA\DisplayDriver\326.01\Win8_WinVista_Win7\International\Display.Driver\NvCplSetupInt.exe

Task: {DDD4F934-C2EF-42A7-A324-93D7B98AF47E} - System32\Tasks\{9FBD2980-03DB-418A-8BE2-EFEF5DFC542B} => C:\NVIDIA\DisplayDriver\326.01\Win8_WinVista_Win7\International\Display.Driver\NvCplSetupInt.exe

Task: {DF1AD657-5EA2-47B0-98BF-F60D6C449CB5} - System32\Tasks\{74F22C14-D49E-46A3-89CB-999F91FAE2D9} => C:\Users\Nigel\Desktop\SetupBtwDownloadSE.exe

Task: {DF61FCD0-E3FE-4055-9FCD-C17C2A9196F3} - System32\Tasks\{5F84FB09-08A8-499F-B17F-7CCCA4EE158D} => C:\Users\Nigel\Desktop\System Drivers\SetupBtwDownloadSE.exe

Task: {E5004064-C3D0-4FB4-BC0E-D9653316B938} - System32\Tasks\{154733BA-4DA3-4301-AD83-0230D0C5461D} => C:\NVIDIA\DisplayDriver\326.01\Win8_WinVista_Win7\International\Display.Driver\NvCplSetupInt.exe

Task: {E605B7D6-DB52-4020-9B63-D4FB2ED3B067} - System32\Tasks\{FB5E2E38-F3B5-4A82-9033-18D3A4773C95} => C:\Users\Nigel\Desktop\SetupBtwDownloadSE.exe

Task: {E9FBC6F9-B382-4931-B10F-BE788B37743E} - System32\Tasks\{52EC31A4-035C-4281-B156-1FFA146BEFB5} => C:\Program Files (x86)\FVD Player\FVD Player.exe

Task: {EF39CFC0-6789-43E7-B770-1BD31EACB6A4} - System32\Tasks\{698C9EF4-C460-4000-8D89-333C6772CA58} => C:\Program Files (x86)\JMicron\JOHCI_DIR\setup.exe [2010-07-30] (JMicron Technology Corp.)

Task: {F0ADDC43-8010-4AD0-9C2A-3DCDF5A12CCD} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-425073729-1472267466-4260431720-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-10-25] (RealNetworks, Inc.)

Task: {F2AB3193-B105-41BA-ACC2-A89251B966ED} - System32\Tasks\Chrome Launcher => C:\Program Files (x86)\Techsnab\Chrome Launcher\chrome-links.exe [2014-09-13] ()

Task: {FCA5B4FE-154E-4649-82C9-519B0DFFAEA0} - System32\Tasks\{EC9BF912-F05C-4B56-B200-82F74A037AD0} => C:\Program Files\Microsoft Silverlight\5.1.20125.0\Silverlight.Configuration.exe

Task: {FE0838BE-005B-4A21-A157-EEBC70F1FF49} - \GPUP No Task File <==== ATTENTION

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-425073729-1472267466-4260431720-1000Core.job => C:\Users\Nigel\AppData\Local\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-425073729-1472267466-4260431720-1000UA.job => C:\Users\Nigel\AppData\Local\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\ReclaimerUpdateFiles_Nigel.job => C:\Users\Nigel\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\11.02\agent\rnupgagent.exe

Task: C:\Windows\Tasks\ReclaimerUpdateXML_Nigel.job => C:\Users\Nigel\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\11.02\agent\rnupgagent.exe

Task: C:\Windows\Tasks\RNUpgradeHelperLogonPrompt_Nigel.job => C:\Users\Nigel\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\11.02\agent\rnupgagent.exe

 

==================== Loaded Modules (whitelisted) =============

 

2013-03-19 17:05 - 2014-07-02 14:55 - 00116568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2014-03-20 11:24 - 2014-03-20 11:24 - 00667808 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll

2013-09-05 01:17 - 2013-09-05 01:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF

2010-10-20 15:23 - 2010-10-20 15:23 - 08801632 _____ () C:\Program Files\Microsoft Office\Office14\1033\GrooveIntlResource.dll

2014-02-01 06:54 - 2007-09-02 14:58 - 00495616 _____ () C:\Program Files (x86)\RocketDock\RocketDock.exe

2014-01-20 14:17 - 2014-01-20 14:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll

2014-01-20 14:16 - 2014-01-20 14:16 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll

2013-09-05 01:14 - 2013-09-05 01:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF

2010-10-20 15:45 - 2010-10-20 15:45 - 08801120 _____ () C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveIntlResource.dll

2014-02-01 06:54 - 2007-09-02 14:57 - 00069632 _____ () C:\Program Files (x86)\RocketDock\RocketDock.dll

2014-09-13 00:16 - 2014-09-13 00:16 - 00207784 _____ () C:\Program Files (x86)\Techsnab\Chrome Launcher\chromelauncher.dll

2014-09-07 07:51 - 2014-08-29 22:49 - 01098056 _____ () C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.103\libglesv2.dll

2014-09-07 07:51 - 2014-08-29 22:49 - 00174408 _____ () C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.103\libegl.dll

2014-09-07 07:51 - 2014-08-29 22:49 - 08577864 _____ () C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.103\pdf.dll

2014-09-07 07:51 - 2014-08-29 22:49 - 00331592 _____ () C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.103\ppGoogleNaClPluginChrome.dll

2014-09-07 07:51 - 2014-08-29 22:49 - 01660232 _____ () C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.103\ffmpegsumo.dll

2014-09-07 07:51 - 2014-08-29 22:49 - 14669128 _____ () C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.103\PepperFlash\pepflashplayer.dll

 

==================== Alternate Data Streams (whitelisted) =========

 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

 

AlternateDataStreams: C:\Windows\system32\Drivers\ktlxumic.sys:changelist

 

==================== Safe Mode (whitelisted) ===================

 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WRkrn => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WRSVC => ""="Service"

 

==================== EXE Association (whitelisted) =============

 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

 

HKU\.DEFAULT\Software\Classes\.exe: exefile => "%1" %* <===== ATTENTION!

HKU\.DEFAULT\Software\Classes\exefile: "%1" %* <===== ATTENTION!

HKU\S-1-5-19\Software\Classes\.exe: exefile => "%1" %* <===== ATTENTION!

HKU\S-1-5-19\Software\Classes\exefile: "%1" %* <===== ATTENTION!

HKU\S-1-5-20\Software\Classes\.exe: exefile => "%1" %* <===== ATTENTION!

HKU\S-1-5-20\Software\Classes\exefile: "%1" %* <===== ATTENTION!

HKU\S-1-5-21-425073729-1472267466-4260431720-1000\Software\Classes\.exe: exefile =>  <===== ATTENTION!

HKU\S-1-5-21-425073729-1472267466-4260431720-1000\Software\Classes\exefile:  <===== ATTENTION!

 

==================== MSCONFIG/TASK MANAGER disabled items =========

 

(Currently there is no automatic fix for this section.)

 

MSCONFIG\Services: ASCAntivirusSrv => 2

MSCONFIG\Services: Bluetooth Device Monitor => 2

MSCONFIG\Services: Bluetooth Media Service => 2

MSCONFIG\Services: Bluetooth OBEX Service => 2

MSCONFIG\Services: btwdins => 2

MSCONFIG\Services: DefaultTabSearch => 2

MSCONFIG\Services: DefaultTabUpdate => 2

MSCONFIG\Services: Fax => 3

MSCONFIG\Services: hshld => 2

MSCONFIG\Services: HssTrayService => 3

MSCONFIG\Services: HssWd => 2

MSCONFIG\Services: IMFservice => 2

MSCONFIG\Services: RealNetworks Downloader Resolver Service => 3

MSCONFIG\Services: RealPlayer Desktop Service => 3

MSCONFIG\Services: RealPlayerUpdateSvc => 3

MSCONFIG\Services: WRSVC => 2

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Install Webroot IE RunOnce.lnk => C:\Windows\pss\Install Webroot IE RunOnce.lnk.CommonStartup

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^LaunchU3.exe.lnk => C:\Windows\pss\LaunchU3.exe.lnk.CommonStartup

MSCONFIG\startupfolder: C:^Users^Nigel^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^A1Clean.lnk => C:\Windows\pss\A1Clean.lnk.Startup

MSCONFIG\startupfolder: C:^Users^Nigel^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^JustCloud.lnk => C:\Windows\pss\JustCloud.lnk.Startup

MSCONFIG\startupfolder: C:^Users^Nigel^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Microsoft SharePoint Workspace.lnk => C:\Windows\pss\Microsoft SharePoint Workspace.lnk.Startup

MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

MSCONFIG\startupreg: Adobe Creative Cloud => "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true

MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => c:\program files (x86)\common files\adobe\oobe\pdapp\uwa\updaterstartuputility.exe

MSCONFIG\startupreg: AdobeCS5.5ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" -launchedbylogin

MSCONFIG\startupreg: Apoint => 

MSCONFIG\startupreg: Bench Communicator Watcher => 

MSCONFIG\startupreg: Bench Settings Cleaner => 

MSCONFIG\startupreg: BService => 

MSCONFIG\startupreg: BService64 => 

MSCONFIG\startupreg: IObit Malware Fighter => 

MSCONFIG\startupreg: mmonitor => C:\Program Files (x86)\Anvisoft\Cloud System Booster\extentions\toolbox\Anvi RAM Booster\Anvi_RAM_Booster.exe hide=1

MSCONFIG\startupreg: OfficeSyncProcess => "C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE"

MSCONFIG\startupreg: SearchProtection => 

MSCONFIG\startupreg: swg => c:\program files (x86)\google\googletoolbarnotifier\googletoolbarnotifier.exe

MSCONFIG\startupreg: SwitchBoard => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

MSCONFIG\startupreg: uTorrent => "C:\Users\Nigel\AppData\Roaming\uTorrent\uTorrent.exe"  /MINIMIZED

MSCONFIG\startupreg: VideoDownloaderUltimate => C:\ProgramData\VideoDownloaderUltimateWinApp\VideoDownloaderUltimate.exe /repair

MSCONFIG\startupreg: Wd => 

MSCONFIG\startupreg: WRSVC => 

 

========================= Accounts: ==========================

 

Administrator (S-1-5-21-425073729-1472267466-4260431720-500 - Administrator - Disabled)

Guest (S-1-5-21-425073729-1472267466-4260431720-501 - Limited - Enabled) => C:\Users\Guest

Nigel (S-1-5-21-425073729-1472267466-4260431720-1000 - Administrator - Enabled) => C:\Users\Nigel

 

==================== Faulty Device Manager Devices =============

 

Name: AntiLog32

Description: AntiLog32

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer: 

Service: AntiLog32

Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)

Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.

Devices stay in this state if they have been prepared for removal.

After you remove the device, this error disappears.Remove the device, and this error should be resolved.

 

Name: Microsoft PS/2 Mouse

Description: Microsoft PS/2 Mouse

Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: i8042prt

Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)

Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.

Devices stay in this state if they have been prepared for removal.

After you remove the device, this error disappears.Remove the device, and this error should be resolved.

 

Name: SASDIFSV

Description: SASDIFSV

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer: 

Service: SASDIFSV

Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)

Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.

Devices stay in this state if they have been prepared for removal.

After you remove the device, this error disappears.Remove the device, and this error should be resolved.

 

Name: SASKUTIL

Description: SASKUTIL

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer: 

Service: SASKUTIL

Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)

Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.

Devices stay in this state if they have been prepared for removal.

After you remove the device, this error disappears.Remove the device, and this error should be resolved.

 

 

==================== Event log errors: =========================

 

Application errors:

==================

Error: (10/19/2014 06:21:06 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application name: chrome.exe, version: 37.0.2062.103, time stamp: 0x54011f26

Faulting module name: chrome.exe, version: 37.0.2062.103, time stamp: 0x54011f26

Exception code: 0xc0000409

Fault offset: 0x00040366

Faulting process id: 0x10c0

Faulting application start time: 0xchrome.exe0

Faulting application path: chrome.exe1

Faulting module path: chrome.exe2

Report Id: chrome.exe3

 

Error: (10/19/2014 05:21:11 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: The program CKScanner.exe version 2.4.2.1 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

 

Process ID: d44

 

Start Time: 01cfebe2619e8c45

 

Termination Time: 40

 

Application Path: C:\Users\Nigel\Downloads\Geeks_To_Go_Help\CKScanner\CKScanner.exe

 

Report Id: d3ff496d-57d5-11e4-b4b6-f065dd641ea6

 

Error: (10/19/2014 04:28:56 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

 

Error: (10/19/2014 03:50:28 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )

Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.

 

 

Details:

AddLegacyDriverFiles: Unable to back up image of binary szkg5.

 

System Error:

The system cannot find the file specified.

.

 

Error: (10/19/2014 00:17:07 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )

Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.

 

 

Details:

AddLegacyDriverFiles: Unable to back up image of binary szkg5.

 

System Error:

The system cannot find the file specified.

.

 

Error: (10/19/2014 11:49:14 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: ERROR: handle_resolve_request bad interfaceIndex 24

 

Error: (10/19/2014 11:49:14 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: ERROR: handle_resolve_request bad interfaceIndex 23

 

Error: (10/19/2014 11:49:14 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: ERROR: handle_resolve_request bad interfaceIndex 22

 

Error: (10/19/2014 11:49:14 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: ERROR: handle_resolve_request bad interfaceIndex 21

 

Error: (10/19/2014 11:49:14 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: ERROR: handle_resolve_request bad interfaceIndex 20

 

 

System errors:

=============

Error: (10/19/2014 04:29:18 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: The LiveUpdate service terminated unexpectedly.  It has done this 1 time(s).

 

Error: (10/19/2014 04:29:17 PM) (Source: Service Control Manager) (EventID: 7026) (User: )

Description: The following boot-start or system-start driver(s) failed to load: 

amdkmafd

SASDIFSV

SASKUTIL

 

Error: (10/19/2014 04:28:32 PM) (Source: SNMP) (EventID: 1500) (User: )

Description: The SNMP Service encountered an error while accessing the registry key SYSTEM\CurrentControlSet\Services\SNMP\Parameters\TrapConfiguration.

 

Error: (10/19/2014 04:26:32 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: The sbapifs service failed to start due to the following error: 

%%2

 

Error: (10/19/2014 04:26:18 PM) (Source: BTHUSB) (EventID: 5) (User: )

Description: The Bluetooth driver expected an HCI event with a certain size but did not receive it.

 

Error: (10/17/2014 02:17:49 PM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )

Description: %NT AUTHORITY60 has encountered an error trying to update signatures.

 

New Signature Version: 

 

Previous Signature Version: 1.185.3447.0

 

Update Source: %NT AUTHORITY59

 

Update Stage: 4.6.0305.00

 

Source Path: 4.6.0305.01

 

Signature Type: %NT AUTHORITY602

 

Update Type: %NT AUTHORITY604

 

User: NT AUTHORITY\SYSTEM

 

Current Engine Version: %NT AUTHORITY605

 

Previous Engine Version: %NT AUTHORITY606

 

Error code: %NT AUTHORITY607

 

Error description: %NT AUTHORITY608

 

Error: (10/17/2014 02:17:49 PM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )

Description: %NT AUTHORITY60 has encountered an error trying to update signatures.

 

New Signature Version: 

 

Previous Signature Version: 1.185.3447.0

 

Update Source: %NT AUTHORITY59

 

Update Stage: 4.6.0305.00

 

Source Path: 4.6.0305.01

 

Signature Type: %NT AUTHORITY602

 

Update Type: %NT AUTHORITY604

 

User: NT AUTHORITY\SYSTEM

 

Current Engine Version: %NT AUTHORITY605

 

Previous Engine Version: %NT AUTHORITY606

 

Error code: %NT AUTHORITY607

 

Error description: %NT AUTHORITY608

 

Error: (10/17/2014 02:07:29 PM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )

Description: %NT AUTHORITY60 has encountered an error trying to update signatures.

 

New Signature Version: 

 

Previous Signature Version: 1.185.3447.0

 

Update Source: %NT AUTHORITY59

 

Update Stage: 4.6.0305.00

 

Source Path: 4.6.0305.01

 

Signature Type: %NT AUTHORITY602

 

Update Type: %NT AUTHORITY604

 

User: NT AUTHORITY\SYSTEM

 

Current Engine Version: %NT AUTHORITY605

 

Previous Engine Version: %NT AUTHORITY606

 

Error code: %NT AUTHORITY607

 

Error description: %NT AUTHORITY608

 

Error: (10/17/2014 02:07:29 PM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )

Description: %NT AUTHORITY60 has encountered an error trying to update signatures.

 

New Signature Version: 

 

Previous Signature Version: 1.185.3447.0

 

Update Source: %NT AUTHORITY59

 

Update Stage: 4.6.0305.00

 

Source Path: 4.6.0305.01

 

Signature Type: %NT AUTHORITY602

 

Update Type: %NT AUTHORITY604

 

User: NT AUTHORITY\SYSTEM

 

Current Engine Version: %NT AUTHORITY605

 

Previous Engine Version: %NT AUTHORITY606

 

Error code: %NT AUTHORITY607

 

Error description: %NT AUTHORITY608

 

Error: (10/17/2014 02:02:33 PM) (Source: Service Control Manager) (EventID: 7011) (User: )

Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the szserver service.

 

 

Microsoft Office Sessions:

=========================

Error: (10/19/2014 06:21:06 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: chrome.exe37.0.2062.10354011f26chrome.exe37.0.2062.10354011f26c00004090004036610c001cfebeaf7949077C:\Program Files (x86)\Google\Chrome\Application\chrome.exeC:\Program Files (x86)\Google\Chrome\Application\chrome.exe3766d22d-57de-11e4-b4b6-f065dd641ea6

 

Error: (10/19/2014 05:21:11 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: CKScanner.exe2.4.2.1d4401cfebe2619e8c4540C:\Users\Nigel\Downloads\Geeks_To_Go_Help\CKScanner\CKScanner.exed3ff496d-57d5-11e4-b4b6-f065dd641ea6

 

Error: (10/19/2014 04:28:56 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

 

Error: (10/19/2014 03:50:28 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )

Description: 

Details:

AddLegacyDriverFiles: Unable to back up image of binary szkg5.

 

System Error:

The system cannot find the file specified.

 

Error: (10/19/2014 00:17:07 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )

Description: 

Details:

AddLegacyDriverFiles: Unable to back up image of binary szkg5.

 

System Error:

The system cannot find the file specified.

 

Error: (10/19/2014 11:49:14 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: ERROR: handle_resolve_request bad interfaceIndex 24

 

Error: (10/19/2014 11:49:14 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: ERROR: handle_resolve_request bad interfaceIndex 23

 

Error: (10/19/2014 11:49:14 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: ERROR: handle_resolve_request bad interfaceIndex 22

 

Error: (10/19/2014 11:49:14 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: ERROR: handle_resolve_request bad interfaceIndex 21

 

Error: (10/19/2014 11:49:14 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: ERROR: handle_resolve_request bad interfaceIndex 20

 

 

==================== Memory info =========================== 

 

Processor: AMD Athlon™ 7450 Dual-Core Processor

Percentage of memory in use: 42%

Total physical RAM: 8191.3 MB

Available physical RAM: 4710.52 MB

Total Pagefile: 20473.48 MB

Available Pagefile: 16741.73 MB

Total Virtual: 8192 MB

Available Virtual: 8191.84 MB

 

==================== Drives ================================

 

Drive c: (New Volume) (Fixed) (Total:298.09 GB) (Free:139.78 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

Drive k: () (Fixed) (Total:465.76 GB) (Free:180.45 GB) NTFS

 

==================== MBR & Partition Table ==================

 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: D93C5615)

Partition 1: (Active) - (Size=298.1 GB) - (Type=07 NTFS)

 

========================================================

Disk: 1 (Size: 465.8 GB) (Disk ID: DD63B194)

Partition 1: (Not Active) - (Size=465.8 GB) - (Type=42)

 

==================== End Of Log ============================

[Naathim]

It's only the addition logfile, I need also FRST.txt one.

[nfmaharaj]

Sorry about that...... Below is the information requested.... Hope your day is going well.....

 

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 20-10-2014

Ran by Nigel (administrator) on NIGEL-PC on 20-10-2014 14:03:02

Running from C:\Users\Nigel\Desktop

Loaded Profile: Nigel (Available profiles: Nigel & Guest & Classic .NET AppPool & DefaultAppPool)

Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: English (United States)

Internet Explorer Version 11

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

 

==================== Processes (Whitelisted) =================

 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe

(AMD) C:\Windows\System32\atiesrxx.exe

(AMD) C:\Windows\System32\atieclxx.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Anvisoft) C:\Program Files (x86)\Anvisoft\Cloud System Booster\extentions\Toolbox\Startup Booster\StartupTimeSrv.exe

(Microsoft Corporation) C:\Windows\System32\alg.exe

(Anvisoft) C:\Program Files (x86)\Anvisoft\Cloud System Booster\CSBSvc.exe

(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe

(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe

(Microsoft Corporation) C:\Windows\System32\inetsrv\inetinfo.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

(Microsoft Corporation) C:\Windows\System32\mqsvc.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(Microsoft Corporation) C:\Windows\System32\TCPSVCS.EXE

(Microsoft Corporation) C:\Windows\System32\snmp.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(TorchMedia Inc.) C:\Users\Nigel\AppData\Local\Torch\Update\TorchCrashHandler.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Service.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

(Microsoft Corporation) C:\Windows\System32\nfsclnt.exe

(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-Network.exe

(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-BlockDevice.exe

(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-SharedFolder.exe

(Microsoft Corporation) C:\Windows\System32\rundll32.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe

(Microsoft Corporation) C:\Windows\System32\taskmgr.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe

(Torch Media Inc.) C:\Users\Nigel\AppData\Local\Torch\Application\torch.exe

(Torch Media Inc.) C:\Users\Nigel\AppData\Local\Torch\Application\torch.exe

(Torch Media Inc.) C:\Users\Nigel\AppData\Local\Torch\Update\33.0.0.7723\TorchUpdate.exe

(Torch Media Inc.) C:\Users\Nigel\AppData\Local\Torch\Application\torch.exe

(Torch Media Inc.) C:\Users\Nigel\AppData\Local\Torch\Application\torch.exe

(Torch Media Inc.) C:\Users\Nigel\AppData\Local\Torch\Application\torch.exe

(Torch Media Inc.) C:\Users\Nigel\AppData\Local\Torch\Application\torch.exe

(Torch Media Inc.) C:\Users\Nigel\AppData\Local\Torch\Application\torch.exe

(Torch Media Inc.) C:\Users\Nigel\AppData\Local\Torch\Application\torch.exe

(Torch Media Inc.) C:\Users\Nigel\AppData\Local\Torch\Application\torch.exe

(Torch Media Inc.) C:\Users\Nigel\AppData\Local\Torch\Application\torch.exe

(Torch Media Inc.) C:\Users\Nigel\AppData\Local\Torch\Application\torch.exe

(Torch Media Inc.) C:\Users\Nigel\AppData\Local\Torch\Application\torch.exe

(Torch Media Inc.) C:\Users\Nigel\AppData\Local\Torch\Application\torch.exe

(Torch Media Inc.) C:\Users\Nigel\AppData\Local\Torch\Application\torch.exe

(Torch Media Inc.) C:\Users\Nigel\AppData\Local\Torch\Application\torch.exe

(Torch Media Inc.) C:\Users\Nigel\AppData\Local\Torch\Application\torch.exe

(Torch Media Inc.) C:\Users\Nigel\AppData\Local\Torch\Application\torch.exe

(Torch Media Inc.) C:\Users\Nigel\AppData\Local\Torch\Application\torch.exe

 

 

==================== Registry (Whitelisted) ==================

 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

 

HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1331288 2014-08-22] (Microsoft Corporation)

HKLM\...\Policies\Explorer: [NoSharedDocuments] 0

HKLM\...\Policies\Explorer: [NoDevMgrUpdate] 0

HKLM\...\Policies\Explorer: [NoSetTaskbar] 0

HKLM\...\Policies\Explorer: [NoDeletePrinter] 0

HKLM\...\Policies\Explorer: [NoDFSTab] 0

HKLM\...\Policies\Explorer: [NoChangeStartMenu] 0

HKLM\...\Policies\Explorer: [NoEncryptOnMove] 0

HKLM\...\Policies\Explorer: [NoRunasInstallPrompt] 0

HKLM\...\Policies\Explorer: [NoResolveSearch] 0

HKLM\...\Policies\Explorer: [NoHardwareTab] 0

HKLM\...\Policies\Explorer: [NoStartMenuSubFolders] 0

HKU\S-1-5-19\...\Policies\Explorer: [NoFolderOptions] 0

HKU\S-1-5-19\...\Policies\Explorer: [NoViewOnDrive] 0

HKU\S-1-5-19\...\Policies\Explorer: [NoControlPanel] 0

HKU\S-1-5-19\...\Policies\Explorer: [DisableLocalMachineRun] 0

HKU\S-1-5-19\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0

HKU\S-1-5-19\...\Policies\Explorer: [DisableCurrentUserRun] 0

HKU\S-1-5-19\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0

HKU\S-1-5-19\...\Policies\Explorer: [NoViewContextMenu] 0

HKU\S-1-5-19\...\Policies\Explorer: [NoShellSearchButton] 0

HKU\S-1-5-19\...\Policies\Explorer: [NoFind] 0

HKU\S-1-5-19\...\Policies\Explorer: [NoFile] 0

HKU\S-1-5-19\...\Policies\Explorer: [HideClock] 0

HKU\S-1-5-19\...\Policies\Explorer: [NoTrayContextMenu] 0

HKU\S-1-5-19\...\Policies\Explorer: [NoTrayItemsDisplay] 0

HKU\S-1-5-19\...\Policies\Explorer: [NoSetFolders] 0

HKU\S-1-5-19\...\Policies\Explorer: [NoDevMgrUpdate] 0

HKU\S-1-5-19\...\Policies\Explorer: [NoSetTaskbar] 0

HKU\S-1-5-19\...\Policies\Explorer: [NoDeletePrinter] 0

HKU\S-1-5-19\...\Policies\Explorer: [NoDFSTab] 0

HKU\S-1-5-19\...\Policies\Explorer: [NoChangeStartMenu] 0

HKU\S-1-5-19\...\Policies\Explorer: [NoLogoff] 0

HKU\S-1-5-19\...\Policies\Explorer: [NoWindowsUpdate] 0

HKU\S-1-5-19\...\Policies\Explorer: [NoEncryptOnMove] 0

HKU\S-1-5-19\...\Policies\Explorer: [NoRunasInstallPrompt] 0

HKU\S-1-5-19\...\Policies\Explorer: [NoResolveSearch] 0

HKU\S-1-5-19\...\Policies\Explorer: [NoSaveSettings] 0

HKU\S-1-5-19\...\Policies\Explorer: [NoStartMenuSubFolders] 0

HKU\S-1-5-20\...\Policies\Explorer: [NoFolderOptions] 0

HKU\S-1-5-20\...\Policies\Explorer: [NoViewOnDrive] 0

HKU\S-1-5-20\...\Policies\Explorer: [NoControlPanel] 0

HKU\S-1-5-20\...\Policies\Explorer: [DisableLocalMachineRun] 0

HKU\S-1-5-20\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0

HKU\S-1-5-20\...\Policies\Explorer: [DisableCurrentUserRun] 0

HKU\S-1-5-20\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0

HKU\S-1-5-20\...\Policies\Explorer: [NoViewContextMenu] 0

HKU\S-1-5-20\...\Policies\Explorer: [NoShellSearchButton] 0

HKU\S-1-5-20\...\Policies\Explorer: [NoFind] 0

HKU\S-1-5-20\...\Policies\Explorer: [NoFile] 0

HKU\S-1-5-20\...\Policies\Explorer: [HideClock] 0

HKU\S-1-5-20\...\Policies\Explorer: [NoTrayContextMenu] 0

HKU\S-1-5-20\...\Policies\Explorer: [NoTrayItemsDisplay] 0

HKU\S-1-5-20\...\Policies\Explorer: [NoSetFolders] 0

HKU\S-1-5-20\...\Policies\Explorer: [NoDevMgrUpdate] 0

HKU\S-1-5-20\...\Policies\Explorer: [NoSetTaskbar] 0

HKU\S-1-5-20\...\Policies\Explorer: [NoDeletePrinter] 0

HKU\S-1-5-20\...\Policies\Explorer: [NoDFSTab] 0

HKU\S-1-5-20\...\Policies\Explorer: [NoChangeStartMenu] 0

HKU\S-1-5-20\...\Policies\Explorer: [NoLogoff] 0

HKU\S-1-5-20\...\Policies\Explorer: [NoWindowsUpdate] 0

HKU\S-1-5-20\...\Policies\Explorer: [NoEncryptOnMove] 0

HKU\S-1-5-20\...\Policies\Explorer: [NoRunasInstallPrompt] 0

HKU\S-1-5-20\...\Policies\Explorer: [NoResolveSearch] 0

HKU\S-1-5-20\...\Policies\Explorer: [NoSaveSettings] 0

HKU\S-1-5-20\...\Policies\Explorer: [NoStartMenuSubFolders] 0

HKU\S-1-5-21-425073729-1472267466-4260431720-1000\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [43816 2014-08-08] (Apple Inc.)

HKU\S-1-5-21-425073729-1472267466-4260431720-1000\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [43816 2014-08-14] (Apple Inc.)

HKU\S-1-5-21-425073729-1472267466-4260431720-1000\...\Run: [iCloudDrive] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe [43816 2014-08-15] (Apple Inc.)

HKU\S-1-5-21-425073729-1472267466-4260431720-1000\...\Policies\Explorer: [NoThumbnailCache] 1

HKU\S-1-5-21-425073729-1472267466-4260431720-1000\...\Policies\Explorer: [NoInstrumentation] 0

HKU\S-1-5-21-425073729-1472267466-4260431720-1000\...\Policies\Explorer: [NoDevMgrUpdate] 0

HKU\S-1-5-21-425073729-1472267466-4260431720-1000\...\Policies\Explorer: [NoSetTaskbar] 0

HKU\S-1-5-21-425073729-1472267466-4260431720-1000\...\Policies\Explorer: [NoDeletePrinter] 0

HKU\S-1-5-21-425073729-1472267466-4260431720-1000\...\Policies\Explorer: [NoDFSTab] 0

HKU\S-1-5-21-425073729-1472267466-4260431720-1000\...\Policies\Explorer: [NoChangeStartMenu] 0

HKU\S-1-5-21-425073729-1472267466-4260431720-1000\...\Policies\Explorer: [NoEncryptOnMove] 0

HKU\S-1-5-21-425073729-1472267466-4260431720-1000\...\Policies\Explorer: [NoRunasInstallPrompt] 0

HKU\S-1-5-21-425073729-1472267466-4260431720-1000\...\Policies\Explorer: [NoResolveSearch] 0

HKU\S-1-5-21-425073729-1472267466-4260431720-1000\...\Policies\Explorer: [NoHardwareTab] 0

HKU\S-1-5-21-425073729-1472267466-4260431720-1000\...\Policies\Explorer: [NoStartMenuSubFolders] 0

HKU\S-1-5-21-425073729-1472267466-4260431720-1000\...\Policies\Explorer: [NoInternetOpenWith] 0

HKU\S-1-5-21-425073729-1472267466-4260431720-1000\...\Policies\Explorer: [NoInternetIcon] 0

HKU\S-1-5-18\...\Run: [Advanced SystemCare Ultimate] => "C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\ASCTray.exe" /AutoStart

HKU\S-1-5-18\...\Policies\Explorer: [DisableLocalMachineRun] 0

HKU\S-1-5-18\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0

HKU\S-1-5-18\...\Policies\Explorer: [DisableCurrentUserRun] 0

HKU\S-1-5-18\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0

HKU\S-1-5-18\...\Policies\Explorer: [NoShellSearchButton] 0

HKU\S-1-5-18\...\Policies\Explorer: [NoFile] 0

HKU\S-1-5-18\...\Policies\Explorer: [HideClock] 0

HKU\S-1-5-18\...\Policies\Explorer: [NoTrayItemsDisplay] 0

HKU\S-1-5-18\...\Policies\Explorer: [NoSetFolders] 0

HKU\S-1-5-18\...\Policies\Explorer: [NoDevMgrUpdate] 0

HKU\S-1-5-18\...\Policies\Explorer: [NoSetTaskbar] 0

HKU\S-1-5-18\...\Policies\Explorer: [NoDeletePrinter] 0

HKU\S-1-5-18\...\Policies\Explorer: [NoDFSTab] 0

HKU\S-1-5-18\...\Policies\Explorer: [NoChangeStartMenu] 0

HKU\S-1-5-18\...\Policies\Explorer: [NoLogoff] 0

HKU\S-1-5-18\...\Policies\Explorer: [NoEncryptOnMove] 0

HKU\S-1-5-18\...\Policies\Explorer: [NoRunasInstallPrompt] 0

HKU\S-1-5-18\...\Policies\Explorer: [NoResolveSearch] 0

HKU\S-1-5-18\...\Policies\Explorer: [NoSaveSettings] 0

HKU\S-1-5-18\...\Policies\Explorer: [NoStartMenuSubFolders] 0

SecurityProviders: schannel.dll

ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll ()

ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll ()

ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll ()

GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

 

==================== Internet (Whitelisted) ====================

 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft...=ie&ar=iesearch

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft...=ie&ar=iesearch

SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 

BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)

BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM - Webroot Toolbar - {97ab88ef-346b-4179-a0b1-7445896547a5} -  No File

Toolbar: HKLM - IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} -  No File

Toolbar: HKLM-x32 - No Name - {97ab88ef-346b-4179-a0b1-7445896547a5} -  No File

Toolbar: HKLM-x32 - No Name - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} -  No File

Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.m...ash/swflash.cab

Winsock: Catalog5 01 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"

Winsock: Catalog5-x64 01 %SystemRoot%\System32\mswsock.dll [327168] (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt

Tcpip\Parameters: [DhcpNameServer] 192.168.1.254

 

FireFox:

========

FF ProfilePath: C:\Users\Nigel\AppData\Roaming\Mozilla\Firefox\Profiles\xxxk6g1a.default

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin: @java.com/DTPlugin,version=10.72.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.72.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE -> disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin: adobe.com/AdobeAAMDetect_x86_64 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()

FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)

FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)

FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)

FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF Plugin-x32: @real.com/nppl3260;version=17.0.2.206 -> c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprpplugin;version=17.0.2.206 -> c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll No File

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll No File

FF Plugin-x32: @videolan.org/vlc,version=2.0.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.0.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)

FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin -> C:\Users\Nigel\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)

FF Plugin HKCU: @talk.google.com/O1DPlugin -> C:\Users\Nigel\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)

FF Plugin HKCU: @tools.google.com/Google Update;version=3 -> C:\Users\Nigel\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll No File

FF Plugin HKCU: @tools.google.com/Google Update;version=9 -> C:\Users\Nigel\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll No File

FF user.js: detected! => C:\Users\Nigel\AppData\Roaming\Mozilla\Firefox\Profiles\xxxk6g1a.default\user.js

FF Plugin ProgramFiles/Appdata: C:\Users\Nigel\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)

FF Plugin ProgramFiles/Appdata: C:\Users\Nigel\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)

FF SearchPlugin: C:\Users\Nigel\AppData\Roaming\Mozilla\Firefox\Profiles\xxxk6g1a.default\searchplugins\EasyLife.xml

FF SearchPlugin: C:\Users\Nigel\AppData\Roaming\Mozilla\Firefox\Profiles\xxxk6g1a.default\searchplugins\safeguard-secure-search.xml

FF SearchPlugin: C:\Users\Nigel\AppData\Roaming\Mozilla\Firefox\Profiles\xxxk6g1a.default\searchplugins\Searchab.xml

FF SearchPlugin: C:\Users\Nigel\AppData\Roaming\Mozilla\Firefox\Profiles\xxxk6g1a.default\searchplugins\yahoo_ff.xml

FF Extension: Key Download - C:\Users\Nigel\AppData\Roaming\Mozilla\Firefox\Profiles\xxxk6g1a.default\Extensions\[email protected] [2013-03-01]

FF Extension: Ads Removal - C:\Users\Nigel\AppData\Roaming\Mozilla\Firefox\Profiles\xxxk6g1a.default\Extensions\[email protected] [2014-08-22]

FF Extension: TinyWallet - C:\Users\Nigel\AppData\Roaming\Mozilla\Firefox\Profiles\xxxk6g1a.default\Extensions\[email protected] [2014-10-12]

FF Extension: DictAddon - C:\Users\Nigel\AppData\Roaming\Mozilla\Firefox\Profiles\xxxk6g1a.default\Extensions\[email protected] [2013-11-24]

FF Extension: QuickShare Widget - C:\Users\Nigel\AppData\Roaming\Mozilla\Firefox\Profiles\xxxk6g1a.default\Extensions\{78f95c9b-16b5-4f71-a733-87632abd4c0c} [2013-08-13]

FF Extension: Universal Downloader - C:\Users\Nigel\AppData\Roaming\Mozilla\Firefox\Profiles\xxxk6g1a.default\Extensions\{9051303c-7e41-4311-a783-d6fe5ef2832d} [2014-10-12]

FF Extension: uTorrentControl_v6  - C:\Users\Nigel\AppData\Roaming\Mozilla\Firefox\Profiles\xxxk6g1a.default\Extensions\{96f454ea-9d38-474f-b504-56193e00c1a5} [2013-08-18]

FF Extension: HDvid Codec - C:\Users\Nigel\AppData\Roaming\Mozilla\Firefox\Profiles\xxxk6g1a.default\Extensions\[email protected] [2013-04-08]

FF Extension: PutLocker Downloader - C:\Users\Nigel\AppData\Roaming\Mozilla\Firefox\Profiles\xxxk6g1a.default\Extensions\[email protected] [2013-06-26]

FF Extension: Speed Analysis 2 - C:\Users\Nigel\AppData\Roaming\Mozilla\Firefox\Profiles\xxxk6g1a.default\Extensions\[email protected] [2014-01-16]

FF Extension: Adblock Plus - C:\Users\Nigel\AppData\Roaming\Mozilla\Firefox\Profiles\xxxk6g1a.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-03-01]

FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\[email protected] [2013-08-08]

FF Extension: WordOv - C:\Program Files (x86)\Mozilla Firefox\extensions\[email protected] [2013-10-19]

 

Chrome: 

=======

CHR dev: Chrome dev build detected! <======= ATTENTION

CHR Profile: C:\Users\Nigel\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Slides) - C:\Users\Nigel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-09-25]

CHR Extension: (Google Docs) - C:\Users\Nigel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-09-25]

CHR Extension: (Google Drive) - C:\Users\Nigel\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-09-25]

CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Nigel\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-25]

CHR Extension: (YouTube) - C:\Users\Nigel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-09-25]

CHR Extension: (Google Search) - C:\Users\Nigel\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-09-25]

CHR Extension: (Video downloader pro) - C:\Users\Nigel\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbjlfogfpagepnaojhfbdlhjhildeaem [2014-09-26]

CHR Extension: (Video Downloader professional) - C:\Users\Nigel\AppData\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2014-09-26]

CHR Extension: (Google Sheets) - C:\Users\Nigel\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-09-25]

CHR Extension: (Video Downloader) - C:\Users\Nigel\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnmpgleggfcndpeflbjhpjfckfmojnpo [2014-09-26]

CHR Extension: (Google Wallet) - C:\Users\Nigel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-09-25]

CHR Extension: (Gmail) - C:\Users\Nigel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-09-25]

 

==================== Services (Whitelisted) =================

 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

 

R2  AnviStartupTime; C:\Program Files (x86)\Anvisoft\Cloud System Booster\extentions\Toolbox\Startup Booster\StartupTimeSrv.exe [193256 2013-05-07] (Anvisoft)

R2 AnviCsbSvc; C:\Program Files (x86)\Anvisoft\Cloud System Booster\CSBSvc.exe [42680 2014-08-20] (Anvisoft)

S4 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [166408 2013-01-25] (Microsoft Corp.)

R2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393080 2012-12-05] (BlueStack Systems, Inc.)

S3 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384888 2012-12-05] (BlueStack Systems, Inc.)

R2 ftpsvc; C:\Windows\system32\inetsrv\ftpsvc.dll [350720 2012-06-01] (Microsoft Corporation)

R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2014-09-16] (NVIDIA Corporation)

R2 IISADMIN; C:\Windows\system32\inetsrv\inetinfo.exe [15872 2010-11-20] (Microsoft Corporation)

S4 IMFservice; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [342336 2014-05-15] (IObit)

R2 iprip; C:\Windows\System32\iprip.dll [35328 2009-07-13] (Microsoft Corporation)

S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2151232 2013-12-02] (IObit)

R2 LPDSVC; C:\Windows\system32\lpdsvc.dll [45568 2009-07-13] (Microsoft Corporation)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-10-01] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [968504 2014-10-01] (Malwarebytes Corporation)

R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2014-08-22] (Microsoft Corporation)

R3 MSMQ; C:\Windows\system32\mqsvc.exe [9216 2009-07-13] (Microsoft Corporation)

S3 MSMQTriggers; C:\Windows\system32\mqtgsvc.exe [189440 2010-11-20] (Microsoft Corporation)

R2 NfsClnt; C:\Windows\system32\nfsclnt.exe [65536 2010-11-20] (Microsoft Corporation)

S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [368624 2014-08-22] (Microsoft Corporation)

R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912 2014-09-16] (NVIDIA Corporation)

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19439944 2014-09-16] (NVIDIA Corporation)

S4 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [38608 2012-11-29] ()

S4 RealPlayer Desktop Service; c:\program files (x86)\real\realplayer\RPDS\Bin\rpdsvc.exe [1418336 2013-12-10] (RealNetworks, Inc.)

S4 RealPlayerUpdateSvc; C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe [29320 2013-10-25] ()

R2 simptcp; C:\Windows\SysWOW64\tcpsvcs.exe [9216 2009-07-13] (Microsoft Corporation)

R2 SNMP; C:\Windows\System32\snmp.exe [49664 2010-11-20] (Microsoft Corporation)

R2 SNMP; C:\Windows\SysWOW64\snmp.exe [47616 2010-11-20] (Microsoft Corporation)

S4 TlntSvr; C:\Windows\System32\tlntsvr.exe [81920 2009-07-13] (Microsoft Corporation)

R2 TorchCrashHandler; C:\Users\Nigel\AppData\Local\Torch\Update\TorchCrashHandler.exe [1217032 2014-08-27] (TorchMedia Inc.) <==== ATTENTION

R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-20] (Microsoft Corporation)

S3 WMSVC; C:\Windows\system32\inetsrv\wmsvc.exe [10752 2009-07-13] (Microsoft Corporation)

S3 avgfws; No ImagePath

S3 AVGIDSAgent; No ImagePath

S3 avgwd; No ImagePath

S3 hshld; No ImagePath

S3 HssTrayService; No ImagePath

S3 HssWd; No ImagePath

 

==================== Drivers (Whitelisted) ====================

 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

 

R0 amdide64; C:\Windows\System32\DRIVERS\amdide64.sys [11944 2012-12-03] (Advanced Micro Devices Inc.)

S0 amdkmafd; C:\Windows\System32\DRIVERS\amdkmafd.sys [21160 2013-06-06] (Advanced Micro Devices, Inc.)

R0 amdkmpfd; C:\Windows\System32\DRIVERS\amdkmpfd.sys [36608 2013-12-11] (Advanced Micro Devices, Inc.)

S1 AntiLog32; No ImagePath

S3 AtiHDAudioService; C:\Windows\System32\drivers\AtihdW76.sys [96768 2013-05-25] (Advanced Micro Devices) [File not signed]

S4 Avgfwfd; No ImagePath

R3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [170712 2013-10-28] (Broadcom Corporation.)

R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [71032 2012-12-05] (BlueStack Systems)

S3 BTATH_LWFLT; C:\Windows\System32\DRIVERS\btath_lwflt.sys [77464 2013-05-31] (Qualcomm Atheros)

R3 btmaudio; C:\Windows\System32\drivers\btmaud.sys [88376 2013-03-18] (Motorola Solutions, Inc.)

R3 btmaux; C:\Windows\System32\DRIVERS\btmaux.sys [132920 2013-04-23] (Motorola Solutions, Inc.)

S4 btwaudio; No ImagePath

S3 btwavdt; No ImagePath

R3 BTWDPAN; C:\Windows\System32\DRIVERS\btwdpan.sys [84008 2010-11-15] (Broadcom Corporation.)

S4 btwl2cap; No ImagePath

S4 btwrchid; No ImagePath

S3 cxpl_mhd; C:\Windows\System32\drivers\y_cx88x.sys [714752 2009-06-22] (Conexant Systems, Inc.) [File not signed]

S3 FileMonitor; C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [23048 2013-03-23] (IObit)

S3 gmPS2up; C:\Windows\System32\DRIVERS\gmPS2up.sys [9216 2013-06-01] () [File not signed]

R1 HBtnKey; C:\Windows\System32\DRIVERS\wstbtndb.sys [9856 2007-09-14] (Lenovo)

S3 JmUsbCcgp; C:\Windows\System32\DRIVERS\jmccgp.sys [17136 2009-07-28] (JMicron Technology Corp.)

R3 johci; C:\Windows\System32\DRIVERS\johci.sys [26208 2012-07-16] (JMicron Technology Corp.)

S3 massfilter_hs; C:\Windows\System32\DRIVERS\massfilter_hs.sys [18456 2012-01-10] (HandSet Incorporated)

R1 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [93400 2014-10-01] (Malwarebytes Corporation)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-10-01] (Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2014-10-20] (Malwarebytes Corporation)

R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-10-01] (Malwarebytes Corporation)

R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [269008 2014-07-17] (Microsoft Corporation)

R3 MQAC; C:\Windows\System32\drivers\mqac.sys [189440 2009-07-13] (Microsoft Corporation)

R3 NfsRdr; C:\Windows\System32\drivers\nfsrdr.sys [246272 2010-11-20] (Microsoft Corporation)

S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [125584 2014-07-17] (Microsoft Corporation)

R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19272 2014-09-16] (NVIDIA Corporation)

R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38048 2014-09-04] (NVIDIA Corporation)

S3 PsxDrv; C:\Windows\System32\drivers\psxdrv.sys [10240 2009-07-13] (Microsoft Corporation)

S3 RegFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [34848 2013-11-19] (IObit.com)

R3 RpcXdr; C:\Windows\System32\drivers\rpcxdr.sys [104960 2010-11-20] (Microsoft Corporation)

S1 SASDIFSV; No ImagePath

S1 SASKUTIL; No ImagePath

R3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [40712 2012-11-01] (Anchorfree Inc.)

S3 UrlFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [23016 2013-11-19] (IObit.com)

S4 VGPU; No ImagePath

S4 zghsdiag; No ImagePath

S4 zghsmdm; No ImagePath

S4 zghsnmea; No ImagePath

S3 cpuz134; \??\C:\Users\Nigel\AppData\Local\Temp\cpuz134\cpuz134_x64.sys [X]

U0 helpsvc; No ImagePath

U2 ImapiService; No ImagePath

U2 Irmon; No ImagePath

S2 sbapifs; system32\DRIVERS\sbapifs.sys [X]

U0 SR; No ImagePath

U2 srservice; No ImagePath

U0 UPS; No ImagePath

U2 WZCSVC; No ImagePath

 

==================== NetSvcs (Whitelisted) ===================

 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

 

 

==================== One Month Created Files and Folders ========

 

(If an entry is included in the fixlist, the file\folder will be moved.)

 

2014-10-20 14:03 - 2014-10-20 14:05 - 00033191 _____ () C:\Users\Nigel\Desktop\FRST.txt

2014-10-20 14:02 - 2014-10-20 09:07 - 02111488 _____ (Farbar) C:\Users\Nigel\Desktop\FRST64.exe

2014-10-20 13:38 - 2014-10-20 13:39 - 00000000 ____D () C:\Users\Nigel\AppData\Local\Deployment

2014-10-20 13:24 - 2014-10-20 13:22 - 00319912 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe

2014-10-20 13:23 - 2014-10-20 13:23 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll

2014-10-20 13:23 - 2014-10-20 13:22 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe

2014-10-20 13:23 - 2014-10-20 13:22 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe

2014-10-20 13:22 - 2014-10-20 13:22 - 00000000 ____D () C:\Program Files\Java

2014-10-20 12:42 - 2014-10-20 12:42 - 31029672 _____ (Oracle Corporation) C:\Users\Nigel\Downloads\jre-7u71-windows-x64 (1).exe

2014-10-20 12:41 - 2014-10-20 12:42 - 31029672 _____ (Oracle Corporation) C:\Users\Nigel\Downloads\jre-7u71-windows-x64.exe

2014-10-20 12:41 - 2014-10-20 12:41 - 31036328 _____ (Oracle Corporation) C:\Users\Nigel\Downloads\jre-7u72-windows-x64.exe

2014-10-20 12:40 - 2014-10-20 12:41 - 43735040 _____ () C:\Users\Nigel\Downloads\jre-7u71-windows-x64.gz

2014-10-20 12:23 - 2014-10-20 12:24 - 00638888 _____ (Oracle Corporation) C:\Users\Nigel\Downloads\chromeinstall-8u25 (2).exe

2014-10-20 12:21 - 2014-10-20 12:21 - 00638888 _____ (Oracle Corporation) C:\Users\Nigel\Downloads\chromeinstall-8u25 (1).exe

2014-10-20 12:18 - 2014-10-20 12:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wajam

2014-10-20 12:17 - 2014-10-20 12:18 - 00000000 ____D () C:\Program Files (x86)\Wajam

2014-10-20 12:07 - 2014-10-20 12:07 - 00638888 _____ (Oracle Corporation) C:\Users\Nigel\Downloads\chromeinstall-8u25.exe

2014-10-19 16:39 - 2014-10-19 16:39 - 00000000 ____D () C:\MGADiagToolOutput

2014-10-19 16:38 - 2014-10-19 16:38 - 00000000 ____D () C:\ProgramData\Office Genuine Advantage

2014-10-19 16:26 - 2014-10-20 13:47 - 00000336 _____ () C:\Windows\setupact.log

2014-10-19 16:26 - 2014-10-19 16:26 - 00000000 _____ () C:\Windows\setuperr.log

2014-10-19 16:25 - 2014-10-19 16:29 - 04968456 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-10-19 16:25 - 2014-10-19 16:25 - 00007350 _____ () C:\Windows\PFRO.log

2014-10-19 12:09 - 2014-10-19 12:40 - 00000967 _____ () C:\Users\Nigel\umbrella0.log

2014-10-19 11:49 - 2014-10-19 16:29 - 00110136 _____ () C:\Users\Nigel\AppData\Local\GDIPFONTCACHEV1.DAT

2014-10-19 11:37 - 2014-10-19 11:51 - 00000000 ____D () C:\Users\Nigel\Downloads\iPhone Related

2014-10-19 05:57 - 2014-10-20 09:18 - 00000000 ____D () C:\Users\Nigel\Downloads\Geeks_To_Go_Help

2014-10-19 01:18 - 2014-10-19 01:18 - 00000000 ____D () C:\Users\Nigel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games

2014-10-19 00:20 - 2014-10-20 14:03 - 00000000 ____D () C:\FRST

2014-10-18 23:10 - 2014-10-20 13:48 - 00000000 ___RD () C:\Users\Nigel\iCloudDrive

2014-10-18 23:10 - 2014-10-18 23:10 - 00000000 ____D () C:\Users\Nigel\AppData\Local\Apple Inc

2014-10-17 13:50 - 2014-10-17 13:51 - 00001680 _____ () C:\Windows\system32\Drivers\kgpcpy.cfg

2014-10-17 13:50 - 2014-10-17 13:50 - 00000384 _____ () C:\Windows\SysWOW64\Drivers\kgpfr2.cfg

2014-10-17 12:41 - 2014-10-17 15:18 - 00001088 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-10-16 19:02 - 2014-10-16 19:02 - 00004274 _____ () C:\Windows\System32\Tasks\ReimageUpdater

2014-10-16 00:15 - 2014-10-16 00:19 - 00003204 _____ () C:\Windows\System32\Tasks\YourFileDownloader Installer Starter

2014-10-15 15:50 - 2014-10-15 15:50 - 00006948 _____ () C:\Windows\system32\ScanResults.xml

2014-10-15 15:41 - 2014-10-15 15:41 - 00000464 _____ () C:\Windows\system32\ScannerSettings

2014-10-14 19:02 - 2014-10-14 20:20 - 00000585 _____ () C:\Windows\w32dasm8.ini

2014-10-14 19:02 - 2014-10-14 19:02 - 00003218 _____ () C:\Windows\System32\Tasks\{E593581A-1EAB-4FD9-B360-D63A08BB6A7B}

2014-10-14 18:06 - 2014-10-14 18:06 - 00000000 ____D () C:\Program Files (x86)\Microsoft ASP.NET

2014-10-14 17:19 - 2014-09-04 01:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll

2014-10-14 17:19 - 2014-09-04 01:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll

2014-10-14 17:18 - 2014-08-18 23:11 - 00693176 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi

2014-10-14 17:18 - 2014-08-18 23:10 - 00616352 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi

2014-10-14 17:18 - 2014-08-18 23:08 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2014-10-14 17:18 - 2014-08-18 23:08 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll

2014-10-14 17:18 - 2014-08-18 23:07 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2014-10-14 17:18 - 2014-08-18 23:07 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe

2014-10-14 17:18 - 2014-08-18 23:07 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll

2014-10-14 17:18 - 2014-08-18 23:07 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll

2014-10-14 17:18 - 2014-08-18 22:41 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll

2014-10-14 17:18 - 2014-08-18 22:06 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys

2014-10-14 17:18 - 2014-07-06 22:07 - 14632960 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll

2014-10-14 17:18 - 2014-07-06 22:07 - 00782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll

2014-10-14 17:18 - 2014-07-06 22:07 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll

2014-10-14 17:18 - 2014-07-06 22:06 - 05551032 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2014-10-14 17:18 - 2014-07-06 22:06 - 04120576 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll

2014-10-14 17:18 - 2014-07-06 22:06 - 01574400 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll

2014-10-14 17:18 - 2014-07-06 22:06 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2014-10-14 17:18 - 2014-07-06 22:06 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll

2014-10-14 17:18 - 2014-07-06 22:06 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll

2014-10-14 17:18 - 2014-07-06 22:06 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll

2014-10-14 17:18 - 2014-07-06 22:06 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll

2014-10-14 17:18 - 2014-07-06 22:06 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll

2014-10-14 17:18 - 2014-07-06 22:06 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll

2014-10-14 17:18 - 2014-07-06 22:06 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll

2014-10-14 17:18 - 2014-07-06 22:06 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll

2014-10-14 17:18 - 2014-07-06 22:06 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll

2014-10-14 17:18 - 2014-07-06 22:06 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll

2014-10-14 17:18 - 2014-07-06 22:06 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll

2014-10-14 17:18 - 2014-07-06 22:06 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll

2014-10-14 17:18 - 2014-07-06 22:06 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll

2014-10-14 17:18 - 2014-07-06 22:06 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll

2014-10-14 17:18 - 2014-07-06 22:06 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll

2014-10-14 17:18 - 2014-07-06 22:06 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll

2014-10-14 17:18 - 2014-07-06 22:06 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll

2014-10-14 17:18 - 2014-07-06 22:06 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe

2014-10-14 17:18 - 2014-07-06 22:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe

2014-10-14 17:18 - 2014-07-06 22:05 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe

2014-10-14 17:18 - 2014-07-06 21:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys

2014-10-14 17:18 - 2014-07-06 21:40 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll

2014-10-14 17:18 - 2014-07-06 21:40 - 03208704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll

2014-10-14 17:18 - 2014-07-06 21:40 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll

2014-10-14 17:18 - 2014-07-06 21:40 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll

2014-10-14 17:18 - 2014-07-06 21:40 - 01005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll

2014-10-14 17:18 - 2014-07-06 21:40 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll

2014-10-14 17:18 - 2014-07-06 21:40 - 00744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll

2014-10-14 17:18 - 2014-07-06 21:40 - 00617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll

2014-10-14 17:18 - 2014-07-06 21:40 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll

2014-10-14 17:18 - 2014-07-06 21:40 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll

2014-10-14 17:18 - 2014-07-06 21:40 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll

2014-10-14 17:18 - 2014-07-06 21:40 - 00406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll

2014-10-14 17:18 - 2014-07-06 21:40 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll

2014-10-14 17:18 - 2014-07-06 21:40 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll

2014-10-14 17:18 - 2014-07-06 21:40 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll

2014-10-14 17:18 - 2014-07-06 21:40 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll

2014-10-14 17:18 - 2014-07-06 21:40 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll

2014-10-14 17:18 - 2014-07-06 21:40 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll

2014-10-14 17:18 - 2014-07-06 21:40 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll

2014-10-14 17:18 - 2014-07-06 21:40 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll

2014-10-14 17:18 - 2014-07-06 21:39 - 03970488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2014-10-14 17:18 - 2014-07-06 21:39 - 03914680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2014-10-14 17:18 - 2014-07-06 21:39 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe

2014-10-14 17:18 - 2014-07-06 21:39 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe

2014-10-14 17:18 - 2014-06-27 20:21 - 00619056 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe

2014-10-14 17:18 - 2014-06-27 20:21 - 00532176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe

2014-10-14 17:18 - 2014-06-27 20:21 - 00457400 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll

2014-10-14 17:18 - 2014-06-18 18:23 - 01943696 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll

2014-10-14 17:18 - 2014-06-18 18:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll

2014-10-14 17:18 - 2014-06-18 18:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll

2014-10-14 17:18 - 2014-06-18 18:23 - 00156312 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll

2014-10-14 17:18 - 2014-06-18 18:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll

2014-10-14 17:18 - 2014-06-18 18:23 - 00073880 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll

2014-10-14 17:17 - 2014-08-18 23:08 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2014-10-14 17:17 - 2014-08-18 23:07 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe

2014-10-14 17:17 - 2014-08-18 22:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

2014-10-14 17:17 - 2014-07-06 22:06 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll

2014-10-14 17:17 - 2014-07-06 22:06 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx

2014-10-14 17:17 - 2014-07-06 22:06 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll

2014-10-14 17:17 - 2014-07-06 22:05 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL

2014-10-14 17:17 - 2014-07-06 22:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll

2014-10-14 17:17 - 2014-07-06 21:40 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll

2014-10-14 17:17 - 2014-07-06 21:40 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx

2014-10-14 17:17 - 2014-07-06 21:40 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll

2014-10-14 17:17 - 2014-07-06 21:39 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL

2014-10-14 17:17 - 2014-07-06 21:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll

2014-10-14 17:16 - 2014-09-17 22:00 - 03241472 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll

2014-10-14 17:16 - 2014-09-17 21:32 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll

2014-10-14 17:14 - 2014-10-06 22:54 - 00378552 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-10-14 17:14 - 2014-10-06 22:04 - 00331448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-10-14 17:14 - 2014-09-25 18:50 - 13619200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-10-14 17:14 - 2014-09-25 18:46 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-10-14 17:14 - 2014-09-25 18:46 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-10-14 17:14 - 2014-09-25 18:46 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-10-14 17:14 - 2014-09-25 18:43 - 11807232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-10-14 17:14 - 2014-09-25 18:32 - 02017280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-10-14 17:14 - 2014-09-25 18:31 - 02108416 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-10-14 17:14 - 2014-09-18 22:25 - 23631360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-10-14 17:14 - 2014-09-18 21:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-10-14 17:14 - 2014-09-18 21:55 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-10-14 17:14 - 2014-09-18 21:44 - 17484800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-10-14 17:14 - 2014-09-18 21:41 - 02796032 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-10-14 17:14 - 2014-09-18 21:40 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-10-14 17:14 - 2014-09-18 21:40 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-10-14 17:14 - 2014-09-18 21:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-10-14 17:14 - 2014-09-18 21:38 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-10-14 17:14 - 2014-09-18 21:36 - 05829632 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-10-14 17:14 - 2014-09-18 21:31 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-10-14 17:14 - 2014-09-18 21:30 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-10-14 17:14 - 2014-09-18 21:27 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-10-14 17:14 - 2014-09-18 21:26 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-10-14 17:14 - 2014-09-18 21:25 - 04201472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-10-14 17:14 - 2014-09-18 21:25 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-10-14 17:14 - 2014-09-18 21:25 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-10-14 17:14 - 2014-09-18 21:18 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-10-14 17:14 - 2014-09-18 21:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-10-14 17:14 - 2014-09-18 21:14 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-10-14 17:14 - 2014-09-18 21:06 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-10-14 17:14 - 2014-09-18 21:02 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-10-14 17:14 - 2014-09-18 21:01 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-10-14 17:14 - 2014-09-18 21:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-10-14 17:14 - 2014-09-18 21:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-10-14 17:14 - 2014-09-18 21:00 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-10-14 17:14 - 2014-09-18 20:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-10-14 17:14 - 2014-09-18 20:58 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-10-14 17:14 - 2014-09-18 20:55 - 02187264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-10-14 17:14 - 2014-09-18 20:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-10-14 17:14 - 2014-09-18 20:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-10-14 17:14 - 2014-09-18 20:51 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-10-14 17:14 - 2014-09-18 20:50 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-10-14 17:14 - 2014-09-18 20:49 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-10-14 17:14 - 2014-09-18 20:42 - 00731136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-10-14 17:14 - 2014-09-18 20:42 - 00710656 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-10-14 17:14 - 2014-09-18 20:40 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2014-10-14 17:14 - 2014-09-18 20:36 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-10-14 17:14 - 2014-09-18 20:33 - 02309632 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-10-14 17:14 - 2014-09-18 20:32 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-10-14 17:14 - 2014-09-18 20:20 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-10-14 17:14 - 2014-09-18 20:18 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2014-10-14 17:14 - 2014-09-18 20:14 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-10-14 17:14 - 2014-09-18 19:59 - 01810944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-10-14 17:14 - 2014-09-18 19:59 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-10-14 17:14 - 2014-09-18 19:53 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-10-14 17:14 - 2014-09-18 19:52 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-10-14 17:14 - 2014-09-12 21:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll

2014-10-14 17:14 - 2014-09-12 21:40 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll

2014-10-14 17:14 - 2014-07-16 22:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll

2014-10-14 17:14 - 2014-07-16 22:07 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe

2014-10-14 17:14 - 2014-07-16 22:07 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll

2014-10-14 17:14 - 2014-07-16 22:07 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll

2014-10-14 17:14 - 2014-07-16 22:07 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2014-10-14 17:14 - 2014-07-16 22:07 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2014-10-14 17:14 - 2014-07-16 21:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll

2014-10-14 17:14 - 2014-07-16 21:39 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2014-10-14 17:14 - 2014-07-16 21:39 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2014-10-14 17:14 - 2014-07-16 21:21 - 00212480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys

2014-10-14 17:14 - 2014-07-16 21:21 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys

2014-10-14 17:12 - 2014-10-09 22:05 - 00507392 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-10-14 17:12 - 2014-10-09 22:05 - 00276480 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll

2014-10-14 17:12 - 2014-10-09 22:00 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-10-14 17:12 - 2014-08-28 22:07 - 03179520 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll

2014-10-14 17:10 - 2014-09-28 20:58 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-10-14 17:10 - 2014-09-04 22:11 - 06584320 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll

2014-10-14 17:10 - 2014-09-04 21:52 - 05703168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll

2014-10-12 14:48 - 2014-10-12 14:48 - 00000000 ____D () C:\Users\Nigel\Documents\Optimizer Pro

2014-10-12 14:41 - 2014-10-12 18:46 - 00000000 ____D () C:\Program Files (x86)\globalUpdate

2014-10-12 14:41 - 2014-10-12 14:41 - 00000000 ____D () C:\Users\Nigel\AppData\Local\globalUpdate

2014-10-12 00:14 - 2014-10-12 00:14 - 00000000 ____D () C:\Users\Nigel\Downloads\Foot_Farm

2014-10-11 17:52 - 2014-10-17 08:42 - 00000165 _____ () C:\Windows\Reimage.ini

2014-10-10 10:45 - 2014-10-10 10:46 - 191527745 _____ () C:\Users\Nigel\Downloads\Armageddon.mp4

2014-10-10 10:42 - 2014-10-10 10:46 - 00000000 ____D () C:\ProgramData\VideoDownloaderUltimateWinApp

2014-10-10 10:42 - 2014-10-10 10:42 - 00000934 _____ () C:\Users\Nigel\Desktop\Video Downloader Ultimate.lnk

2014-10-04 11:31 - 2014-10-04 11:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud

2014-10-01 07:11 - 2014-09-24 22:08 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll

2014-10-01 07:11 - 2014-09-24 21:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll

2014-09-29 11:51 - 2014-09-29 11:51 - 00000000 ____D () C:\Users\Nigel\AppData\Local\DDMSettings

2014-09-26 01:13 - 2014-09-26 01:35 - 00000000 ____D () C:\Users\Nigel\AppData\Local\pangu

2014-09-24 12:44 - 2014-09-04 15:14 - 00038048 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys

2014-09-24 12:44 - 2014-09-04 15:14 - 00032416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll

2014-09-24 07:28 - 2014-09-09 18:11 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2014-09-24 07:28 - 2014-09-09 17:47 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll

2014-09-22 12:28 - 2014-09-22 12:28 - 00000823 _____ () C:\Users\Nigel\Desktop\µTorrent.lnk

2014-09-22 12:22 - 2014-10-19 17:56 - 00000000 ____D () C:\Users\Nigel\AppData\Roaming\uTorrent

2014-09-22 12:14 - 2014-10-20 12:14 - 00073728 _____ () C:\Windows\SysWOW64\tasks.dll

2014-09-22 06:05 - 2014-09-22 06:05 - 00003350 _____ () C:\Windows\System32\Tasks\Eakona Update

2014-09-22 05:33 - 2014-09-22 05:35 - 00000000 ____D () C:\ProgramData\7326f70cff8ae1e5

2014-09-22 05:32 - 2014-10-17 13:00 - 00000000 ____D () C:\Users\Administrator

2014-09-22 05:32 - 2014-09-22 05:32 - 00000000 ____D () C:\Users\Nigel\AppData\Local\Comodo

2014-09-22 05:32 - 2014-09-22 05:32 - 00000000 ____D () C:\Users\Nigel\AppData\Local\Chromatic Browser

2014-09-22 05:32 - 2014-09-22 05:32 - 00000000 ____D () C:\Users\Guest\AppData\Local\Torch

2014-09-22 05:32 - 2014-09-22 05:32 - 00000000 ____D () C:\Users\Guest\AppData\Local\Comodo

2014-09-22 05:32 - 2014-09-22 05:32 - 00000000 ____D () C:\Users\Guest\AppData\Local\Chromatic Browser

2014-09-22 05:32 - 2014-09-22 05:32 - 00000000 ____D () C:\Users\fbwuser\AppData\Local\Torch

2014-09-22 05:32 - 2014-09-22 05:32 - 00000000 ____D () C:\Users\fbwuser\AppData\Local\Google

2014-09-22 05:32 - 2014-09-22 05:32 - 00000000 ____D () C:\Users\fbwuser\AppData\Local\Comodo

2014-09-22 05:32 - 2014-09-22 05:32 - 00000000 ____D () C:\Users\fbwuser\AppData\Local\Chromatic Browser

2014-09-22 05:32 - 2014-09-22 05:32 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Torch

2014-09-22 05:32 - 2014-09-22 05:32 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google

2014-09-22 05:32 - 2014-09-22 05:32 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo

2014-09-22 05:32 - 2014-09-22 05:32 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Chromatic Browser

2014-09-22 05:17 - 2014-09-22 05:20 - 00450352 _____ (Microsoft Corporation) C:\Users\Nigel\Downloads\FixitCenter_Run.exe

2014-09-20 12:50 - 2014-10-20 13:17 - 00002956 _____ () C:\Windows\System32\Tasks\ReclaimerUpdateXML_Nigel

2014-09-20 12:50 - 2014-10-20 13:17 - 00000366 _____ () C:\Windows\Tasks\ReclaimerUpdateXML_Nigel.job

2014-09-20 12:50 - 2014-10-19 00:04 - 00002960 _____ () C:\Windows\System32\Tasks\ReclaimerUpdateFiles_Nigel

2014-09-20 12:50 - 2014-10-19 00:04 - 00000370 _____ () C:\Windows\Tasks\ReclaimerUpdateFiles_Nigel.job

2014-09-20 12:50 - 2014-10-04 09:09 - 00000376 _____ () C:\Windows\Tasks\RNUpgradeHelperLogonPrompt_Nigel.job

2014-09-20 12:50 - 2014-10-04 08:45 - 00002666 _____ () C:\Windows\System32\Tasks\RNUpgradeHelperLogonPrompt_Nigel

2014-09-20 12:50 - 2014-09-20 12:50 - 00003612 _____ () C:\Windows\System32\Tasks\RNUpgradeHelperResumePrompt_Nigel

2014-09-20 10:17 - 2014-09-20 10:17 - 00003172 _____ () C:\Windows\System32\Tasks\Csb_IdleScan_Task

 

==================== One Month Modified Files and Folders =======

 

(If an entry is included in the fixlist, the file\folder will be moved.)

 

2014-10-20 14:00 - 2014-06-09 02:51 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-10-20 13:55 - 2009-07-14 00:45 - 00026768 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-10-20 13:55 - 2009-07-14 00:45 - 00026768 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-10-20 13:54 - 2013-02-21 01:01 - 01134437 _____ () C:\Windows\WindowsUpdate.log

2014-10-20 13:48 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\system32\inetsrv

2014-10-20 13:47 - 2014-05-17 10:54 - 00000000 ____D () C:\ProgramData\TorchCrashHandler

2014-10-20 13:46 - 2009-07-14 01:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-10-20 13:45 - 2013-03-19 17:06 - 00000000 ____D () C:\ProgramData\NVIDIA

2014-10-20 13:39 - 2013-09-29 15:40 - 00000908 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-425073729-1472267466-4260431720-1000UA.job

2014-10-20 13:38 - 2013-10-07 15:10 - 00000000 ____D () C:\Users\Nigel\AppData\Local\Apps\2.0

2014-10-20 13:38 - 2013-02-28 03:11 - 00000000 ____D () C:\Program Files (x86)\Google

2014-10-20 13:33 - 2013-07-13 02:52 - 00000000 ____D () C:\Users\Nigel\AppData\Local\CrashDumps

2014-10-20 13:33 - 2013-02-27 22:11 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-10-20 13:31 - 2013-02-28 03:11 - 00000896 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-10-20 12:29 - 2014-08-06 12:56 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-10-20 12:27 - 2013-09-30 13:24 - 00000000 ____D () C:\Program Files (x86)\Java

2014-10-20 12:06 - 2014-01-27 15:26 - 00000000 ____D () C:\ProgramData\Oracle

2014-10-20 02:00 - 2013-09-28 13:55 - 00000000 ____D () C:\Users\Nigel\AppData\Local\Adobe

2014-10-19 17:39 - 2013-09-29 15:40 - 00000856 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-425073729-1472267466-4260431720-1000Core.job

2014-10-19 16:25 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\AppCompat

2014-10-19 15:58 - 2013-03-01 02:17 - 00000000 ____D () C:\Program Files (x86)\Adobe

2014-10-19 15:49 - 2014-01-24 20:41 - 00000000 ____D () C:\Program Files\Adobe

2014-10-19 15:49 - 2013-02-27 22:11 - 00000000 ____D () C:\Users\Nigel\AppData\Roaming\Adobe

2014-10-19 15:47 - 2013-02-28 13:03 - 00000000 ____D () C:\ProgramData\Adobe

2014-10-19 15:44 - 2014-01-24 20:41 - 00000000 ____D () C:\Program Files\Common Files\Adobe

2014-10-19 15:36 - 2014-09-13 00:16 - 00003300 _____ () C:\Windows\System32\Tasks\Chrome Launcher

2014-10-19 15:34 - 2014-05-22 12:07 - 00000000 ____D () C:\Users\Nigel\Desktop\Miscel

2014-10-19 12:41 - 2013-11-24 18:10 - 00449786 _____ () C:\Windows\system32\Drivers\etc\hosts.umbrella

2014-10-19 12:40 - 2013-02-20 22:07 - 00000000 ____D () C:\Users\Nigel

2014-10-19 12:39 - 2013-10-11 04:54 - 00000000 ____D () C:\Users\Nigel\.shsh

2014-10-18 23:10 - 2013-10-14 23:38 - 00000000 ____D () C:\Users\Nigel\AppData\Local\204F97F3-3D38-41EE-A1A9-FA8BE5878D8B.aplzod

2014-10-18 23:10 - 2013-02-27 19:24 - 00000000 ____D () C:\Users\Nigel\AppData\Roaming\Apple Computer

2014-10-18 11:46 - 2013-03-01 02:36 - 00000000 ____D () C:\ProgramData\BlueStacksSetup

2014-10-17 16:59 - 2013-05-29 22:37 - 00000000 ____D () C:\Users\Nigel\AppData\Roaming\vlc

2014-10-17 15:18 - 2014-06-09 02:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-10-17 15:18 - 2014-06-09 02:48 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-10-17 12:04 - 2013-04-22 19:16 - 00000000 ____D () C:\Windows\Minidump

2014-10-16 16:56 - 2013-03-01 15:33 - 00847994 _____ () C:\Windows\system32\perfh019.dat

2014-10-16 16:56 - 2013-03-01 15:33 - 00204178 _____ () C:\Windows\system32\perfc019.dat

2014-10-16 16:56 - 2013-03-01 15:09 - 00787002 _____ () C:\Windows\system32\perfh005.dat

2014-10-16 16:56 - 2013-03-01 15:09 - 00195964 _____ () C:\Windows\system32\perfc005.dat

2014-10-16 16:56 - 2009-07-14 01:13 - 02972908 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-10-14 21:24 - 2014-04-23 06:02 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-10-14 21:24 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\SysWOW64\lv-LV

2014-10-14 21:24 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism

2014-10-14 21:24 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\system32\lv-LV

2014-10-14 21:24 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\system32\Dism

2014-10-14 19:14 - 2013-12-13 17:25 - 00000000 ____D () C:\Users\DefaultAppPool

2014-10-14 19:14 - 2013-12-11 04:29 - 00000000 ____D () C:\Users\Classic .NET AppPool

2014-10-14 18:23 - 2013-03-01 23:36 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-10-14 18:05 - 2013-07-13 02:28 - 00000000 ____D () C:\Windows\system32\MRT

2014-10-14 17:22 - 2013-02-27 17:35 - 103265616 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-10-14 15:35 - 2013-03-01 18:15 - 00000000 ____D () C:\Users\Guest

2014-10-14 15:20 - 2014-08-20 02:49 - 00000000 ____D () C:\Users\Nigel\AppData\Local\WinZip

2014-10-14 15:20 - 2014-07-21 23:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome

2014-10-14 15:20 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\system32\Msdtc

2014-10-14 15:20 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\registration

2014-10-08 14:40 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\system32\NDF

2014-10-06 20:20 - 2009-07-13 23:20 - 00000000 ____D () C:\Windows\L2Schemas

2014-10-05 00:14 - 2014-06-09 01:35 - 00000000 ____D () C:\Program Files (x86)\GetPrivate

2014-10-02 12:45 - 2013-09-20 20:09 - 00000000 ___HD () C:\Windows\msdownld.tmp

2014-10-02 12:45 - 2011-04-12 04:28 - 00000000 ____D () C:\Windows\ShellNew

2014-10-02 02:19 - 2013-04-20 01:19 - 00000000 ____D () C:\Users\Nigel\AppData\Roaming\dvdcss

2014-10-01 11:11 - 2014-06-09 02:48 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-10-01 11:11 - 2014-06-09 02:48 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2014-10-01 11:11 - 2013-12-11 13:28 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-09-24 12:45 - 2013-03-19 17:04 - 00000000 ____D () C:\Program Files\NVIDIA Corporation

2014-09-24 04:33 - 2013-02-27 22:11 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-09-24 04:33 - 2013-02-27 22:11 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-09-24 04:33 - 2013-02-27 22:11 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-09-22 05:32 - 2014-07-12 21:30 - 00000990 __RSH () C:\ProgramData\ntuser.pol

2014-09-22 05:32 - 2013-03-01 18:17 - 00000000 ____D () C:\Users\Guest\AppData\Local\Google

2014-09-22 05:32 - 2013-02-28 03:11 - 00000000 ____D () C:\Users\Nigel\AppData\Local\Google

2014-09-22 02:42 - 2010-11-20 23:27 - 00278152 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

2014-09-22 00:14 - 2014-05-22 04:24 - 00003476 _____ () C:\Windows\System32\Tasks\GPUpdateCheck

 

Some content of TEMP:

====================

C:\Users\Nigel\AppData\Local\Temp\2lfiem2t.pnr.exe

C:\Users\Nigel\AppData\Local\Temp\bs.exe

C:\Users\Nigel\AppData\Local\Temp\upwhpipm.mwl.exe

 

 

==================== Bamital & volsnap Check =================

 

(There is no automatic fix for files that do not pass verification.)

 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

 

 

LastRegBack: 2014-10-16 21:17

 

==================== End Of Log ============================

 

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 20-10-2014

Ran by Nigel at 2014-10-20 14:05:46

Running from C:\Users\Nigel\Desktop

Boot Mode: Normal

==========================================================

 

 

==================== Security Center ========================

 

(If an entry is included in the fixlist, it will be removed.)

 

AV: Microsoft Security Essentials (Enabled - Up to date) {4F35CFC4-45A3-FC37-EF17-759A02E39AB1}

AS: Microsoft Security Essentials (Enabled - Up to date) {F4542E20-6399-F3B9-D5A7-4EE87964D00C}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: IObit Malware Fighter (Disabled - Up to date) {A751AC20-3B48-5237-898A-78C4436BB78D}

 

==================== Installed Programs ======================

 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

 

µTorrent (HKCU\...\uTorrent) (Version: 3.4.2.34309 - BitTorrent Inc.)

Adobe AIR (x32 Version: 3.4.0.2710 - Adobe Systems Incorporated) Hidden

Adobe Community Help (x32 Version: 3.4.980 - Adobe Systems Incorporated.) Hidden

Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 2.5.1.369 - Adobe Systems Incorporated)

Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.167 - Adobe Systems Incorporated)

Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated)

AMD APP SDK Runtime (Version: 10.0.938.2 - Advanced Micro Devices Inc.) Hidden

AMD Catalyst Control Center (x32 Version: 2013.0830.1944.33589 - Advanced Micro Devices, Inc.) Hidden

AMD Catalyst Install Manager (HKLM\...\{13351E83-6DCD-4E97-2A8C-5D496259A47F}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)

AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden

AMD Fuel (Version: 2013.0830.1944.33589 - Advanced Micro Devices, Inc.) Hidden

AMD Media Foundation Decoders (Version: 1.0.71116.1554 - Advanced Micro Devices, Inc.) Hidden

Apple Application Support (HKLM-x32\...\{78002155-F025-4070-85B3-7C0453561701}) (Version: 3.0.6 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{B678797F-DF38-4556-8A31-8B818E261868}) (Version: 8.0.0.23 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

Bing Bar (HKLM-x32\...\{D322A9E3-758B-4D60-A7C4-65C88FD378D0}) (Version: 7.2.241.0 - Microsoft Corporation)

Bing Desktop (HKLM-x32\...\{7D095455-D971-4D4C-9EFD-9AF6A6584F3A}) (Version: 1.1.166.0 - Microsoft Corporation)

BlueStacks App Player (HKLM-x32\...\BlueStacks App Player) (Version: 0.7.8.829 - BlueStack Systems, Inc.)

Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)

Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.3.5.0 - Canon Inc.)

Canon MG2100 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG2100_series) (Version:  - Canon Inc.)

Canon MG2100 series On-screen Manual (HKLM-x32\...\Canon MG2100 series On-screen Manual) (Version:  - )

Canon MG2100 series User Registration (HKLM-x32\...\Canon MG2100 series User Registration) (Version:  - )

Canon MP Navigator EX 5.0 (HKLM-x32\...\MP Navigator EX 5.0) (Version:  - )

Canon My Image Garden (HKLM-x32\...\Canon My Image Garden) (Version: 2.0.1 - Canon Inc.)

Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 2.0.0 - Canon Inc.)

Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: 3.1.0 - Canon Inc.)

Canon Solution Menu EX (HKLM-x32\...\CanonSolutionMenuEX) (Version:  - )

Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden

Catalyst Control Center Core Implementation (x32 Version: 2009.0702.1239.20840 - ATI) Hidden

Catalyst Control Center Graphics Full Existing (x32 Version: 2009.0702.1239.20840 - ATI) Hidden

Catalyst Control Center Graphics Full New (x32 Version: 2009.0702.1239.20840 - ATI) Hidden

Catalyst Control Center Graphics Light (x32 Version: 2009.0702.1239.20840 - ATI) Hidden

Catalyst Control Center Graphics Previews Common (x32 Version: 2013.0830.1944.33589 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Graphics Previews Vista (x32 Version: 2009.0702.1239.20840 - ATI) Hidden

Catalyst Control Center InstallProxy (x32 Version: 2012.0704.2139.36919 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center InstallProxy (x32 Version: 2013.0830.1944.33589 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Localization All (x32 Version: 2009.0702.1239.20840 - ATI) Hidden

Catalyst Control Center Localization All (x32 Version: 2013.0830.1944.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Chinese Standard (x32 Version: 2009.0702.1238.20840 - ATI) Hidden

CCC Help Chinese Standard (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Chinese Traditional (x32 Version: 2009.0702.1238.20840 - ATI) Hidden

CCC Help Chinese Traditional (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Czech (x32 Version: 2009.0702.1238.20840 - ATI) Hidden

CCC Help Czech (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Danish (x32 Version: 2009.0702.1238.20840 - ATI) Hidden

CCC Help Danish (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Dutch (x32 Version: 2009.0702.1238.20840 - ATI) Hidden

CCC Help Dutch (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help English (x32 Version: 2009.0702.1238.20840 - ATI) Hidden

CCC Help English (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Finnish (x32 Version: 2009.0702.1238.20840 - ATI) Hidden

CCC Help Finnish (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help French (x32 Version: 2009.0702.1238.20840 - ATI) Hidden

CCC Help French (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help German (x32 Version: 2009.0702.1238.20840 - ATI) Hidden

CCC Help German (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Greek (x32 Version: 2009.0702.1238.20840 - ATI) Hidden

CCC Help Greek (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Hungarian (x32 Version: 2009.0702.1238.20840 - ATI) Hidden

CCC Help Hungarian (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Italian (x32 Version: 2009.0702.1238.20840 - ATI) Hidden

CCC Help Italian (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Japanese (x32 Version: 2009.0702.1238.20840 - ATI) Hidden

CCC Help Japanese (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Korean (x32 Version: 2009.0702.1238.20840 - ATI) Hidden

CCC Help Korean (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Norwegian (x32 Version: 2009.0702.1238.20840 - ATI) Hidden

CCC Help Norwegian (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Polish (x32 Version: 2009.0702.1238.20840 - ATI) Hidden

CCC Help Polish (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Portuguese (x32 Version: 2009.0702.1238.20840 - ATI) Hidden

CCC Help Portuguese (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Russian (x32 Version: 2009.0702.1238.20840 - ATI) Hidden

CCC Help Russian (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Spanish (x32 Version: 2009.0702.1238.20840 - ATI) Hidden

CCC Help Spanish (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Swedish (x32 Version: 2009.0702.1238.20840 - ATI) Hidden

CCC Help Swedish (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Thai (x32 Version: 2009.0702.1238.20840 - ATI) Hidden

CCC Help Thai (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

CCC Help Turkish (x32 Version: 2009.0702.1238.20840 - ATI) Hidden

CCC Help Turkish (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden

ccc-core-static (x32 Version: 2009.0702.1239.20840 - ATI) Hidden

ccc-utility64 (Version: 2009.0702.1239.20840 - ATI) Hidden

ccc-utility64 (Version: 2013.0830.1944.33589 - Advanced Micro Devices, Inc.) Hidden

Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)

Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)

Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)

Cloud System Booster (HKLM-x32\...\Cloud System Booster) (Version: 3.5 - Anvisoft)

DC-Bass Source 1.3.0 (HKLM-x32\...\DC-Bass Source) (Version:  - )

DirectVobSub 2.40.4209 (HKLM-x32\...\vsfilter_is1) (Version: 2.40.4209 - MPC-HC Team)

DivX Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.3.52 - DivX, LLC)

DMG Extractor (HKCU\...\DMG Extractor) (Version: 1.2.3.0 - Reincubate Ltd)

Driver Booster (HKLM-x32\...\Driver Booster_is1) (Version: 1.5 - IObit)

ffdshow v1.1.4399 [2012-03-22] (HKLM-x32\...\ffdshow_is1) (Version: 1.1.4399.0 - )

Google Talk (remove only) (HKCU\...\{226b64e8-dc75-4eea-a6c8-abcb496320f2}-Google Talk) (Version:  - )

Google Talk Plugin (HKLM-x32\...\{217CEB43-6D22-3E1F-A311-DC0D7BFEE0A2}) (Version: 5.4.1.18709 - Google)

Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)

Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden

Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden

iCloud (HKLM\...\{6096C0CC-7E19-4355-87F0-627EC5AA146D}) (Version: 4.0.3.56 - Apple Inc.)

ImTOO iPhone Photo Transfer (HKLM-x32\...\ImTOO iPhone Photo Transfer) (Version: 1.1.4.20131114 - ImTOO)

ImTOO iPhone SMS Backup (HKLM-x32\...\ImTOO iPhone SMS Backup) (Version: 1.0.13.20140211 - ImTOO)

IObit Apps Toolbar v8.3 (HKLM-x32\...\{B14D51F5-F44F-4D77-86D0-777D6CB6C235}) (Version: 8.3 - Spigot, Inc.) <==== ATTENTION

IObit Malware Fighter (HKLM-x32\...\IObit Malware Fighter_is1) (Version: 2.4 - IObit)

iPhone Backup Extractor (HKCU\...\iPhone Backup Extractor) (Version: 4.6.6.0 - Reincubate Ltd)

iPhoneBrowser (HKLM-x32\...\{C1FCDCA1-2759-4E5E-84EE-3A665BB2F513}) (Version: 1.9.3 - Cranium Consulting and Custom Software)

iTunes (HKLM\...\{F46AA0F1-E284-4878-A462-5F11B9166C0E}) (Version: 11.4.0.18 - Apple Inc.)

Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217067FF}) (Version: 7.0.670 - Oracle)

Java 7 Update 72 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417072FF}) (Version: 7.0.720 - Oracle)

Java 8 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation)

Java Auto Updater (x32 Version: 2.1.9.0 - Sun Microsystems, Inc.) Hidden

JMicron 1394 Filter Driver (HKLM-x32\...\{13C96625-28E4-4c58-ADE0-CDAFC64752EB}) (Version: 1.00.25.03 - JMicron Technology Corp.)

Lagarith Lossless Codec (1.3.27) (HKLM-x32\...\{F59AC46C-10C3-4023-882C-4212A92283B3}_is1) (Version:  - )

LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version:  - )

Malwarebytes Anti-Malware version 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)

Marvell Miniport Driver (HKLM-x32\...\Marvell Miniport Driver) (Version: 12.10.14.3 - Marvell)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)

Microsoft Mouse and Keyboard Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.1.177.0 - Microsoft Corporation)

Microsoft Office Language Pack 2010 - English (HKLM\...\Office14.OMUI.en-us) (Version: 14.0.7015.1000 - Microsoft Corporation)

Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)

Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.6.305.0 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)

Microsoft Silverlight 5 Toolkit December 2011 (HKLM-x32\...\{EC35EE8E-87D1-4E3E-B5CC-D8B1544615F5}) (Version: 5.0.51209.1124 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Windows Debugging Symbols (HKLM-x32\...\{8DD62FB6-083D-40B9-9D7D-48449FDDDED5}) (Version: 7601 - Microsoft)

Microsoft Windows Debugging Symbols (HKLM-x32\...\{C6DB958A-50CC-481B-9ED8-3BAD236F7B49}) (Version: 7601 - Microsoft)

Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)

Mozilla Firefox 18.0.2 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 18.0.2 (x86 en-US)) (Version: 18.0.2 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 18.0.2 - Mozilla)

MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

Notification Center (HKLM-x32\...\{FDAD2767-11CA-4D38-9CC4-48770CE3CC7B}) (Version: 0.7.8.829 - BlueStack Systems, Inc.)

NVIDIA 3D Vision Controller Driver 340.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 340.50 - NVIDIA Corporation)

NVIDIA 3D Vision Driver 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 340.52 - NVIDIA Corporation)

NVIDIA Control Panel 340.52 (Version: 340.52 - NVIDIA Corporation) Hidden

NVIDIA GeForce Experience 2.1.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.2 - NVIDIA Corporation)

NVIDIA GeForce Experience Service (Version: 16.13.42 - NVIDIA Corporation) Hidden

NVIDIA Graphics Driver 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 340.52 - NVIDIA Corporation)

NVIDIA HD Audio Driver 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)

NVIDIA Install Application (Version: 2.1002.162.1274 - NVIDIA Corporation) Hidden

NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden

NVIDIA Network Service (Version: 2.0 - NVIDIA Corporation) Hidden

NVIDIA PhysX (x32 Version: 9.13.1220 - NVIDIA Corporation) Hidden

NVIDIA PhysX System Software 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)

NVIDIA ShadowPlay 16.13.42 (Version: 16.13.42 - NVIDIA Corporation) Hidden

NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.12.6514 - NVIDIA Corporation) Hidden

NVIDIA Update 16.13.42 (Version: 16.13.42 - NVIDIA Corporation) Hidden

NVIDIA Update Core (Version: 16.13.42 - NVIDIA Corporation) Hidden

NVIDIA Virtual Audio 1.2.25 (Version: 1.2.25 - NVIDIA Corporation) Hidden

OpenSource Flash Video Splitter 1.0.0.5 (HKLM-x32\...\OpenSource Flash Video Splitter) (Version: 1.0.0.5 - )

PE988 (HKLM\...\{6F8ECA7B-420F-4D63-B866-B83737EB3E76}) (Version: 6.0.77 - YUAN)

Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)

QuickShare (HKLM-x32\...\{62BC7EFB-47F5-4619-9B74-7DDA72D5AF7E}) (Version: 1.6.1.949 - Linkury Inc.) <==== ATTENTION

QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)

RealDownloader (x32 Version: 1.3.0 - RealNetworks, Inc.) Hidden

RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0 - RealNetworks, Inc) Hidden

RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0 - RealNetworks, Inc) Hidden

RealPlayer Cloud (HKLM-x32\...\RealPlayer 17.0) (Version: 17.0.2 - RealNetworks)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7246 - Realtek Semiconductor Corp.)

RealUpgrade 1.1 (x32 Version: 1.1.0 - RealNetworks, Inc.) Hidden

Recuva (HKLM\...\Recuva) (Version: 1.51 - Piriform)

RocketDock 1.3.5 (HKLM-x32\...\RocketDock_is1) (Version:  - Punk Software)

Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version:  - Microsoft)

Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version:  - Microsoft) Hidden

Service Pack 2 for Microsoft Office 2010 Language Pack (KB2687449) 64-Bit Edition (HKLM\...\{90140000-0100-0409-1000-0000000FF1CE}_Office14.OMUI.en-us_{E8C86A07-99F1-4750-A6CF-C4ED5211A146}) (Version:  - Microsoft)

Service Pack 2 for Microsoft Office 2010 Language Pack (KB2687449) 64-Bit Edition (Version:  - Microsoft) Hidden

SHIELD Streaming (Version: 3.1.200 - NVIDIA Corporation) Hidden

SHIELD Wireless Controller Driver (Version: 16.13.42 - NVIDIA Corporation) Hidden

Torch (HKCU\...\Torch) (Version: 33.0.0.7723 - Torch Media, Inc) <==== ATTENTION

UpdateService (x32 Version: 1.0.0 - RealNetworks, Inc.) Hidden

VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden

VideoDownloaderUltimate (HKCU\...\VideoDownloaderUltimateWinApp) (Version: 1.0.1.23 - Link64)

Visual Studio 2010 x64 Redistributables (HKLM\...\{21B133D6-5979-47F0-BE1C-F6A6B304693F}) (Version: 13.0.0.1 - AVG Technologies)

Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)

Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)

VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)

Wajam (HKLM-x32\...\Wajam) (Version: 2.15 (i2.5) - Wajam) <==== ATTENTION

Windows Driver Package - Advanced Micro Devices (amdide64) hdc  (12/04/2012 5.2.2.0179) (HKLM\...\92CABF192AE59FEC7A26BF526AE067A4C700A858) (Version: 12/04/2012 5.2.2.0179 - Advanced Micro Devices)

Windows Driver Package - Apple (Netaapl) Net  (07/12/2011 1.8.4.2) (HKLM\...\E3446990DE8D5843AECCB8B0EF4E7D8DBF5E78B2) (Version: 07/12/2011 1.8.4.2 - Apple)

Windows Driver Package - Broadcom Corporation (BTHUSB) Bluetooth  (01/20/2010 6.3.0.3500) (HKLM\...\79B5284AC8847651E6939E5B2FB1A473E6C9D19B) (Version: 01/20/2010 6.3.0.3500 - Broadcom Corporation)

Windows Driver Package - Broadcom Corporation (BTHUSB) Bluetooth  (01/28/2010 6.3.0.3800) (HKLM\...\5BB2352543C023211B5CDA6229832626C218EB7F) (Version: 01/28/2010 6.3.0.3800 - Broadcom Corporation)

Windows Driver Package - YUAN TV DRIVER (cxpl_mhd) Media  (11/08/2011 6.0.32.0077) (HKLM\...\34BE71CBF435D6B34FFAF9BA68AD921E99CF4065) (Version: 11/08/2011 6.0.32.0077 - YUAN TV DRIVER)

Windows Resource Kit Tools - SubInAcl.exe (HKLM-x32\...\{D3EE034D-5B92-4A55-AA02-2E6D0A6A96EE}) (Version: 5.2.3790.1164 - Microsoft Corporation)

WinZip 18.5 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240E3}) (Version: 18.5.11111 - WinZip Computing, S.L. )

XBMC (HKCU\...\XBMC) (Version:  - Team XBMC)

Xvid Video Codec (HKLM-x32\...\Xvid Video Codec 1.3.2) (Version: 1.3.2 - Xvid Team)

 

==================== Custom CLSID (selected items): ==========================

 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

 

 

==================== Restore Points  =========================

 

24-09-2014 16:45:02 Installed DirectX

28-09-2014 09:37:09 Windows Update

28-09-2014 23:00:28 Windows Backup

02-10-2014 05:14:16 Windows Update

04-10-2014 15:26:38 Removed iCloud

04-10-2014 15:30:47 Installed iCloud

05-10-2014 15:50:44 Windows Update

05-10-2014 23:00:22 Windows Backup

08-10-2014 19:37:35 Windows Update

10-10-2014 04:01:33 Microsoft Antimalware Checkpoint

12-10-2014 00:32:26 Windows Update

12-10-2014 23:01:33 Windows Backup

14-10-2014 18:00:01 Restore Operation

14-10-2014 19:36:04 Windows Backup

14-10-2014 21:20:04 Windows Update

16-10-2014 19:17:02 Windows Backup

16-10-2014 23:08:12 Reimage Express Restore Point

17-10-2014 12:55:06 Reimage Express Restore Point

17-10-2014 13:09:23 Uninstalled with Total Uninstall ""

17-10-2014 15:53:12 Revo Uninstaller's restore point - Google+ Auto Backup

17-10-2014 16:51:36 Installed STOPzilla

17-10-2014 17:00:05 STOPzilla Restore Point.

17-10-2014 18:00:24 Removed STOPzilla

18-10-2014 17:58:42 Windows Update

19-10-2014 16:17:02 Microsoft Antimalware Checkpoint

19-10-2014 19:50:27 Removed Adobe Acrobat XI Pro.

19-10-2014 23:03:13 Windows Backup

20-10-2014 16:07:42 Removed Java 8 Update 25

20-10-2014 16:24:27 Removed Java 8 Update 25

20-10-2014 16:44:36 Installed Java 7 Update 71 (64-bit)

20-10-2014 17:19:23 Installed Java 7 Update 72 (64-bit)

 

==================== Hosts content: ==========================

 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

 

2014-03-01 02:10 - 2014-10-19 12:41 - 00449787 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 localhost

127.0.0.1 activate.adobe.com

127.0.0.1 3dns-3.adobe.com

127.0.0.1 adobe-dns-2.adobe.com

127.0.0.1 adobe-dns-3.adobe.com

127.0.0.1 ereg.wip3.adobe.com

127.0.0.1 activate-sea.adobe.com

127.0.0.1 wip3.adobe.com

127.0.0.1 wwis-dubc1-vip60.adobe.com

127.0.0.1 activate-sjc0.adobe.com

127.0.0.1 practivate.adobe.com

127.0.0.1 ereg.adobe.com

127.0.0.1 activate.wip3.adobe.com

127.0.0.1 3dns-2.adobe.com

127.0.0.1 adobe-dns.adobe.com

127.0.0.1 www.iobit.com

127.0.0.1 www.007guard.com

127.0.0.1 007guard.com

127.0.0.1 008i.com

127.0.0.1 www.008k.com

127.0.0.1 008k.com

127.0.0.1 www.00hq.com

127.0.0.1 00hq.com

127.0.0.1 010402.com

127.0.0.1 www.032439.com

127.0.0.1 032439.com

127.0.0.1 www.0scan.com

127.0.0.1 0scan.com

127.0.0.1 1000gratisproben.com

 

There are 1000 more lines.

 

 

==================== Scheduled Tasks (whitelisted) =============

 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

 

Task: {000612EA-70A0-4C63-89A1-8C5AEA7EFE8D} - System32\Tasks\{2C7ACBC0-7276-4542-8CD7-529B4D9AA8CC} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

Task: {006F7C01-5F0E-4150-9C4D-DE30C78C24A1} - System32\Tasks\{5FB22839-DCD7-44B2-8A12-F735271B7366} => C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe [2012-11-27] ()

Task: {02E826AC-35DE-482B-94B2-15A0559936CE} - System32\Tasks\{81C5B8D4-8F2D-4A27-9184-EED41C281D3E} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

Task: {05A07841-8538-4FA8-A72E-58D63EF246DB} - System32\Tasks\{A2992F5E-09C1-403A-B59B-A743630AD888} => C:\Users\Nigel\Desktop\System Drivers\SetupBtwDownloadSE.exe

Task: {079ADE9F-71D9-4F2F-ACD6-13E8E77D1F92} - System32\Tasks\Csb_IdleScan_Task => C:/Program Files (x86)/Anvisoft/Cloud System Booster/CloudSystemBooster.exe [2014-08-20] (Anvisoft)

Task: {093963F0-A29D-40AE-99C1-75A26902A885} - System32\Tasks\Test TimeTrigger => C:\Users\Nigel\AppData\Local\Temp\Runner.exe <==== ATTENTION

Task: {0A818F3C-A3E3-4122-B3F0-19729F7CCE12} - System32\Tasks\{7DB33574-0FEC-4FC6-92B5-1663FE05B401} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

Task: {0DCD46B0-0A93-41AF-A417-D30980C7434D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-24] (Adobe Systems Incorporated)

Task: {1038BF1B-FF84-473E-9470-CF2542F8734B} - System32\Tasks\{621D54F1-F962-49FF-80F3-E4901E48F97F} => C:\NVIDIA\DisplayDriver\326.01\Win8_WinVista_Win7\International\Display.Driver\NvCplSetupInt.exe

Task: {10ADD4C1-18C7-4959-B6A6-55B7612B9981} - System32\Tasks\{9B93F1C1-BAE0-4547-A7F4-436DCB981174} => C:\NVIDIA\DisplayDriver\326.01\Win8_WinVista_Win7\International\Display.Driver\NvCplSetupInt.exe

Task: {123565F3-0D19-410B-A6DA-88F89AD0DB10} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2013-01-29] (Microsoft)

Task: {12EFB081-B6B7-498C-B0EB-5B466DCAC3DB} - System32\Tasks\{C1FD0AF3-F142-4A98-8F71-C27459CCC326} => C:\Users\Public\Documents\ATISetup.exe [2013-02-14] (Advanced Micro Devices, Inc.)

Task: {169AAA98-589D-4EF5-99E6-164E9E990614} - System32\Tasks\{73CE8116-3FE9-4BB0-9ECF-FF9EF71B71CC} => C:\AMD\Support\13-4_vista_win7_win8_64_dd_ccc_whql\Setup.exe [2013-03-28] (Advanced Micro Devices, Inc.)

Task: {169CA07C-AC46-4953-8DA6-2580DBCF974F} - System32\Tasks\{2D439E47-B377-4F2A-84A7-1FFFB9315E27} => C:\Users\Nigel\Desktop\System Drivers\SetupBtwDownloadSE.exe

Task: {186E7797-9FE8-4A70-9B8A-BB997C6DC598} - System32\Tasks\{CC0FD0E2-776D-4B23-B75B-DA619AA69C1B} => C:\Users\Nigel\Desktop\SetupBtwDownloadSE.exe

Task: {1AFB0322-06B1-4B25-A4D1-2EC13633A456} - System32\Tasks\{10054E13-B4D2-4038-A149-7D7CD286D5BC} => C:\Program Files\Microsoft Silverlight\5.1.20125.0\Silverlight.Configuration.exe

Task: {1FE31CA9-9587-4D90-B97B-4874FE0DD994} - System32\Tasks\{3809E01F-7D74-419D-A04E-475AC9AC0104} => C:\Users\Nigel\Desktop\System Drivers\SetupBtwDownloadSE.exe

Task: {2199150D-38EE-40E0-932A-C547AFC1CDCE} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2012-07-03] (Sun Microsystems, Inc.)

Task: {22E21245-ACCB-45D9-86D9-43D186C24EE0} - System32\Tasks\{1C9473D9-9587-4262-BED4-CE9A0A5B7132} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

Task: {22ED1B6B-B453-4340-A791-B7610BD18DAD} - System32\Tasks\ss u helper-S-9665547 => c:\programdata\wintersoft\ss u helper\ss u helper.exe

Task: {23925085-F16B-480C-893C-00F6B4471DB4} - System32\Tasks\{6FCAAA83-1380-4B01-827E-618BDC4C8749} => C:\Users\Nigel\Desktop\SetupBtwDownloadSE.exe

Task: {251F1F0E-642E-4773-9A4F-BEB433A9277B} - System32\Tasks\{0F35E7D5-B3FA-4E4F-B3C2-695339938076} => C:\Users\Public\Documents\ATISetup.exe [2013-02-14] (Advanced Micro Devices, Inc.)

Task: {26D1CC47-7787-49E1-91F4-1C5B5053B481} - System32\Tasks\{28980DF0-B3B8-477B-B624-7B366C1E9F82} => C:\NVIDIA\DisplayDriver\326.01\Win8_WinVista_Win7\International\Display.Driver\NvCplSetupInt.exe

Task: {293E9808-104D-47BB-BAAD-6C879853839B} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-01-29] (Microsoft Corporation)

Task: {2963DDCF-57EB-43AE-890A-DF5A98B7AEC7} - System32\Tasks\GPUpdateCheck => C:\Program Files (x86)\GetPrivate\gpup.exe [2014-09-22] ()

Task: {29FCDBB3-E067-422E-B938-73B7521C3370} - System32\Tasks\{84129D00-A527-4272-9EAF-734B4C1137A6} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

Task: {317E9D0C-E965-4647-AF45-C426E3C47409} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-425073729-1472267466-4260431720-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe [2012-11-29] (RealNetworks, Inc.)

Task: {32608733-4D6D-47E7-89BF-37F1B22B89B9} - System32\Tasks\{DAE296A8-D8A2-4199-8500-2224FE88CDAF} => C:\NVIDIA\DisplayDriver\326.01\Win8_WinVista_Win7\International\Display.Driver\NvCplSetupInt.exe

Task: {349B5B62-DEAF-4B16-93FE-DE7C169ABE66} - System32\Tasks\ReclaimerUpdateFiles_Nigel => C:\Users\Nigel\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\11.02\agent\rnupgagent.exe [2014-09-20] (RealNetworks, Inc.)

Task: {368FD478-750D-48DA-98C1-91A0AC9154BA} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-425073729-1472267466-4260431720-1000Core => C:\Users\Nigel\AppData\Local\Google\Update\GoogleUpdate.exe

Task: {3885C983-81FD-4929-94F2-BADDDEC585E8} - System32\Tasks\{E9D746C0-8108-4D3F-856F-0B8E88844D63} => C:\Users\Nigel\AppData\Roaming\Easeware\DriverEasy\drivers\sqnb3bkh.g5k\13-4_vista_win7_win8_64_dd_ccc_whql.exe

Task: {3A28F420-CA2E-41C7-98E6-090BD717828D} - System32\Tasks\{1BB641A5-4C01-461B-A3CA-3EE7A8AFC753} => C:\Users\Nigel\Desktop\System Drivers\SetupBtwDownloadSE.exe

Task: {3A662C89-E799-4D3F-A277-2C6AE51F2D5D} - System32\Tasks\RNUpgradeHelperLogonPrompt_Nigel => C:\Users\Nigel\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\11.02\agent\rnupgagent.exe [2014-09-20] (RealNetworks, Inc.)

Task: {3AE4BFDD-06D3-4A72-A031-752C12C5A1FC} - System32\Tasks\{3CED81EB-75E9-4886-9345-6F8A59F71133} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

Task: {3AE64DE5-B4CB-4FEE-8261-3C44EC6592F2} - System32\Tasks\{DA2D6784-B468-41D6-A9C3-E6456F0ECEDC} => C:\AMD\Support\13-4_vista_win7_win8_64_dd_ccc_whql\Setup.exe [2013-03-28] (Advanced Micro Devices, Inc.)

Task: {3C0C5E3A-2FD6-4BE1-9044-A2D75313532F} - System32\Tasks\{3A0372C4-11E7-4A9F-97D8-DA624D7A58FD} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

Task: {3FC269B9-8C6C-4A9E-9628-2490CDAF8E1D} - System32\Tasks\{F565868D-6352-46C1-9D78-ACC152BA5AFC} => C:\Users\Nigel\AppData\Roaming\Easeware\DriverEasy\drivers\sqnb3bkh.g5k\13-4_vista_win7_win8_64_dd_ccc_whql.exe

Task: {4351F10C-E69D-4B69-945D-08C1F0EBDD8A} - System32\Tasks\{8F6CAC86-F380-4C50-8006-36939E72777D} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

Task: {449F4E01-3C7C-4D28-ABBA-828539A83685} - System32\Tasks\{C418A8B2-9255-49E4-A6E9-4D7CA82ADDD3} => C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe [2012-11-27] ()

Task: {44E0ECA0-F601-4090-B027-8CD419F677AD} - System32\Tasks\SmartDefrag_Schedule => C:\Program Files (x86)\IObit\Smart Defrag 2\SmartDefrag.exe

Task: {459C1231-E4FD-4849-B9C5-FBA0C5BB8245} - System32\Tasks\{2A23BB18-DE5C-43BD-BC52-72961C9849D3} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

Task: {467D8819-3E3A-417E-863A-3DF0E112FCB5} - System32\Tasks\{AE34398D-666B-4CCE-BC8F-DB48148EA13F} => C:\Users\Nigel\AppData\Roaming\Easeware\DriverEasy\drivers\sqnb3bkh.g5k\13-4_vista_win7_win8_64_dd_ccc_whql.exe

Task: {4BE74FA7-42CD-41FE-B40D-F9E9C441537E} - System32\Tasks\{BAF80243-FBA1-4E89-95EB-C0D3AA496914} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

Task: {4F2DEE36-7405-4E0C-8129-21A2BBD59B4E} - System32\Tasks\{AEE3B048-B798-479B-B577-03A229A26271} => C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe [2012-11-27] ()

Task: {51745400-A8A2-46E2-A2AA-F90FD82B42A5} - System32\Tasks\{924020A1-5A40-46D8-ADE0-8DF0D267C4CA} => C:\Users\Nigel\Downloads\USB Human Interface Device 33b51d98912fa395f47d492c06592e62\USB Human Interface Device 33b51d98912fa395f47d492c06592e62.exe

Task: {51DF843C-2317-46CB-8DCD-9786748EF292} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-425073729-1472267466-4260431720-1000UA => C:\Users\Nigel\AppData\Local\Google\Update\GoogleUpdate.exe

Task: {56459790-A92F-4CDA-AF94-876D74EBEC31} - System32\Tasks\{9FAA2EAA-5333-4F67-897D-042DC1118AEF} => C:\NVIDIA\DisplayDriver\326.01\Win8_WinVista_Win7\International\Display.Driver\NvCplSetupInt.exe

Task: {5852944E-E3BF-47B0-A8CD-EE9B9FCC856C} - System32\Tasks\{48E4D8DA-0C19-4658-B79C-C5078590BEEF} => C:\Program Files (x86)\JMicron\JOHCI_DIR\setup.exe [2010-07-30] (JMicron Technology Corp.)

Task: {59D050C2-9DFB-4BBB-9BEF-9B5072BDAE74} - System32\Tasks\{FE23A538-ED0A-40E0-87B2-0FA07139C608} => C:\Users\Nigel\Desktop\SetupBtwDownloadSE.exe

Task: {5A655E23-C498-4B5F-A959-B0588BD8C6CB} - System32\Tasks\{73825FD6-27E8-44E3-A92D-5506AD1B97FA} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

Task: {5C75FAF9-9DA8-4844-8416-2228A7785B44} - System32\Tasks\{FC2419A3-3ADC-4196-AAA4-5A5977A662CF} => C:\Program Files (x86)\JMicron\JOHCI_DIR\setup.exe [2010-07-30] (JMicron Technology Corp.)

Task: {6032B365-3830-4CD5-AE92-FE6D4561AE51} - System32\Tasks\{881571A8-9200-4CB5-B498-2A83A9E86DA6} => C:\NVIDIA\DisplayDriver\326.01\Win8_WinVista_Win7\International\Display.Driver\NvCplSetupInt.exe

Task: {60E328B8-E650-45BE-8878-404EE5B610F8} - System32\Tasks\{87D481AC-6BB3-4473-B7AD-3607DCEA8756} => C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe [2012-11-27] ()

Task: {6260FD1A-D38B-44C5-A055-52AB153435FD} - System32\Tasks\{11B3F5B9-1B08-4582-8226-996CDA70793D} => C:\Users\Nigel\Desktop\System Drivers\SetupBtwDownloadSE.exe

Task: {65685772-F1F4-4A8B-8875-60D89FD5137A} - \TidyNetwork Update No Task File <==== ATTENTION

Task: {667FC555-EBE8-4B7E-A24B-C32A0943A876} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-01-29] (Microsoft Corporation)

Task: {67309B44-4BBA-46A8-94CE-66F0E4118D55} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {7033CB6B-822E-422C-B3A5-285638759605} - System32\Tasks\{F92FDF9D-A098-4E5B-A8B0-BFD8B84ACFF9} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

Task: {708D0DCC-2C04-499E-BB51-26648D454A7B} - System32\Tasks\{C174E770-DDA8-43A4-B145-1DDB63E80EFB} => C:\Users\Nigel\Desktop\SetupBtwDownloadSE.exe

Task: {77090DF9-6BCB-46BD-A052-595EF90E516D} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-425073729-1472267466-4260431720-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2012-11-29] (RealNetworks, Inc.)

Task: {779B01EA-C171-4A33-A0AA-D9A09F0EEE26} - System32\Tasks\ReimageUpdater => C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe

Task: {79C33A83-58DD-44FC-87EE-B1EAC391332E} - System32\Tasks\{4A2DD742-0F4E-41E5-8164-8C4079E1D14C} => C:\Program Files (x86)\JMicron\JOHCI_DIR\setup.exe [2010-07-30] (JMicron Technology Corp.)

Task: {7C43B3B7-D555-40E2-9548-D0461CBC676F} - System32\Tasks\{7B644DAF-35C5-439A-952A-E355469DEE4A} => C:\AMD\Support\13-4_vista_win7_win8_64_dd_ccc_whql\Setup.exe [2013-03-28] (Advanced Micro Devices, Inc.)

Task: {7CC66EF8-31F6-4E5C-BFE2-92851B0A97E8} - System32\Tasks\ReclaimerUpdateXML_Nigel => C:\Users\Nigel\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\11.02\agent\rnupgagent.exe [2014-09-20] (RealNetworks, Inc.)

Task: {7D16292D-72E8-4AE0-A281-77217F353C3C} - System32\Tasks\{C6D7FCF8-E7B1-4703-8194-D75C03B4DF37} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

Task: {7EC72E42-E0D9-4DB7-B499-3BC25912A497} - System32\Tasks\{4AACEB05-CFC0-4279-9403-CC99773EDDCF} => C:\Users\Nigel\Desktop\System Drivers\SetupBtwDownloadSE.exe

Task: {7F733B87-02E8-479E-8440-514AE88C24A7} - System32\Tasks\{6D7101B6-EC94-4CD8-9786-A08EE5E54F8F} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

Task: {807F5556-47D5-4EC7-8562-1CC7C96009B0} - System32\Tasks\Eakona Update => C:\ProgramData\Eakona\update15.exe

Task: {81A0FB29-85F8-4BFA-8F27-A54082550447} - System32\Tasks\Driver Booster SkipUAC (Nigel) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe [2014-08-06] (IObit)

Task: {83AFC484-8A32-40B4-8A02-9E064C609D88} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-425073729-1472267466-4260431720-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2012-11-29] (RealNetworks, Inc.)

Task: {84589CC3-E682-4196-B545-F1A996BDD4B1} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: {84CFA5CB-FE45-4E62-8842-A69B2BC7833D} - System32\Tasks\{544F44BF-F291-4E18-8BF3-60C0E38A8E9D} => C:\Program Files (x86)\FVD Player\FVD Player.exe

Task: {8565466B-33EA-453A-9A44-FB10FED0EBE0} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-425073729-1472267466-4260431720-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-10-25] (RealNetworks, Inc.)

Task: {8C433082-E77E-4688-BF0E-6CB3A25A77DD} - System32\Tasks\{1D1A5A4A-8E61-4697-AC2F-51D7EE009786} => C:\Users\Nigel\Desktop\SetupBtwDownloadSE.exe

Task: {90473550-E850-4BFB-9244-5EE77EF732AA} - System32\Tasks\{1F60F57D-30CA-4034-BC06-941D7B6CD9F0} => C:\Program Files (x86)\FVD Player\FVD Player.exe

Task: {951DCD93-192C-435E-A657-97B8861D29D7} - System32\Tasks\{72C600E9-A2FB-4A6C-8EDB-4B7FD35F3BE0} => C:\Users\Nigel\Desktop\System Drivers\SetupBtwDownloadSE.exe

Task: {96424976-48F4-4F52-A759-B19F12A6F4AF} - System32\Tasks\YourFileDownloader Installer Starter => C:\Users\Nigel\AppData\Local\Temp\YourFileDownloaderxVijv0Nbf2.exe <==== ATTENTION

Task: {96878061-26E9-49D3-8B8B-6CC548CA5809} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: {992CD035-8FA6-4179-8F27-6451EAC9B25E} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-01-29] (Microsoft Corporation)

Task: {9B7E1E6B-8E4C-4230-9B53-6F404F3C8FA3} - System32\Tasks\RNUpgradeHelperResumePrompt_Nigel => C:\Users\Nigel\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\11.02\agent\rnupgagent.exe [2014-09-20] (RealNetworks, Inc.)

Task: {A08E06B3-13BE-4A64-8BE4-BA75BFE3CF80} - System32\Tasks\{DCD6F798-3E9A-4E0B-BD8F-4F1A56C6E1A5} => C:\Users\Nigel\Downloads\USB Human Interface Device 33b51d98912fa395f47d492c06592e62\USB Human Interface Device 33b51d98912fa395f47d492c06592e62.exe

Task: {A5E73495-E96E-4AB8-AF93-C21EC0416E5A} - System32\Tasks\{1A248453-EA28-4123-BDBE-21B643214981} => C:\Users\Nigel\Desktop\System Drivers\SetupBtwDownloadSE.exe

Task: {A5FEAF99-0991-43FE-AA1F-D8046B57BAEE} - System32\Tasks\{E053BCD8-88B4-40F6-B0E9-54B4C0E2DB24} => C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe [2012-11-27] ()

Task: {A865B493-DC39-4096-A89C-F345384C3AF4} - System32\Tasks\{6F328AA4-E7BC-4E55-8580-8DD694CC3ADB} => C:\Users\Nigel\Desktop\SetupBtwDownloadSE.exe

Task: {A8818490-0854-4337-B395-4A370F92FE89} - System32\Tasks\{21766169-89C2-49F6-BB8F-AB224E395A1B} => C:\NVIDIA\DisplayDriver\326.01\Win8_WinVista_Win7\International\Display.Driver\NvCplSetupInt.exe

Task: {AB23705A-DE13-4C0F-9DC8-275734E6618D} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup

Task: {AB54D713-8B71-4989-A1B2-F224EB44A3AE} - System32\Tasks\{8571D682-9355-4007-A9C8-52B226CC06A8} => C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe [2012-11-27] ()

Task: {AEA2DCEC-1540-4417-808E-F885D955417D} - System32\Tasks\{F42A0C80-5557-42CB-8465-6164EBAD88A8} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

Task: {AEB6797F-3C8C-4FEC-ADF2-D899CAF39D65} - System32\Tasks\{4BD65B01-0AE9-4A43-B2F7-CF6128EA21A9} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

Task: {AF7D2CEF-584D-4481-8C36-2503A983A9DB} - System32\Tasks\AdobeAAMUpdater-1.0-Nigel-PC-Nigel => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2014-02-27] (Adobe Systems Incorporated)

Task: {B2EE0003-6F1B-4C22-8D48-992FB5AABE0A} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-01-29] (Microsoft Corporation)

Task: {B41A22EC-4CB5-4AFE-8BEA-5B01E5AE43EE} - System32\Tasks\{E400AB86-5A44-4228-A3CE-AF605BA9AF62} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

Task: {B7FC23B2-7EC7-4C96-8161-B3CFB715E737} - System32\Tasks\{9ED700B8-ECDA-427C-B8E3-2791A2E2DCD7} => C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe [2012-11-27] ()

Task: {BBC765F7-D309-4BD8-BA18-A107F6F5948E} - System32\Tasks\{077AA7A5-1BD3-4EFA-ABDB-DFB6174D3071} => C:\NVIDIA\DisplayDriver\326.01\Win8_WinVista_Win7\International\Display.Driver\NvCplSetupInt.exe

Task: {C11C6FBD-A367-4737-8923-386DAD5DC884} - System32\Tasks\{B15A5C3F-6909-4D9D-AEEA-7873D50CBFC1} => C:\Users\Nigel\AppData\Roaming\Easeware\DriverEasy\drivers\sqnb3bkh.g5k\13-4_vista_win7_win8_64_dd_ccc_whql.exe

Task: {C3F97A9C-6154-4CED-BFDC-028EF0188789} - System32\Tasks\{F153F805-2E31-4E5B-97C7-FD71BC0BEB55} => C:\NVIDIA\DisplayDriver\326.01\Win8_WinVista_Win7\International\Display.Driver\NvCplSetupInt.exe

Task: {C435B79A-12EE-4AF1-9117-FC0211600E4D} - System32\Tasks\{50FFBF50-AA52-4ED1-B6A2-ABE0AB7A1FA8} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

Task: {CF517E06-FF2E-40D8-90A8-38618541F7C7} - System32\Tasks\{25E512C9-6BF5-4F04-AD7A-771D90B5EA74} => C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe [2012-11-27] ()

Task: {D7F7BD77-BA36-439A-912A-E42FFD28F48F} - System32\Tasks\{D8FD28E2-15C2-4D62-A60C-F8B55E46DD86} => C:\NVIDIA\DisplayDriver\326.01\Win8_WinVista_Win7\International\Display.Driver\NvCplSetupInt.exe

Task: {DDD4F934-C2EF-42A7-A324-93D7B98AF47E} - System32\Tasks\{9FBD2980-03DB-418A-8BE2-EFEF5DFC542B} => C:\NVIDIA\DisplayDriver\326.01\Win8_WinVista_Win7\International\Display.Driver\NvCplSetupInt.exe

Task: {DF1AD657-5EA2-47B0-98BF-F60D6C449CB5} - System32\Tasks\{74F22C14-D49E-46A3-89CB-999F91FAE2D9} => C:\Users\Nigel\Desktop\SetupBtwDownloadSE.exe

Task: {DF61FCD0-E3FE-4055-9FCD-C17C2A9196F3} - System32\Tasks\{5F84FB09-08A8-499F-B17F-7CCCA4EE158D} => C:\Users\Nigel\Desktop\System Drivers\SetupBtwDownloadSE.exe

Task: {E5004064-C3D0-4FB4-BC0E-D9653316B938} - System32\Tasks\{154733BA-4DA3-4301-AD83-0230D0C5461D} => C:\NVIDIA\DisplayDriver\326.01\Win8_WinVista_Win7\International\Display.Driver\NvCplSetupInt.exe

Task: {E605B7D6-DB52-4020-9B63-D4FB2ED3B067} - System32\Tasks\{FB5E2E38-F3B5-4A82-9033-18D3A4773C95} => C:\Users\Nigel\Desktop\SetupBtwDownloadSE.exe

Task: {E9FBC6F9-B382-4931-B10F-BE788B37743E} - System32\Tasks\{52EC31A4-035C-4281-B156-1FFA146BEFB5} => C:\Program Files (x86)\FVD Player\FVD Player.exe

Task: {EF39CFC0-6789-43E7-B770-1BD31EACB6A4} - System32\Tasks\{698C9EF4-C460-4000-8D89-333C6772CA58} => C:\Program Files (x86)\JMicron\JOHCI_DIR\setup.exe [2010-07-30] (JMicron Technology Corp.)

Task: {F0ADDC43-8010-4AD0-9C2A-3DCDF5A12CCD} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-425073729-1472267466-4260431720-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-10-25] (RealNetworks, Inc.)

Task: {F2AB3193-B105-41BA-ACC2-A89251B966ED} - System32\Tasks\Chrome Launcher => C:\Program Files (x86)\Techsnab\Chrome Launcher\chrome-links.exe [2014-09-13] ()

Task: {FCA5B4FE-154E-4649-82C9-519B0DFFAEA0} - System32\Tasks\{EC9BF912-F05C-4B56-B200-82F74A037AD0} => C:\Program Files\Microsoft Silverlight\5.1.20125.0\Silverlight.Configuration.exe

Task: {FE0838BE-005B-4A21-A157-EEBC70F1FF49} - \GPUP No Task File <==== ATTENTION

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-425073729-1472267466-4260431720-1000Core.job => C:\Users\Nigel\AppData\Local\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-425073729-1472267466-4260431720-1000UA.job => C:\Users\Nigel\AppData\Local\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\ReclaimerUpdateFiles_Nigel.job => C:\Users\Nigel\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\11.02\agent\rnupgagent.exe

Task: C:\Windows\Tasks\ReclaimerUpdateXML_Nigel.job => C:\Users\Nigel\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\11.02\agent\rnupgagent.exe

Task: C:\Windows\Tasks\RNUpgradeHelperLogonPrompt_Nigel.job => C:\Users\Nigel\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\11.02\agent\rnupgagent.exe

 

==================== Loaded Modules (whitelisted) =============

 

2013-03-19 17:05 - 2014-07-02 14:55 - 00116568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2014-03-20 11:24 - 2014-03-20 11:24 - 00667808 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll

2013-09-05 01:17 - 2013-09-05 01:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF

2010-10-20 15:23 - 2010-10-20 15:23 - 08801632 _____ () C:\Program Files\Microsoft Office\Office14\1033\GrooveIntlResource.dll

2014-01-20 14:17 - 2014-01-20 14:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll

2014-01-20 14:16 - 2014-01-20 14:16 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll

2013-09-05 01:14 - 2013-09-05 01:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF

2010-10-20 15:45 - 2010-10-20 15:45 - 08801120 _____ () C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveIntlResource.dll

2014-09-07 11:03 - 2014-08-27 20:27 - 00051720 _____ () C:\Users\Nigel\AppData\Local\Torch\Application\33.0.0.7712\chrome_elf.dll

2014-09-07 11:03 - 2014-08-27 20:27 - 00908808 _____ () C:\Users\Nigel\AppData\Local\Torch\Application\33.0.0.7712\libglesv2.dll

2014-09-07 11:03 - 2014-08-27 20:27 - 00108552 _____ () C:\Users\Nigel\AppData\Local\Torch\Application\33.0.0.7712\libegl.dll

2014-09-07 11:03 - 2014-08-27 20:27 - 04008040 _____ () C:\Users\Nigel\AppData\Local\Torch\Application\33.0.0.7712\pdf.dll

2014-09-07 11:03 - 2014-08-27 20:27 - 00460808 _____ () C:\Users\Nigel\AppData\Local\Torch\Application\33.0.0.7712\ppGoogleNaClPluginChrome.dll

2014-09-07 11:03 - 2014-08-27 20:27 - 01915400 _____ () C:\Users\Nigel\AppData\Local\Torch\Application\33.0.0.7712\ffmpegsumo.dll

2014-08-11 08:24 - 2014-08-11 08:24 - 00645592 _____ () C:\Users\Nigel\AppData\Local\Torch\User Data\Default\Extensions\dipchieogpecpggdacaaffcjemkggfbi\1.0.0.7593_0\plugin\sqlite3.dll

2014-09-07 11:03 - 2014-08-27 20:27 - 13692232 _____ () C:\Users\Nigel\AppData\Local\Torch\Application\33.0.0.7712\PepperFlash\pepflashplayer.dll

 

==================== Alternate Data Streams (whitelisted) =========

 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

 

AlternateDataStreams: C:\Windows\system32\Drivers\ktlxumic.sys:changelist

 

==================== Safe Mode (whitelisted) ===================

 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WRkrn => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WRSVC => ""="Service"

 

==================== EXE Association (whitelisted) =============

 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

 

HKU\.DEFAULT\Software\Classes\.exe: exefile => "%1" %* <===== ATTENTION!

HKU\.DEFAULT\Software\Classes\exefile: "%1" %* <===== ATTENTION!

HKU\S-1-5-19\Software\Classes\.exe: exefile => "%1" %* <===== ATTENTION!

HKU\S-1-5-19\Software\Classes\exefile: "%1" %* <===== ATTENTION!

HKU\S-1-5-20\Software\Classes\.exe: exefile => "%1" %* <===== ATTENTION!

HKU\S-1-5-20\Software\Classes\exefile: "%1" %* <===== ATTENTION!

HKU\S-1-5-21-425073729-1472267466-4260431720-1000\Software\Classes\.exe: exefile =>  <===== ATTENTION!

HKU\S-1-5-21-425073729-1472267466-4260431720-1000\Software\Classes\exefile:  <===== ATTENTION!

 

==================== MSCONFIG/TASK MANAGER disabled items =========

 

(Currently there is no automatic fix for this section.)

 

MSCONFIG\Services: ASCAntivirusSrv => 2

MSCONFIG\Services: Bluetooth Device Monitor => 2

MSCONFIG\Services: Bluetooth Media Service => 2

MSCONFIG\Services: Bluetooth OBEX Service => 2

MSCONFIG\Services: btwdins => 2

MSCONFIG\Services: DefaultTabSearch => 2

MSCONFIG\Services: DefaultTabUpdate => 2

MSCONFIG\Services: Fax => 3

MSCONFIG\Services: hshld => 2

MSCONFIG\Services: HssTrayService => 3

MSCONFIG\Services: HssWd => 2

MSCONFIG\Services: IMFservice => 2

MSCONFIG\Services: RealNetworks Downloader Resolver Service => 3

MSCONFIG\Services: RealPlayer Desktop Service => 3

MSCONFIG\Services: RealPlayerUpdateSvc => 3

MSCONFIG\Services: WRSVC => 2

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Install Webroot IE RunOnce.lnk => C:\Windows\pss\Install Webroot IE RunOnce.lnk.CommonStartup

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^LaunchU3.exe.lnk => C:\Windows\pss\LaunchU3.exe.lnk.CommonStartup

MSCONFIG\startupfolder: C:^Users^Nigel^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^A1Clean.lnk => C:\Windows\pss\A1Clean.lnk.Startup

MSCONFIG\startupfolder: C:^Users^Nigel^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^JustCloud.lnk => C:\Windows\pss\JustCloud.lnk.Startup

MSCONFIG\startupfolder: C:^Users^Nigel^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Microsoft SharePoint Workspace.lnk => C:\Windows\pss\Microsoft SharePoint Workspace.lnk.Startup

MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

MSCONFIG\startupreg: Adobe Creative Cloud => "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true

MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => c:\program files (x86)\common files\adobe\oobe\pdapp\uwa\updaterstartuputility.exe

MSCONFIG\startupreg: AdobeCS5.5ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" -launchedbylogin

MSCONFIG\startupreg: Apoint => 

MSCONFIG\startupreg: Bench Communicator Watcher => 

MSCONFIG\startupreg: Bench Settings Cleaner => 

MSCONFIG\startupreg: BService => 

MSCONFIG\startupreg: BService64 => 

MSCONFIG\startupreg: IObit Malware Fighter => 

MSCONFIG\startupreg: mmonitor => C:\Program Files (x86)\Anvisoft\Cloud System Booster\extentions\toolbox\Anvi RAM Booster\Anvi_RAM_Booster.exe hide=1

MSCONFIG\startupreg: OfficeSyncProcess => "C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE"

MSCONFIG\startupreg: SearchProtection => 

MSCONFIG\startupreg: swg => c:\program files (x86)\google\googletoolbarnotifier\googletoolbarnotifier.exe

MSCONFIG\startupreg: SwitchBoard => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

MSCONFIG\startupreg: uTorrent => "C:\Users\Nigel\AppData\Roaming\uTorrent\uTorrent.exe"  /MINIMIZED

MSCONFIG\startupreg: VideoDownloaderUltimate => C:\ProgramData\VideoDownloaderUltimateWinApp\VideoDownloaderUltimate.exe /repair

MSCONFIG\startupreg: Wd => 

MSCONFIG\startupreg: WRSVC => 

 

========================= Accounts: ==========================

 

Administrator (S-1-5-21-425073729-1472267466-4260431720-500 - Administrator - Disabled)

Guest (S-1-5-21-425073729-1472267466-4260431720-501 - Limited - Enabled) => C:\Users\Guest

Nigel (S-1-5-21-425073729-1472267466-4260431720-1000 - Administrator - Enabled) => C:\Users\Nigel

 

==================== Faulty Device Manager Devices =============

 

Name: AntiLog32

Description: AntiLog32

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer: 

Service: AntiLog32

Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)

Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.

Devices stay in this state if they have been prepared for removal.

After you remove the device, this error disappears.Remove the device, and this error should be resolved.

 

Name: Microsoft PS/2 Mouse

Description: Microsoft PS/2 Mouse

Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: i8042prt

Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)

Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.

Devices stay in this state if they have been prepared for removal.

After you remove the device, this error disappears.Remove the device, and this error should be resolved.

 

Name: SASDIFSV

Description: SASDIFSV

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer: 

Service: SASDIFSV

Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)

Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.

Devices stay in this state if they have been prepared for removal.

After you remove the device, this error disappears.Remove the device, and this error should be resolved.

 

Name: SASKUTIL

Description: SASKUTIL

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer: 

Service: SASKUTIL

Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)

Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.

Devices stay in this state if they have been prepared for removal.

After you remove the device, this error disappears.Remove the device, and this error should be resolved.

 

 

==================== Event log errors: =========================

 

Application errors:

==================

Error: (10/20/2014 01:47:45 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

 

Error: (10/20/2014 01:33:31 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application name: chrome.exe, version: 37.0.2062.103, time stamp: 0x54011f26

Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000

Exception code: 0xc0000005

Fault offset: 0x00000000

Faulting process id: 0x2b00

Faulting application start time: 0xchrome.exe0

Faulting application path: chrome.exe1

Faulting module path: chrome.exe2

Report Id: chrome.exe3

 

Error: (10/19/2014 06:21:06 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application name: chrome.exe, version: 37.0.2062.103, time stamp: 0x54011f26

Faulting module name: chrome.exe, version: 37.0.2062.103, time stamp: 0x54011f26

Exception code: 0xc0000409

Fault offset: 0x00040366

Faulting process id: 0x10c0

Faulting application start time: 0xchrome.exe0

Faulting application path: chrome.exe1

Faulting module path: chrome.exe2

Report Id: chrome.exe3

 

Error: (10/19/2014 05:21:11 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: The program CKScanner.exe version 2.4.2.1 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

 

Process ID: d44

 

Start Time: 01cfebe2619e8c45

 

Termination Time: 40

 

Application Path: C:\Users\Nigel\Downloads\Geeks_To_Go_Help\CKScanner\CKScanner.exe

 

Report Id: d3ff496d-57d5-11e4-b4b6-f065dd641ea6

 

Error: (10/19/2014 04:28:56 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

 

Error: (10/19/2014 03:50:28 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )

Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.

 

 

Details:

AddLegacyDriverFiles: Unable to back up image of binary szkg5.

 

System Error:

The system cannot find the file specified.

.

 

Error: (10/19/2014 00:17:07 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )

Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.

 

 

Details:

AddLegacyDriverFiles: Unable to back up image of binary szkg5.

 

System Error:

The system cannot find the file specified.

.

 

Error: (10/19/2014 11:49:14 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: ERROR: handle_resolve_request bad interfaceIndex 24

 

Error: (10/19/2014 11:49:14 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: ERROR: handle_resolve_request bad interfaceIndex 23

 

Error: (10/19/2014 11:49:14 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: ERROR: handle_resolve_request bad interfaceIndex 22

 

 

System errors:

=============

Error: (10/20/2014 01:48:07 PM) (Source: Service Control Manager) (EventID: 7026) (User: )

Description: The following boot-start or system-start driver(s) failed to load: 

amdkmafd

SASDIFSV

SASKUTIL

 

Error: (10/20/2014 01:48:07 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: The LiveUpdate service terminated unexpectedly.  It has done this 1 time(s).

 

Error: (10/20/2014 01:47:25 PM) (Source: SNMP) (EventID: 1500) (User: )

Description: The SNMP Service encountered an error while accessing the registry key SYSTEM\CurrentControlSet\Services\SNMP\Parameters\TrapConfiguration.

 

Error: (10/20/2014 01:45:47 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: The sbapifs service failed to start due to the following error: 

%%2

 

Error: (10/20/2014 01:45:34 PM) (Source: BTHUSB) (EventID: 5) (User: )

Description: The Bluetooth driver expected an HCI event with a certain size but did not receive it.

 

Error: (10/19/2014 04:29:18 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: The LiveUpdate service terminated unexpectedly.  It has done this 1 time(s).

 

Error: (10/19/2014 04:29:17 PM) (Source: Service Control Manager) (EventID: 7026) (User: )

Description: The following boot-start or system-start driver(s) failed to load: 

amdkmafd

SASDIFSV

SASKUTIL

 

Error: (10/19/2014 04:28:32 PM) (Source: SNMP) (EventID: 1500) (User: )

Description: The SNMP Service encountered an error while accessing the registry key SYSTEM\CurrentControlSet\Services\SNMP\Parameters\TrapConfiguration.

 

Error: (10/19/2014 04:26:32 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: The sbapifs service failed to start due to the following error: 

%%2

 

Error: (10/19/2014 04:26:18 PM) (Source: BTHUSB) (EventID: 5) (User: )

Description: The Bluetooth driver expected an HCI event with a certain size but did not receive it.

 

 

Microsoft Office Sessions:

=========================

Error: (10/20/2014 01:47:45 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

 

Error: (10/20/2014 01:33:31 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: chrome.exe37.0.2062.10354011f26unknown0.0.0.000000000c0000005000000002b0001cfec8bf5af8e64C:\Program Files (x86)\Google\Chrome\Application\chrome.exeunknown35551a06-587f-11e4-b4b6-f065dd641ea6

 

Error: (10/19/2014 06:21:06 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: chrome.exe37.0.2062.10354011f26chrome.exe37.0.2062.10354011f26c00004090004036610c001cfebeaf7949077C:\Program Files (x86)\Google\Chrome\Application\chrome.exeC:\Program Files (x86)\Google\Chrome\Application\chrome.exe3766d22d-57de-11e4-b4b6-f065dd641ea6

 

Error: (10/19/2014 05:21:11 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: CKScanner.exe2.4.2.1d4401cfebe2619e8c4540C:\Users\Nigel\Downloads\Geeks_To_Go_Help\CKScanner\CKScanner.exed3ff496d-57d5-11e4-b4b6-f065dd641ea6

 

Error: (10/19/2014 04:28:56 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

 

Error: (10/19/2014 03:50:28 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )

Description: 

Details:

AddLegacyDriverFiles: Unable to back up image of binary szkg5.

 

System Error:

The system cannot find the file specified.

 

Error: (10/19/2014 00:17:07 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )

Description: 

Details:

AddLegacyDriverFiles: Unable to back up image of binary szkg5.

 

System Error:

The system cannot find the file specified.

 

Error: (10/19/2014 11:49:14 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: ERROR: handle_resolve_request bad interfaceIndex 24

 

Error: (10/19/2014 11:49:14 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: ERROR: handle_resolve_request bad interfaceIndex 23

 

Error: (10/19/2014 11:49:14 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: ERROR: handle_resolve_request bad interfaceIndex 22

 

 

==================== Memory info =========================== 

 

Processor: AMD Athlon™ 7450 Dual-Core Processor

Percentage of memory in use: 40%

Total physical RAM: 8191.3 MB

Available physical RAM: 4903.27 MB

Total Pagefile: 20473.48 MB

Available Pagefile: 16756.57 MB

Total Virtual: 8192 MB

Available Virtual: 8191.85 MB

 

==================== Drives ================================

 

Drive c: (New Volume) (Fixed) (Total:298.09 GB) (Free:136.99 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

Drive k: () (Fixed) (Total:465.76 GB) (Free:180.45 GB) NTFS

 

==================== MBR & Partition Table ==================

 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: D93C5615)

Partition 1: (Active) - (Size=298.1 GB) - (Type=07 NTFS)

 

========================================================

Disk: 1 (Size: 465.8 GB) (Disk ID: DD63B194)

Partition 1: (Not Active) - (Size=465.8 GB) - (Type=42)

 

==================== End Of Log ============================

[Naathim]

Not bad, however I am swallowed by some another malware-relared projects. It's fun but also demanding




IOBit software warning!

I see that you are running some IOBit software. Although legitimate one, IOBit as a vendor is considered a rogue one here due to stealing Malwarebytes' interllectual property. This is only an information and a polite request to refrain from using its software. Whether you decide to do it or not, it's your call.


Uninstall some programs

We need to uninstall some programs.

• Press the + R on your keyboard at the same time. Type appwiz.cpl and click OK.
• Search there for each entry mentioned below, right-click the entry and click Uninstall one at a time

The list of programs to uninstall:

• Driver Booster
• IObit Apps Toolbar
• IObit Malware Fighter
• QuickShare
• Torch

After completing uninstalls, please manually reboot your machine!


Fix with Junkware Removal Tool

Please download JRT by Thisisu and save the file to your desktop.
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.

• Right-click on icon and select Run as Administrator to start the tool.
• Follow the prompts and let this process run uninterrupted.
• This scan can take a while, depending on your System specs.
• Upon completion, a log (JRT.txt) will open on your desktop.

Please include the contents of that file in your reply.
Do not forget to re-enable your previously switched off protection software!
Please also manually reboot your machine after this procedure.


Fix with AdwCleaner

Please download AdwCleaner by Xplode and save the file to your desktop.

• Right-click on icon and select Run as Administrator to start the tool.
• The program will begin to update the database (if internet connection is operational). Please wait a little bit.
• Follow the prompts and click Scan.
• When finished, please click Clean.
• Upon completion, click Report. A log (AdwCleaner[S*].txt) will open.

Please include the contents of that file in your reply.

[nfmaharaj]

It's good that you are enjoying the day. I really do appreciate you assisting me with this, especially knowing that you are busy doing your work as well. 

 

I tried uninstalling the IObit Apps Toolbar but got a pop up Windows Installer message stating "The feature you are trying to use is on a CD_ROM or other removable disk that is not available. Insert the IObit Apps Toolbar v8.3 disk and click OK....... 

 

What should I do?

[Naathim]

Skip it and proceed to the next one. I will kick it manually.

[nfmaharaj]

I am also getting the same error message in trying to uninstall QuickShare

[Naathim]

Do whatever you can, I will kill them in due course

[nfmaharaj]

If I unistall Torch I would not be able to communicate with you...... But everything else has been uninstalled desides.... IObits Toobar, QuickShare and Torch..... Should I continue onto the next step?

[nfmaharaj]

OK

[nfmaharaj]

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.3.3 (10.14.2014:1)
OS: Windows 7 Ultimate x64
Ran by Nigel on Mon 10/20/2014 at 15:47:22.83
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

~~~ Services

Successfully stopped: [Service] hshld
Successfully deleted: [Service] hshld
Successfully stopped: [Service] hsstrayservice
Successfully deleted: [Service] hsstrayservice
Successfully stopped: [Service] hsswd
Successfully deleted: [Service] hsswd
Successfully stopped: [Service] torchcrashhandler
Successfully deleted: [Service] torchcrashhandler

 

~~~ Registry Values

 

~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110211671166}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\MyBabylonTB_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\MyBabylonTB_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\ConduitInstaller_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\ConduitInstaller_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_for_google-talk_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_for_google-talk_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110211671166}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\MyBabylonTB_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\MyBabylonTB_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\ConduitInstaller_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\ConduitInstaller_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_for_google-talk_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_for_google-talk_RASMANCS

 

~~~ Files

Successfully deleted: [File] "C:\Users\Nigel\appdata\local\google\chrome\user data\default\local storage\http_www.superfish.com_0.localstorage"
Successfully deleted: [File] "C:\Users\Nigel\appdata\local\google\chrome\user data\default\local storage\http_www.superfish.com_0.localstorage-journal"
Successfully deleted: [File] "C:\Users\Nigel\appdata\local\google\chrome\user data\default\local storage\http_www.wajam.com_0.localstorage"
Successfully deleted: [File] "C:\Users\Nigel\appdata\local\google\chrome\user data\default\local storage\http_www.wajam.com_0.localstorage-journal"
Successfully deleted: [File] "C:\Program Files (x86)\mozilla firefox\nsprotector.js"
Successfully deleted: [File] "C:\Windows\wininit.ini"

 

~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\conduit"
Successfully deleted: [Folder] "C:\ProgramData\systweak"
Successfully deleted: [Folder] "C:\ProgramData\torchcrashhandler"
Successfully deleted: [Folder] "C:\Users\Nigel\AppData\Roaming\conduit"
Successfully deleted: [Folder] "C:\Users\Nigel\AppData\Roaming\dsite"
Successfully deleted: [Folder] "C:\Users\Nigel\AppData\Roaming\fixcleaner"
Successfully deleted: [Folder] "C:\Users\Nigel\AppData\Roaming\media finder"
Successfully deleted: [Folder] "C:\Users\Nigel\AppData\Roaming\systweak"
Successfully deleted: [Folder] "C:\Users\Nigel\appdata\local\chromatic browser"
Successfully deleted: [Folder] "C:\Users\Nigel\appdata\local\cool_mirage"
Successfully deleted: [Folder] "C:\Users\Nigel\appdata\local\cre"
Successfully deleted: [Folder] "C:\Users\Nigel\appdata\local\genienext"
Successfully deleted: [Folder] "C:\Users\Nigel\appdata\local\globalupdate"
Failed to delete: [Folder] "C:\Users\Nigel\appdata\local\torch"
Successfully deleted: [Folder] "C:\Users\Nigel\appdata\locallow\conduit"
Successfully deleted: [Folder] "C:\Program Files (x86)\bench"
Successfully deleted: [Folder] "C:\Program Files (x86)\conduit"
Successfully deleted: [Folder] "C:\Program Files (x86)\globalupdate"
Successfully deleted: [Folder] "C:\Program Files (x86)\zoom downloader"
Successfully deleted: [Folder] "C:\ai_recyclebin"
Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin"
Successfully deleted: [Folder] "C:\Users\Nigel\documents\optimizer pro"

 

~~~ FireFox

Successfully deleted: [File] C:\Users\Nigel\AppData\Roaming\mozilla\firefox\profiles\xxxk6g1a.default\user.js
Successfully deleted: [File] C:\Users\Nigel\AppData\Roaming\mozilla\firefox\profiles\xxxk6g1a.default\invalidprefs.js
Successfully deleted: [File] C:\Users\Nigel\AppData\Roaming\mozilla\firefox\profiles\xxxk6g1a.default\searchplugins\easylife.xml
Successfully deleted: [File] C:\Users\Nigel\AppData\Roaming\mozilla\firefox\profiles\xxxk6g1a.default\searchplugins\safeguard-secure-search.xml
Successfully deleted: [File] C:\Users\Nigel\AppData\Roaming\mozilla\firefox\profiles\xxxk6g1a.default\searchplugins\searchab.xml
Successfully deleted: [Folder] "C:\Program Files (x86)\Mozilla Firefox\extensions\[email protected]"
Successfully deleted: [Folder] C:\Users\Nigel\AppData\Roaming\mozilla\firefox\profiles\xxxk6g1a.default\extensions\staged

 

~~~ Event Viewer Logs were cleared

 

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Mon 10/20/2014 at 15:53:15.08
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

[nfmaharaj]

I also uninstall touch and communicating through ie...... below is the copy of the adware file

 

# AdwCleaner v4.000 - Report created 20/10/2014 at 16:55:22
# DB v2014-10-19.11
# Updated 12/10/2014 by Xplode
# Operating System : Windows 7 Ultimate Service Pack 1 (64 bits)
# Username : Nigel - NIGEL-PC
# Running from : C:\Users\Nigel\Desktop\AdwCleaner.exe
# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

Folder Deleted : C:\Users\Nigel\AppData\Roaming\CheckPoint\ZoneAlarm LTD Toolbar
Folder Deleted : C:\Users\Administrator\AppData\Local\Chromatic Browser
Folder Deleted : C:\Users\fbwuser\AppData\Local\Chromatic Browser
Folder Deleted : C:\Users\Guest\AppData\Local\Chromatic Browser
Folder Deleted : C:\Program Files (x86)\GetPrivate
Folder Deleted : C:\Program Files (x86)\IObit Apps Toolbar
Folder Deleted : C:\Program Files (x86)\JustCloud
Folder Deleted : C:\Users\Nigel\AppData\Roaming\PC TEKNIX
Folder Deleted : C:\Users\Guest\AppData\Roaming\Systweak
Folder Deleted : C:\Users\Nigel\Documents\Systweak
Folder Deleted : C:\Users\Administrator\AppData\Local\torch
Folder Deleted : C:\Users\fbwuser\AppData\Local\torch
Folder Deleted : C:\Users\Guest\AppData\Local\torch
Folder Deleted : C:\Users\Nigel\AppData\Local\torch
Folder Deleted : C:\Users\Nigel\AppData\Roaming\v9
Folder Deleted : C:\Users\Nigel\AppData\Roaming\Mozilla\Firefox\Profiles\xxxk6g1a.default\CT3289075
Folder Deleted : C:\Users\Nigel\AppData\Roaming\Mozilla\Firefox\Profiles\xxxk6g1a.default\Extensions\[email protected]
Folder Deleted : C:\Users\Nigel\AppData\Roaming\Mozilla\Firefox\Profiles\xxxk6g1a.default\Extensions\{96f454ea-9d38-474f-b504-56193e00c1a5}
File Deleted : C:\Users\Nigel\AppData\Roaming\Mozilla\Firefox\Profiles\xxxk6g1a.default\Extensions\[email protected]
File Deleted : C:\Users\Nigel\AppData\Roaming\Mozilla\Firefox\Profiles\xxxk6g1a.default\Extensions\[email protected]
File Deleted : C:\Users\Nigel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Torch.lnk
File Deleted : C:\Users\Nigel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Torch.lnk
File Deleted : C:\Windows\Reimage.ini
File Deleted : C:\Users\Nigel\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\searchplugins\safeguard-secure-search.xml
File Deleted : C:\Users\Nigel\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\user.js

***** [ Scheduled Tasks ] *****

Task Deleted : ReimageUpdater

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\*\shell\filescout
Key Deleted : HKLM\SOFTWARE\Classes\AppID\KeyDownload.DLL
Key Deleted : HKLM\SOFTWARE\Classes\Applications\Torch.exe
Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\Discount Buddy_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\Discount Buddy_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\privitizevpn_1_rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\privitizevpn_1_rasmancs
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\privitizevpn_rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\privitizevpn_rasmancs
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\strongvaultapp_rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\strongvaultapp_rasmancs
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\updateKozaka_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\updateKozaka_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\torch.exe
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@checkpoint.com/FFApi
Key Deleted : HKCU\Software\828dd0b535e842
Key Deleted : HKLM\SOFTWARE\828dd0b535e842
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C2178B36-2955-479B-818C-A2AE8E500454}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AF175732-0D59-716D-F757-9F1492D808D9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{03EB0E9C-7A91-4381-A220-9B52B641CDB1}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{03EB0E9C-7A91-4381-A220-9B52B641CDB1}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{7DDBC31B-22BD-4BBD-9F65-E8623814F3BB}
Value Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{03EB0E9C-7A91-4381-A220-9B52B641CDB1}]
Key Deleted : HKCU\Software\Adorika
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\dsiteproducts
Key Deleted : HKCU\Software\filescout
Key Deleted : HKCU\Software\InstalledThirdPartyPrograms
Key Deleted : HKCU\Software\PrivitizeVPNInstallDates
Key Deleted : HKCU\Software\Proxy
Key Deleted : HKCU\Software\StartSearch
Key Deleted : HKCU\Software\torch
Key Deleted : HKCU\Software\Tutorials
Key Deleted : HKCU\Software\Vittalia
Key Deleted : HKCU\Software\Reimage
Key Deleted : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Deleted : HKCU\Software\AppDataLow\Software\lyrixeeker
Key Deleted : HKLM\SOFTWARE\AdvertisingSupport
Key Deleted : HKLM\SOFTWARE\Conduit
Key Deleted : HKLM\SOFTWARE\torch
Key Deleted : HKLM\SOFTWARE\Uniblue
Key Deleted : [x64] HKLM\SOFTWARE\DivX\Install\Setup\WizardLayout\ConduitToolbar
Key Deleted : [x64] HKLM\SOFTWARE\InstalledThirdPartyPrograms
Key Deleted : [x64] HKLM\SOFTWARE\Reimage
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\30C16B15B255BD349A1157B8A83E2AF9
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3152E1F19977892449DC968802CE8964
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ED1CAE30F47D14B41B5FC8FA53658044
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\5E8031606EB60A64C882918F8FF38DD4

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17344

-\\ Mozilla Firefox v18.0.2 (en-US)

-\\ Google Chrome v

*************************

AdwCleaner[R0].txt - [7529 octets] - [20/10/2014 16:51:20]
AdwCleaner[S0].txt - [6791 octets] - [20/10/2014 16:55:22]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [6851 octets] ##########

[Naathim]

Hi
 
 
Torch is not your best choice. It has a reputation of being foistware and also containing adware capabilities. Our tools target it automatically because of that. 
I strongly suggest changing it to some another one, like Mozilla Firefox, Google Chrome or Opera. You can stay also with Internet Explorer if you wish to.



Scan with ZOEK

Please download ZOEK by Smeenk and save it to your desktop (preferred version is the *.exe one)
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.

• Right-click on icon and select Run as Administrator to start the tool.
• Wait patiently until the main console will appear, it may take a minute or two.
• In the main box please paste in the following script:
  

  createsrpoint;
  autoclean;
  process;
  services-list;
  systemspecs;
  startupall;
  skipfix-iedefaults;
  firefoxlook;
  chromelook;
  filesrcm;
  installedprogs;

• Make sure that Scan All Users option is checked.
• Push Run Script and wait patiently. The scan may take a couple of minutes.
• When the scan completes, a zoek-results logfile should open in notepad.
• If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)

Please include its content in your next reply.
Don't forget to re-enable your switched-off protection software!