[jeffcaissie]

i cant seem to remove bittorent and utorrent from my pc.

i want to remove both and re install one of them.

i'v downloaded them and installed them i dont know how many times since i started torrenting

i tried vuze but removed it, it seemed slower to me, for old pc

i cant find them in the uninstall programs list's <a few different uninstallers>

but bittorrent is still in my taskbar?

runing olt now

 

OTL logfile created on: 28/10/2014 1:45:21 AM - Run 1

OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Ffej.JEFF\Downloads

Windows Vista Home Basic Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation

Internet Explorer (Version = 9.0.8112.16421)

Locale: 00001009 | Country: Canada | Language: ENC | Date Format: dd/MM/yyyy

 

1.99 Gb Total Physical Memory | 0.85 Gb Available Physical Memory | 42.78% Memory free

4.27 Gb Paging File | 3.03 Gb Available in Paging File | 71.02% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files

Drive C: | 136.74 Gb Total Space | 83.80 Gb Free Space | 61.28% Space Free | Partition Type: NTFS

Drive H: | 931.51 Gb Total Space | 328.05 Gb Free Space | 35.22% Space Free | Partition Type: NTFS

Drive I: | 931.48 Gb Total Space | 137.90 Gb Free Space | 14.80% Space Free | Partition Type: NTFS

 

Computer Name: JEFF | User Name: Levi | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user | Quick Scan

Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

 

========== Processes (SafeList) ==========

 

PRC - [2014/10/28 01:43:44 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Ffej.JEFF\Downloads\OTL.exe

PRC - [2014/10/16 05:49:09 | 001,775,216 | ---- | M] () -- C:\Program Files\360\Total Security\safemon\QHSafeTray.exe

PRC - [2014/10/16 05:49:09 | 000,707,184 | ---- | M] () -- C:\Program Files\360\Total Security\safemon\QHActiveDefense.exe

PRC - [2014/10/16 05:49:09 | 000,315,208 | ---- | M] (Qihu 360 Software Co., Ltd.) -- C:\Program Files\360\Total Security\safemon\chrome\360webshield.exe

PRC - [2014/10/13 02:36:46 | 001,692,248 | ---- | M] (BitTorrent Inc.) -- C:\Users\Ffej.JEFF\AppData\Roaming\BitTorrent\BitTorrent.exe

PRC - [2014/10/09 23:04:06 | 000,854,344 | -H-- | M] (Google Inc.) -- C:\Program Files\Google\Chrome\Application\chrome.exe

PRC - [2014/09/03 18:53:45 | 000,734,480 | -H-- | M] (Reason Software Company Inc.) -- C:\Program Files\Reason\Should I Remove It\ShouldIRemoveIt.exe

PRC - [2014/07/22 20:47:10 | 000,142,648 | -H-- | M] (SUPERAntiSpyware.com) -- C:\Program Files\SUPERAntiSpyware\SASCore.exe

PRC - [2012/11/22 11:29:16 | 003,290,304 | ---- | M] (Skype Technologies S.A.) -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe

PRC - [2009/04/11 03:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe

PRC - [2009/04/11 03:27:28 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conime.exe

PRC - [2008/09/12 14:01:28 | 000,354,840 | -H-- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe

PRC - [2008/01/20 23:33:22 | 000,318,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cmd.exe

PRC - [2008/01/20 23:33:11 | 000,097,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\OptionalFeatures.exe

PRC - [2007/09/20 15:31:10 | 000,073,728 | ---- | M] (Andrea Electronics Corporation) -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_c09c50a2\AEstSrv.exe

 

 

========== Modules (No Company Name) ==========

 

MOD - [2014/10/17 05:03:02 | 000,978,944 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\a98a13deac020eca5e7dcb5ebb2b7414\System.Configuration.ni.dll

MOD - [2014/10/17 03:40:57 | 005,465,088 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\8f9bf2f35ac8e4ddb989c181537cbc97\System.Xml.ni.dll

MOD - [2014/10/17 03:40:18 | 012,433,920 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\f32d5986039f142f6e4f412de7c8901c\System.Windows.Forms.ni.dll

MOD - [2014/10/17 03:40:00 | 001,593,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\65897bde93bce2462330f19ef677477d\System.Drawing.ni.dll

MOD - [2014/10/17 03:39:28 | 002,295,808 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\f5cc4bbf8e80da9c4d7970a7b3ca6e60\System.Core.ni.dll

MOD - [2014/10/17 03:38:26 | 007,977,984 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\cf2c94955471d68d3708b1fbf613ae46\System.ni.dll

MOD - [2014/10/16 05:49:09 | 001,775,216 | ---- | M] () -- C:\Program Files\360\Total Security\safemon\QHSafeTray.exe

MOD - [2014/10/16 05:49:09 | 000,207,472 | ---- | M] () -- C:\Program Files\360\Total Security\MenuEx.dll

MOD - [2014/10/09 23:04:02 | 008,910,664 | -H-- | M] () -- C:\Program Files\Google\Chrome\Application\38.0.2125.104\pdf.dll

MOD - [2014/10/09 23:03:53 | 001,681,224 | -H-- | M] () -- C:\Program Files\Google\Chrome\Application\38.0.2125.104\ffmpegsumo.dll

MOD - [2014/09/12 03:55:52 | 000,220,672 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\55a948cafbc7155c6b03d96062768256\CustomMarshalers.ni.dll

MOD - [2014/09/12 03:49:54 | 011,496,960 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\3444fbefcbd532181c499150ace644a4\mscorlib.ni.dll

MOD - [2014/05/07 20:41:59 | 000,069,120 | ---- | M] () -- C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll

MOD - [2014/02/10 13:44:24 | 004,592,128 | ---- | M] () -- C:\Users\Ffej.JEFF\AppData\Local\Google\Chrome\User Data\SwiftShader\3.2.6.45159\libGLESv2.dll

MOD - [2014/02/10 13:44:24 | 000,112,128 | ---- | M] () -- C:\Users\Ffej.JEFF\AppData\Local\Google\Chrome\User Data\SwiftShader\3.2.6.45159\libEGL.dll

 

 

========== Services (SafeList) ==========

 

SRV - File not found [Auto | Stopped] -- C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe -- (PCToolsSSDMonitorSvc)

SRV - [2014/10/21 21:58:30 | 000,267,440 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)

SRV - [2014/10/16 05:49:09 | 000,707,184 | ---- | M] () [Auto | Running] -- C:\Program Files\360\Total Security\safemon\QHActiveDefense.exe -- (QHActiveDefense)

SRV - [2014/07/22 20:47:10 | 000,142,648 | -H-- | M] (SUPERAntiSpyware.com) [Auto | Running] -- C:\Program Files\SUPERAntiSpyware\SASCore.exe -- (!SASCORE)

SRV - [2013/10/23 08:15:08 | 000,172,192 | RH-- | M] (Skype Technologies) [On_Demand | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)

SRV - [2012/11/22 11:29:16 | 003,290,304 | ---- | M] (Skype Technologies S.A.) [Auto | Running] -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe -- (Skype C2C Service)

SRV - [2008/09/12 14:01:28 | 000,354,840 | -H-- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON)

SRV - [2008/01/20 23:33:00 | 000,272,952 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)

SRV - [2007/09/20 15:31:10 | 000,073,728 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_c09c50a2\AEstSrv.exe -- (AESTFilters)

 

 

========== Driver Services (SafeList) ==========

 

DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)

DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)

DRV - File not found [Kernel | System | Stopped] -- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{0E187DA8-CDE6-4C31-982A-429A82088D17}\MpKslae665d72.sys -- (MpKslae665d72)

DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp)

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\Ffej\AppData\Local\Temp\catchme.sys -- (catchme)

DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\BCM42RLY.sys -- (BCM42RLY)

DRV - [2014/10/16 05:49:09 | 000,202,312 | ---- | M] (360.cn) [File_System | System | Running] -- C:\Windows\System32\drivers\360Box.sys -- (360Box)

DRV - [2014/10/16 05:49:09 | 000,174,536 | ---- | M] (360安全中心) [Kernel | System | Running] -- C:\Windows\System32\drivers\360SelfProtection.sys -- (360SelfProtection)

DRV - [2014/10/16 05:49:09 | 000,088,136 | ---- | M] (360.cn) [Kernel | System | Running] -- C:\Windows\System32\drivers\360AntiHacker.sys -- (360AntiHacker)

DRV - [2014/10/16 05:49:09 | 000,054,856 | ---- | M] (360安全中心) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\hookport.sys -- (HookPort)

DRV - [2014/10/16 05:49:09 | 000,045,896 | ---- | M] (360.cn) [Kernel | System | Running] -- C:\Windows\System32\drivers\qutmipc.sys -- (qutmipc)

DRV - [2014/10/16 05:49:09 | 000,034,888 | ---- | M] (360.cn) [Kernel | System | Running] -- C:\Windows\System32\drivers\360Camera.sys -- (360Camera)

DRV - [2014/10/16 05:49:08 | 000,257,352 | ---- | M] (360.cn) [Kernel | System | Running] -- C:\Windows\System32\drivers\qutmdrv.sys -- (qutmdserv)

DRV - [2014/10/16 05:49:08 | 000,165,968 | ---- | M] (Qihu 360 Software Co., Ltd.) [Kernel | System | Running] -- C:\Windows\System32\drivers\BAPIDRV.SYS -- (BAPIDRV)

DRV - [2014/10/16 05:49:08 | 000,065,608 | ---- | M] (360.cn) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\360AvFlt.sys -- (360AvFlt)

DRV - [2014/10/16 05:49:08 | 000,023,752 | ---- | M] (360安全中心) [Kernel | System | Running] -- C:\Windows\System32\drivers\efimon.sys -- (EfiMon)

DRV - [2014/06/27 03:59:18 | 000,116,320 | ---- | M] (Power Software Ltd) [Kernel | System | Running] -- C:\Windows\System32\drivers\scdemu.sys -- (SCDEmu)

DRV - [2014/03/04 00:44:53 | 000,042,784 | ---- | M] (AVG Technologies) [Kernel | System | Running] -- C:\Windows\System32\drivers\avgtpx86.sys -- (avgtp)

DRV - [2011/07/22 13:27:02 | 000,012,880 | -H-- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\sasdifsv.sys -- (SASDIFSV)

DRV - [2011/07/12 18:55:22 | 000,067,664 | -H-- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL)

DRV - [2008/05/06 17:06:00 | 000,011,520 | ---- | M] (Western Digital Technologies) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\wdcsam.sys -- (WDC_SAM)

DRV - [2008/02/15 18:27:02 | 000,330,752 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\stwrt.sys -- (STHDA)

DRV - [2007/10/11 03:03:00 | 000,235,648 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\OEM02Dev.sys -- (OEM02Dev)

DRV - [2007/06/07 01:21:32 | 000,111,616 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\IntcHdmi.sys -- (IntcHdmiAddService)

DRV - [2007/03/22 00:02:04 | 000,037,376 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rixdptsk.sys -- (rismxdp)

DRV - [2007/03/05 20:45:04 | 000,007,424 | ---- | M] (EyePower Games Pte. Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\OEM02Vfx.sys -- (OEM02Vfx)

DRV - [2007/02/24 16:42:22 | 000,039,936 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimmptsk.sys -- (rimmptsk)

DRV - [2007/01/23 18:40:20 | 000,042,496 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimsptsk.sys -- (rimsptsk)

DRV - [2006/08/04 18:39:10 | 000,008,192 | ---- | M] (Conexant Systems, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\XAudio.sys -- (XAudio)

 

 

========== Standard Registry (SafeList) ==========

 

 

========== Internet Explorer ==========

 

IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC

 

IE - HKCU\..\SearchScopes,DefaultScope = {012E1000-F331-11DB-8314-0800200C9A66}

IE - HKCU\..\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66}: "URL" = http://www.google.co...q={searchTerms}

IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...Box&FORM=IE8SRC

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 

 

========== FireFox ==========

 

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_189.dll ()

FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.5: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

 

 

[2013/09/21 21:20:57 | 000,000,000 | -H-D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions

 

========== Chrome  ==========

 

CHR - plugin: Error reading preferences file

CHR - Extension: No name found = C:\Users\Levi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.7_0\

CHR - Extension: No name found = C:\Users\Levi\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\

CHR - Extension: No name found = C:\Users\Levi\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_0\

CHR - Extension: No name found = C:\Users\Levi\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\

CHR - Extension: No name found = C:\Users\Levi\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\

CHR - Extension: No name found = C:\Users\Levi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\

CHR - Extension: No name found = C:\Users\Levi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie\0.9.9.145_0\

CHR - Extension: No name found = C:\Users\Levi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\

 

O1 HOSTS File: ([2014/10/26 13:31:33 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts

O1 - Hosts: 127.0.0.1       localhost

O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O4 - HKLM..\Run: [QHSafeTray] C:\Program Files\360\Total Security\safemon\QHSafeTray.exe ()

O4 - HKCU..\Run: [CCleaner] C:\Program Files\CCleaner\CCleaner.exe (Piriform Ltd)

O4 - HKCU..\Run: [uTorrent] C:\Users\Ffej.JEFF\Downloads\uTorrent.exe (BitTorrent Inc.)

O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present

O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0

O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O15 - HKCU\..Trusted Domains: dell.com ([]* in Trusted sites)

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.m...ent/swflash.cab (Shockwave Flash Object)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 192.168.2.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4677A2ED-8C25-4D3D-B8D9-0CC0CBA7D855}: DhcpNameServer = 192.168.2.1 192.168.2.1

O18 - Protocol\Handler\linkscanner - No CLSID value found

O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)

O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)

O24 - Desktop WallPaper: C:\Users\Public\Pictures\Sample Pictures\Oryx Antelope.jpg

O24 - Desktop BackupWallPaper: C:\Users\Public\Pictures\Sample Pictures\Oryx Antelope.jpg

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2006/09/18 18:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]

O34 - HKLM BootExecute: (autocheck autochk *)

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)

O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

 

========== Files/Folders - Created Within 30 Days ==========

 

[2014/10/28 01:14:08 | 000,000,000 | ---D | C] -- C:\Users\Levi\AppData\Roaming\Registry Mechanic

[2014/10/28 01:01:15 | 000,000,000 | ---D | C] -- C:\Program Files\Registry Mechanic

[2014/10/28 01:01:15 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\PC Tools

[2014/10/27 23:19:02 | 000,000,000 | ---D | C] -- C:\Users\Levi\AppData\Local\Temp

[2014/10/27 22:43:50 | 000,000,000 | ---D | C] -- C:\Users\Levi\AppData\Roaming\RHEng

[2014/10/27 22:43:06 | 000,000,000 | ---D | C] -- C:\Users\Levi\AppData\Roaming\OpenCandy

[2014/10/27 22:12:47 | 000,000,000 | ---D | C] -- C:\Users\Levi\AppData\Roaming\uTorrent

[2014/10/27 19:43:07 | 000,000,000 | ---D | C] -- C:\ProgramData\APN

[2014/10/27 03:46:15 | 000,000,000 | -H-D | C] -- C:\Program Files\BitLocker

[2014/10/27 01:31:35 | 000,000,000 | -HSD | C] -- C:\Windows\System32\AI_RecycleBin

[2014/10/27 01:31:30 | 000,000,000 | -H-D | C] -- C:\Program Files\Reason

[2014/10/27 01:31:30 | 000,000,000 | ---D | C] -- C:\Users\Levi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Should I Remove It

[2014/10/27 01:02:13 | 000,000,000 | -H-D | C] -- C:\Program Files\Perfect Uninstaller

[2014/10/26 23:30:54 | 000,000,000 | -H-D | C] -- C:\Program Files\Toolwiz Smart Defrag FREE

[2014/10/26 23:30:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Toolwiz Smart Defrag FREE

[2014/10/26 23:29:23 | 000,000,000 | ---D | C] -- C:\Users\Levi\AppData\Roaming\CrystalIdea Software

[2014/10/26 23:27:05 | 000,000,000 | ---D | C] -- C:\Users\Levi\AppData\Roaming\WinRAR

[2014/10/26 23:25:51 | 000,000,000 | ---D | C] -- C:\Users\Levi\AppData\Local\VirtualStore

[2014/10/26 23:25:40 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN

[2014/10/26 23:23:46 | 000,000,000 | ---D | C] -- C:\Windows\Temp

[2014/10/26 18:54:48 | 000,000,000 | -H-D | C] -- C:\Program Files\QuickPar

[2014/10/26 18:54:48 | 000,000,000 | ---D | C] -- C:\Users\Levi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\QuickPar

[2014/10/26 18:54:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickPar

[2014/10/25 23:04:46 | 000,000,000 | -HSD | C] -- C:\ProgramData\360Quarant

[2014/10/25 23:04:46 | 000,000,000 | -HSD | C] -- C:\$360Section

[2014/10/25 22:23:53 | 000,000,000 | -HSD | C] -- C:\Users\Levi\AppData\Roaming\360Quarant

[2014/10/25 22:19:11 | 000,000,000 | ---D | C] -- C:\Windows\tasks\360Disabled

[2014/10/25 22:19:09 | 000,000,000 | ---D | C] -- C:\Users\Levi\AppData\Roaming\360safe

[2014/10/25 22:18:21 | 000,065,608 | ---- | C] (360.cn) -- C:\Windows\System32\drivers\360AvFlt.sys

[2014/10/25 22:18:07 | 000,045,896 | ---- | C] (360.cn) -- C:\Windows\System32\drivers\qutmipc.sys

[2014/10/25 22:18:07 | 000,000,000 | RHSD | C] -- C:\360SANDBOX

[2014/10/25 22:18:04 | 000,000,000 | ---D | C] -- C:\ProgramData\360safe

[2014/10/25 22:18:02 | 000,174,536 | ---- | C] (360安全中心) -- C:\Windows\System32\drivers\360SelfProtection.sys

[2014/10/25 22:17:57 | 000,034,888 | ---- | C] (360.cn) -- C:\Windows\System32\drivers\360Camera.sys

[2014/10/25 22:17:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\360 Security Center

[2014/10/25 22:17:56 | 000,088,136 | ---- | C] (360.cn) -- C:\Windows\System32\drivers\360AntiHacker.sys

[2014/10/25 22:17:55 | 000,165,968 | ---- | C] (Qihu 360 Software Co., Ltd.) -- C:\Windows\System32\drivers\BAPIDRV.SYS

[2014/10/25 22:17:51 | 000,257,352 | ---- | C] (360.cn) -- C:\Windows\System32\drivers\qutmdrv.sys

[2014/10/25 22:17:51 | 000,054,856 | ---- | C] (360安全中心) -- C:\Windows\System32\drivers\hookport.sys

[2014/10/25 22:17:51 | 000,023,752 | ---- | C] (360安全中心) -- C:\Windows\System32\drivers\efimon.sys

[2014/10/25 22:17:50 | 000,202,312 | ---- | C] (360.cn) -- C:\Windows\System32\drivers\360Box.sys

[2014/10/25 22:16:54 | 000,000,000 | -H-D | C] -- C:\Program Files\360

[2014/10/25 20:33:22 | 000,000,000 | ---D | C] -- C:\zoek_backup

[2014/10/25 20:17:14 | 000,000,000 | ---D | C] -- C:\AdwCleaner

[2014/10/21 22:09:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

[2014/10/21 22:09:41 | 000,000,000 | -H-D | C] -- C:\Program Files\Common Files\Skype

[2014/10/21 22:04:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC-HC

[2014/10/21 22:04:12 | 000,000,000 | -H-D | C] -- C:\Program Files\MPC-HC

[2014/10/21 21:33:39 | 000,000,000 | -H-D | C] -- C:\Program Files\Secunia

[2014/10/13 02:56:33 | 000,000,000 | ---D | C] -- C:\Users\Levi\AppData\Roaming\vlc

[2014/10/13 01:34:01 | 000,000,000 | ---D | C] -- C:\Users\Levi\AppData\Local\Apps

[2014/10/13 01:34:00 | 000,000,000 | ---D | C] -- C:\Users\Levi\AppData\Local\Deployment

[2014/10/13 01:27:42 | 000,000,000 | ---D | C] -- C:\Users\Levi\AppData\Roaming\QuickScan

[2014/10/13 01:05:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell Webcam

[2014/10/12 23:24:57 | 000,000,000 | ---D | C] -- C:\Users\Levi\AppData\Roaming\Skype

 

========== Files - Modified Within 30 Days ==========

 

[2014/10/28 01:35:27 | 000,003,840 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0

[2014/10/28 01:35:27 | 000,003,840 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0

[2014/10/28 01:35:21 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat

[2014/10/28 01:07:41 | 001,019,904 | ---- | M] () -- C:\Users\Levi\s-1-5-21-3345878006-48315690-652183031-1003.rrr

[2014/10/27 23:17:42 | 000,274,496 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT

[2014/10/27 22:43:07 | 000,000,736 | ---- | M] () -- C:\Users\Levi\Application Data\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk

[2014/10/27 22:43:06 | 000,000,756 | ---- | M] () -- C:\Users\Levi\Desktop\µTorrent.lnk

[2014/10/27 19:15:27 | 000,110,296 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\MBAMSwissArmy.sys

[2014/10/27 01:02:22 | 000,000,042 | ---- | M] () -- C:\Windows\System32\AK083E209605E394C.lie

[2014/10/26 22:59:56 | 000,024,064 | ---- | M] () -- C:\Windows\zoek-delete.exe

[2014/10/26 18:59:20 | 000,647,880 | ---- | M] () -- C:\Windows\System32\perfh009.dat

[2014/10/26 18:59:20 | 000,124,848 | ---- | M] () -- C:\Windows\System32\perfc009.dat

[2014/10/26 18:54:48 | 000,000,804 | ---- | M] () -- C:\Users\Levi\Desktop\QuickPar.lnk

[2014/10/26 12:54:38 | 000,001,945 | ---- | M] () -- C:\Windows\epplauncher.mif

[2014/10/25 22:17:57 | 000,000,942 | ---- | M] () -- C:\Users\Levi\Desktop\360 Total Security.lnk

[2014/10/25 20:59:11 | 000,000,008 | RHS- | M] () -- C:\ProgramData\ntuser.pol

[2014/10/25 18:38:59 | 002,794,248 | ---- | M] () -- C:\Users\Levi\Documents\rp1.html

[2014/10/25 18:35:39 | 000,041,567 | ---- | M] () -- C:\ProgramData\1414272623.1956.bin

[2014/10/25 18:35:38 | 000,000,339 | ---- | M] () -- C:\ProgramData\1414272623.3104.bin

[2014/10/25 18:30:32 | 000,002,049 | ---- | M] () -- C:\ProgramData\1414272623.2264.bin

[2014/10/21 22:15:21 | 000,000,859 | ---- | M] () -- C:\Users\Public\Desktop\VLC media player.lnk

[2014/10/21 22:09:42 | 000,002,487 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk

[2014/10/21 22:04:18 | 000,001,660 | ---- | M] () -- C:\Users\Public\Desktop\MPC-HC.lnk

[2014/10/18 05:44:24 | 000,001,975 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk

[2014/10/16 05:49:09 | 000,202,312 | ---- | M] (360.cn) -- C:\Windows\System32\drivers\360Box.sys

[2014/10/16 05:49:09 | 000,174,536 | ---- | M] (360安全中心) -- C:\Windows\System32\drivers\360SelfProtection.sys

[2014/10/16 05:49:09 | 000,088,136 | ---- | M] (360.cn) -- C:\Windows\System32\drivers\360AntiHacker.sys

[2014/10/16 05:49:09 | 000,054,856 | ---- | M] (360安全中心) -- C:\Windows\System32\drivers\hookport.sys

[2014/10/16 05:49:09 | 000,045,896 | ---- | M] (360.cn) -- C:\Windows\System32\drivers\qutmipc.sys

[2014/10/16 05:49:09 | 000,034,888 | ---- | M] (360.cn) -- C:\Windows\System32\drivers\360Camera.sys

[2014/10/16 05:49:08 | 000,257,352 | ---- | M] (360.cn) -- C:\Windows\System32\drivers\qutmdrv.sys

[2014/10/16 05:49:08 | 000,165,968 | ---- | M] (Qihu 360 Software Co., Ltd.) -- C:\Windows\System32\drivers\BAPIDRV.SYS

[2014/10/16 05:49:08 | 000,065,608 | ---- | M] (360.cn) -- C:\Windows\System32\drivers\360AvFlt.sys

[2014/10/16 05:49:08 | 000,023,752 | ---- | M] (360安全中心) -- C:\Windows\System32\drivers\efimon.sys

[2014/10/13 01:19:16 | 000,000,938 | ---- | M] () -- C:\Users\Levi\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk

 

========== Files Created - No Company Name ==========

 

[2014/10/28 01:07:41 | 001,019,904 | ---- | C] () -- C:\Users\Levi\s-1-5-21-3345878006-48315690-652183031-1003.rrr

[2014/10/27 23:17:05 | 000,274,496 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT

[2014/10/27 22:43:07 | 000,000,736 | ---- | C] () -- C:\Users\Levi\Application Data\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk

[2014/10/27 22:43:06 | 000,000,756 | ---- | C] () -- C:\Users\Levi\Desktop\µTorrent.lnk

[2014/10/27 01:02:22 | 000,000,042 | ---- | C] () -- C:\Windows\System32\AK083E209605E394C.lie

[2014/10/26 23:23:47 | 000,024,064 | ---- | C] () -- C:\Windows\zoek-delete.exe

[2014/10/26 18:54:48 | 000,000,804 | ---- | C] () -- C:\Users\Levi\Desktop\QuickPar.lnk

[2014/10/25 22:17:57 | 000,000,942 | ---- | C] () -- C:\Users\Levi\Desktop\360 Total Security.lnk

[2014/10/25 19:15:04 | 002,794,248 | ---- | C] () -- C:\Users\Levi\Documents\rp1.html

[2014/10/25 18:30:31 | 000,000,339 | ---- | C] () -- C:\ProgramData\1414272623.3104.bin

[2014/10/25 18:30:29 | 000,002,049 | ---- | C] () -- C:\ProgramData\1414272623.2264.bin

[2014/10/25 18:30:23 | 000,041,567 | ---- | C] () -- C:\ProgramData\1414272623.1956.bin

[2014/10/21 22:09:42 | 000,002,487 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk

[2014/10/21 22:04:18 | 000,001,660 | ---- | C] () -- C:\Users\Public\Desktop\MPC-HC.lnk

[2014/10/13 01:19:16 | 000,000,938 | ---- | C] () -- C:\Users\Levi\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk

[2014/08/15 21:54:26 | 000,053,248 | ---- | C] () -- C:\Windows\System32\zlib.dll

[2014/08/06 17:52:35 | 000,018,872 | ---- | C] () -- C:\Windows\System32\drivers\SPPD.sys

[2014/02/15 15:27:12 | 000,000,008 | RHS- | C] () -- C:\ProgramData\ntuser.pol

 

========== ZeroAccess Check ==========

 

[2006/11/02 09:51:16 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

 

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

 

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

"" = %SystemRoot%\system32\shell32.dll -- [2014/03/25 10:26:04 | 011,587,584 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]

"" = %systemroot%\system32\wbem\fastprox.dll -- [2009/04/11 03:28:19 | 000,614,912 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

"" = %systemroot%\system32\wbem\wbemess.dll -- [2009/04/11 03:28:25 | 000,347,648 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Both

 

========== LOP Check ==========

 

[2014/10/28 00:57:20 | 000,000,000 | -HSD | M] -- C:\Users\Levi\AppData\Roaming\360Quarant

[2014/10/26 00:19:51 | 000,000,000 | ---D | M] -- C:\Users\Levi\AppData\Roaming\360safe

[2014/08/16 00:51:36 | 000,000,000 | ---D | M] -- C:\Users\Levi\AppData\Roaming\AVG

[2014/10/26 23:29:23 | 000,000,000 | ---D | M] -- C:\Users\Levi\AppData\Roaming\CrystalIdea Software

[2014/10/27 22:43:06 | 000,000,000 | ---D | M] -- C:\Users\Levi\AppData\Roaming\OpenCandy

[2014/10/13 01:27:46 | 000,000,000 | ---D | M] -- C:\Users\Levi\AppData\Roaming\QuickScan

[2014/10/28 01:14:08 | 000,000,000 | ---D | M] -- C:\Users\Levi\AppData\Roaming\Registry Mechanic

[2014/10/27 22:43:51 | 000,000,000 | ---D | M] -- C:\Users\Levi\AppData\Roaming\RHEng

[2014/10/28 01:22:34 | 000,000,000 | ---D | M] -- C:\Users\Levi\AppData\Roaming\uTorrent

 

========== Purity Check ==========

 

 

 

========== Alternate Data Streams ==========

 

@Alternate Data Stream - 139 bytes -> C:\ProgramData\TEMP:D1B5B4F1

@Alternate Data Stream - 129 bytes -> C:\ProgramData\TEMP:CB0AACC9

@Alternate Data Stream - 118 bytes -> C:\ProgramData\TEMP:373E1720

 

< End of report >

 

 

 

 

 

OTL Extras logfile created on: 28/10/2014 1:45:21 AM - Run 1

OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Ffej.JEFF\Downloads

Windows Vista Home Basic Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation

Internet Explorer (Version = 9.0.8112.16421)

Locale: 00001009 | Country: Canada | Language: ENC | Date Format: dd/MM/yyyy

 

1.99 Gb Total Physical Memory | 0.85 Gb Available Physical Memory | 42.78% Memory free

4.27 Gb Paging File | 3.03 Gb Available in Paging File | 71.02% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files

Drive C: | 136.74 Gb Total Space | 83.80 Gb Free Space | 61.28% Space Free | Partition Type: NTFS

Drive H: | 931.51 Gb Total Space | 328.05 Gb Free Space | 35.22% Space Free | Partition Type: NTFS

Drive I: | 931.48 Gb Total Space | 137.90 Gb Free Space | 14.80% Space Free | Partition Type: NTFS

 

Computer Name: JEFF | User Name: Levi | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user | Quick Scan

Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

 

========== Extra Registry (SafeList) ==========

 

 

========== File Associations ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.chm [@ = Reg Error: Key error.] -- Reg Error: Key error. File not found

.cpl [@ = CryptoPreventCPL] -- Reg Error: Value error. File not found

.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)

.html [@ = ChromeHTML] -- C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.)

.pif [@ = CryptoPreventPIF] -- Reg Error: Value error. File not found

.scr [@ = CryptoPreventSCR] -- "C:\Program Files\Foolish IT\CryptoPrevent\CryptoPreventFilterMod.CryptoPreventEXEC" "%1" /S %*

 

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]

.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

 

========== Shell Spawning ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*

exefile [open] -- "%1" %*

helpfile [open] -- Reg Error: Key error.

hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)

htmlfile [edit] -- Reg Error: Key error.

https [open] -- "C:\Program Files\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)

inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)

Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)

Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)

Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)

Directory [Winamp.Play] -- "C:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)

Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)

Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

 

========== Security Center Settings ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

"cval" = 1

"FirewallDisableNotify" = 0

"AntiVirusDisableNotify" = 0

"UpdatesDisableNotify" = 0

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

"AntiVirusOverride" = 0

"AntiSpywareOverride" = 0

"FirewallOverride" = 0

"VistaSp1" = Reg Error: Unknown registry data type -- File not found

"VistaSp2" = Reg Error: Unknown registry data type -- File not found

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\S-1-5-21-3345878006-48315690-652183031-1005]

"EnableNotificationsRef" = 1

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

 

========== System Restore Settings ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]

"DisableSR" = 0

 

========== Firewall Settings ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

"EnableFirewall" = 1

"DisableNotifications" = 0

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

"EnableFirewall" = 1

"DisableNotifications" = 0

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]

"EnableFirewall" = 1

"DisableNotifications" = 0

 

========== Authorized Applications List ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]

 

 

========== Vista Active Open Ports Exception List ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

"{21C97BD1-D8CD-4B85-9292-70CCB30E1983}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\google\chrome\application\chrome.exe | 

 

========== Vista Active Application Exception List ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

"{113476D5-067A-44CF-9471-5413CF1A37C1}" = protocol=17 | dir=in | app=c:\users\ffej.jeff\downloads\utorrent.exe | 

"{18BB9AA5-F590-46BB-9F67-25F4FB1AF6C4}" = dir=in | app=c:\program files\skype\phone\skype.exe | 

"{5D6DD586-A1A4-4EF1-9D5D-9852AAA89B27}" = protocol=6 | dir=in | app=c:\program files\360\total security\safemon\qhsafetray.exe | 

"{65D7C30B-96E5-48A4-90AF-A2A323C563F5}" = protocol=17 | dir=in | app=c:\program files\360\total security\safemon\qhsafetray.exe | 

"{7237A9AA-9181-49E4-8255-5CC7287CBB5D}" = protocol=17 | dir=in | app=c:\program files\360\total security\liveupdate360.exe | 

"{A8FD3528-3EDE-4113-B129-15AE25E34FC9}" = protocol=6 | dir=in | app=c:\program files\360\total security\liveupdate360.exe | 

"{E77D0116-FA50-4A7B-9E5D-F79D0EB23C32}" = protocol=17 | dir=in | app=c:\program files\360\total security\liveupdate360.exe | 

"{F21338DC-0AAC-444D-A6D0-6E4FC358A7AF}" = protocol=6 | dir=in | app=c:\users\ffej.jeff\downloads\utorrent.exe | 

"{FB581811-8FBB-41C3-924B-C1DD2F03AA54}" = protocol=6 | dir=in | app=c:\program files\360\total security\liveupdate360.exe | 

"TCP Query User{0D0D3D12-9167-4D83-A614-43B568907756}C:\program files\winamp\winamp.exe" = protocol=6 | dir=in | app=c:\program files\winamp\winamp.exe | 

"TCP Query User{20DFB5C5-7A42-459A-A15D-3E6E90C9E84C}C:\users\ffej.jeff\downloads\utorrent.exe" = protocol=6 | dir=in | app=c:\users\ffej.jeff\downloads\utorrent.exe | 

"TCP Query User{61C73E69-0DD7-4F96-8286-0A4EC98F0F6F}C:\program files\winamp\winamp.exe" = protocol=6 | dir=in | app=c:\program files\winamp\winamp.exe | 

"TCP Query User{83A01B5A-904E-4261-B2CB-4877BC6CD868}C:\users\ffej.jeff\appdata\roaming\bittorrent\bittorrent.exe" = protocol=6 | dir=in | app=c:\users\ffej.jeff\appdata\roaming\bittorrent\bittorrent.exe | 

"TCP Query User{FDD87216-1372-48FB-BAFE-79E083E12F4B}C:\users\ffej.jeff\appdata\roaming\bittorrent\bittorrent.exe" = protocol=6 | dir=in | app=c:\users\ffej.jeff\appdata\roaming\bittorrent\bittorrent.exe | 

"UDP Query User{0013B152-32D2-4C4D-B90A-25696A701944}C:\users\ffej.jeff\downloads\utorrent.exe" = protocol=17 | dir=in | app=c:\users\ffej.jeff\downloads\utorrent.exe | 

"UDP Query User{16952DC7-6B84-4D23-8B7D-CDF68B702575}C:\users\ffej.jeff\appdata\roaming\bittorrent\bittorrent.exe" = protocol=17 | dir=in | app=c:\users\ffej.jeff\appdata\roaming\bittorrent\bittorrent.exe | 

"UDP Query User{4D5A4789-5DFD-4062-80AE-A44829FD8060}C:\program files\winamp\winamp.exe" = protocol=17 | dir=in | app=c:\program files\winamp\winamp.exe | 

"UDP Query User{6811E4F7-9375-456C-9B4E-F5D21A0EA4F6}C:\users\ffej.jeff\appdata\roaming\bittorrent\bittorrent.exe" = protocol=17 | dir=in | app=c:\users\ffej.jeff\appdata\roaming\bittorrent\bittorrent.exe | 

"UDP Query User{CFE87299-80F8-43F4-918B-A261267C539E}C:\program files\winamp\winamp.exe" = protocol=17 | dir=in | app=c:\program files\winamp\winamp.exe | 

 

========== HKEY_LOCAL_MACHINE Uninstall List ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer

"{17504ED4-DB08-40A8-81C2-27D8C01581DA}" = Windows Live Remote Service Resources

"{19A4A990-5343-4FF7-B3B5-6F046C091EDF}" = Windows Live Remote Client

"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker

"{1A3E23D7-7A1E-43EC-B35D-EB2A31BED943}" = Video DVD Maker v3.32.0.80

"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update

"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions

"{227E8782-B2F4-4E97-B0EE-49DE9CC1C0C0}" = Windows Live Remote Service

"{2624B969-7135-4EB1-B0F6-2D8C397B45F7}_is1" = MPC-HC 1.7.0

"{2902F983-B4C1-44BA-B85D-5C6D52E2C441}" = Windows Live Mesh ActiveX Control for Remote Connections

"{2A3FC24C-6EC0-4519-A52B-FDA4EA9B2D24}" = Windows Live Messenger

"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery

"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery

"{42929F0F-CE14-47AF-9FC7-FF297A603021}" = Dell Resource CD

"{464B3406-A4D0-4914-910F-7CA4380DCC13}" = Windows Live Remote Client Resources

"{4903D172-DCCB-392F-93A3-34CA9D47FE3D}" = Microsoft .NET Framework 4.5.1

"{4E5386F5-C0F6-4532-A54A-374865AEAB71}" = Cisco PEAP Module

"{4E62123C-4C0D-4123-A8A2-C0103B92D7EA}" = Should I Remove It

"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.11

"{50816F92-1652-4A7C-B9BC-48F682742C4B}" = Messenger Companion

"{579684A4-DDD5-4CA3-9EA8-7BE7D9593DB4}" = Windows Live UX Platform Language Pack

"{59F6A514-9813-47A3-948C-8A155460CC2A}" = RICOH R5C83x/84x Flash Media Controller Driver Ver.3.51.01

"{5C5B24E7-4694-4049-A222-CCE7D3FAC63F}_is1" = CryptoPrevent

"{5DD4FCBD-A3C1-4155-9E17-4161C70AAABA}" = Segoe UI

"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE

"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable

"{76C24F39-B161-498F-BD8B-C64789812D13}_is1" = ConvertXtoDVD 3.0.0.9

"{76F9CF97-FC4B-4E20-B363-D127C888448F}" = Cisco LEAP Module

"{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core

"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform

"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight

"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime

"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT

"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007

"{90120000-0016-0409-0000-0000000FF1CE}_HOMESTUDENTR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007

"{90120000-0018-0409-0000-0000000FF1CE}_HOMESTUDENTR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007

"{90120000-001B-0409-0000-0000000FF1CE}_HOMESTUDENTR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007

"{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)

"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007

"{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)

"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007

"{90120000-001F-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{2314F9A1-126F-45CC-8A5E-DFAF866F3FBC}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)

"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007

"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007

"{90120000-006E-0409-0000-0000000FF1CE}_HOMESTUDENTR_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007

"{90120000-00A1-0409-0000-0000000FF1CE}_HOMESTUDENTR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007

"{90120000-0115-0409-0000-0000000FF1CE}_HOMESTUDENTR_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In

"{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager

"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007

"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker

"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033" = Microsoft .NET Framework 4.5.1

"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting

"{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}" = Visual Studio 2012 x86 Redistributables

"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail

"{A0C91188-C88F-4E86-93E6-CD7C9A266649}" = Windows Live Mesh

"{a0fe116e-9a8a-466f-aee0-625cb7c207e3}" = Microsoft Visual C++ 2005 Redistributable - KB2467175

"{A462213D-EED4-42C2-9A60-7BDD4D4B0B17}" = SigmaTel Audio

"{A5181519-9F3D-4372-ABC6-C333C2F3A816}_is1" = RunAlyzer

"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer

"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper

"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common

"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer

"{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer

"{AF82C1A9-56DC-4CCD-A36C-CAE56D541DFA}" = Adobe Flash Player 15 Plugin

"{AF844339-2F8A-4593-81B3-9F4C54038C4E}" = Windows Live MIME IFilter

"{B3DAF54F-DB25-4586-9EF1-96D24BB14088}" = Windows Movie Maker 2.6

"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call

"{BC8AC77D-6A6F-491F-BEED-2958F09C6CAE}" = Adobe Flash Player 15 ActiveX

"{BF53252E-4AB2-4C7F-A0FD-6100755745E3}" = Cisco EAP-FAST Module

"{C6150D8A-86ED-41D3-87BB-F3BB51B0B77F}" = Windows Live ID Sign-in Assistant

"{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail

"{C950420B-4182-49EA-850A-A6A2ABF06C6B}" = Marvell Miniport Driver

"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware

"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1

"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform

"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common

"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform

"{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources

"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh

"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10

"{E5B21F11-6933-4E0B-A25C-7963E3C07D11}" = Windows Live Messenger

"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]

"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219

"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials

"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022

"360TotalSecurity" = 360 Total Security

"AGON_CD" = AGON

"Ashampoo Burning Studio 10_is1" = Ashampoo Burning Studio 10.0.1

"Broadcom 802.11b Network Adapter" = Dell Wireless WLAN Card

"CCleaner" = CCleaner

"CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2C06&SUBSYS_14F1000F" = Conexant HDA D330 MDC V.92 Modem

"Creative OEM002" = Laptop Integrated Webcam Driver (1.04.01.1011)  

"Google Chrome" = Google Chrome

"HDMI" = Intel® Graphics Media Accelerator Driver

"HOMESTUDENTR" = Microsoft Office Home and Student 2007

"ImgBurn" = ImgBurn

"KLiteCodecPack_is1" = K-Lite Codec Pack 7.0.0 (Standard)

"Malwarebytes Anti-Malware_is1" = Malwarebytes Anti-Malware version 2.0.2.1012

"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1

"PowerISO" = PowerISO

"QuickPar" = QuickPar 0.9

"Speccy" = Speccy

"Toolwiz Smart Defrag FREE_is1" = Toolwiz Smart Defrag 2011

"VLC media player" = VLC media player

"Winamp" = Winamp

"WinLiveSuite" = Windows Live Essentials

 

========== HKEY_CURRENT_USER Uninstall List ==========

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"Should I Remove It 1.0.4" = Should I Remove It

"uTorrent" = µTorrent

 

========== Last 20 Event Log Errors ==========

 

[ Application Events ]

Error - 28/10/2014 12:17:35 AM | Computer Name = Jeff | Source = Windows Search Service | ID = 3028

Description = 

 

Error - 28/10/2014 12:17:35 AM | Computer Name = Jeff | Source = Windows Search Service | ID = 3058

Description = 

 

Error - 28/10/2014 12:26:47 AM | Computer Name = Jeff | Source = SideBySide | ID = 16842830

Description = Activation context generation failed for "C:\Program Files\Windows

 Live\Messenger\msnmsgr.exe".Error in manifest or policy file "" on line .  A component

 version required by the application conflicts with another component version already

 active.  Conflicting components are:.  Component 1: C:\Windows\WinSxS\manifests\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4148_none_5090ab56bcba71c2.manifest.

Component

 2: C:\Windows\WinSxS\manifests\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.1_none_e163563597edeada.manifest.

 

Error - 28/10/2014 12:26:47 AM | Computer Name = Jeff | Source = SideBySide | ID = 16842830

Description = Activation context generation failed for "C:\Program Files\Windows

 Live\Messenger\msnmsgr.exe".Error in manifest or policy file "" on line .  A component

 version required by the application conflicts with another component version already

 active.  Conflicting components are:.  Component 1: C:\Windows\WinSxS\manifests\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4148_none_5090ab56bcba71c2.manifest.

Component

 2: C:\Windows\WinSxS\manifests\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.1_none_e163563597edeada.manifest.

 

Error - 28/10/2014 12:35:42 AM | Computer Name = Jeff | Source = SideBySide | ID = 16842830

Description = Activation context generation failed for "C:\Program Files\Windows

 Live\Messenger\msnmsgr.exe".Error in manifest or policy file "" on line .  A component

 version required by the application conflicts with another component version already

 active.  Conflicting components are:.  Component 1: C:\Windows\WinSxS\manifests\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4148_none_5090ab56bcba71c2.manifest.

Component

 2: C:\Windows\WinSxS\manifests\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.1_none_e163563597edeada.manifest.

 

Error - 28/10/2014 12:35:42 AM | Computer Name = Jeff | Source = SideBySide | ID = 16842830

Description = Activation context generation failed for "C:\Program Files\Windows

 Live\Messenger\msnmsgr.exe".Error in manifest or policy file "" on line .  A component

 version required by the application conflicts with another component version already

 active.  Conflicting components are:.  Component 1: C:\Windows\WinSxS\manifests\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4148_none_5090ab56bcba71c2.manifest.

Component

 2: C:\Windows\WinSxS\manifests\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.1_none_e163563597edeada.manifest.

 

Error - 28/10/2014 12:35:43 AM | Computer Name = Jeff | Source = SideBySide | ID = 16842830

Description = Activation context generation failed for "C:\Program Files\Windows

 Live\Messenger\msnmsgr.exe".Error in manifest or policy file "" on line .  A component

 version required by the application conflicts with another component version already

 active.  Conflicting components are:.  Component 1: C:\Windows\WinSxS\manifests\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4148_none_5090ab56bcba71c2.manifest.

Component

 2: C:\Windows\WinSxS\manifests\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.1_none_e163563597edeada.manifest.

 

Error - 28/10/2014 12:35:51 AM | Computer Name = Jeff | Source = SideBySide | ID = 16842830

Description = Activation context generation failed for "C:\Program Files\Windows

 Live\Messenger\msnmsgr.exe".Error in manifest or policy file "" on line .  A component

 version required by the application conflicts with another component version already

 active.  Conflicting components are:.  Component 1: C:\Windows\WinSxS\manifests\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4148_none_5090ab56bcba71c2.manifest.

Component

 2: C:\Windows\WinSxS\manifests\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.1_none_e163563597edeada.manifest.

 

Error - 28/10/2014 12:35:51 AM | Computer Name = Jeff | Source = SideBySide | ID = 16842830

Description = Activation context generation failed for "C:\Program Files\Windows

 Live\Messenger\msnmsgr.exe".Error in manifest or policy file "" on line .  A component

 version required by the application conflicts with another component version already

 active.  Conflicting components are:.  Component 1: C:\Windows\WinSxS\manifests\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4148_none_5090ab56bcba71c2.manifest.

Component

 2: C:\Windows\WinSxS\manifests\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.1_none_e163563597edeada.manifest.

 

Error - 28/10/2014 12:36:01 AM | Computer Name = Jeff | Source = WinMgmt | ID = 10

Description = 

 

[ Broadcom Wireless LAN Events ]

Error - 20/07/2012 1:05:03 PM | Computer Name = Nat-PC | Source = WLAN-Tray | ID = 0

Description = 14:05:03, Fri, Jul 20, 12 Error - Unable to gain access to user store

 

 

Error - 19/08/2012 9:29:48 AM | Computer Name = Nat-PC | Source = WLAN-Tray | ID = 0

Description = 10:29:48, Sun, Aug 19, 12 Error - Unable to gain access to user store

 

 

Error - 21/09/2012 1:20:22 AM | Computer Name = Nat-PC | Source = WLAN-Tray | ID = 0

Description = 02:20:22, Fri, Sep 21, 12 Error - Unable to gain access to user store

 

 

Error - 29/09/2012 2:35:32 PM | Computer Name = Nat-PC | Source = WLAN-Tray | ID = 0

Description = 15:35:32, Sat, Sep 29, 12 Error - Unable to gain access to user store

 

 

Error - 01/10/2012 2:57:56 PM | Computer Name = Nat-PC | Source = WLAN-Tray | ID = 0

Description = 15:57:55, Mon, Oct 01, 12 Error - Unable to gain access to user store

 

 

[ System Events ]

Error - 27/10/2014 10:18:32 PM | Computer Name = Jeff | Source = Service Control Manager | ID = 7000

Description = 

 

Error - 27/10/2014 11:17:09 PM | Computer Name = Jeff | Source = Service Control Manager | ID = 7000

Description = 

 

Error - 27/10/2014 11:17:09 PM | Computer Name = Jeff | Source = Service Control Manager | ID = 7023

Description = 

 

Error - 28/10/2014 12:17:27 AM | Computer Name = Jeff | Source = Service Control Manager | ID = 7000

Description = 

 

Error - 28/10/2014 12:17:27 AM | Computer Name = Jeff | Source = Service Control Manager | ID = 7023

Description = 

 

Error - 28/10/2014 12:17:40 AM | Computer Name = Jeff | Source = Service Control Manager | ID = 7024

Description = 

 

Error - 28/10/2014 12:17:40 AM | Computer Name = Jeff | Source = Service Control Manager | ID = 7031

Description = 

 

Error - 28/10/2014 12:18:10 AM | Computer Name = Jeff | Source = Service Control Manager | ID = 7032

Description = 

 

Error - 28/10/2014 12:36:01 AM | Computer Name = Jeff | Source = Service Control Manager | ID = 7000

Description = 

 

Error - 28/10/2014 12:36:01 AM | Computer Name = Jeff | Source = Service Control Manager | ID = 7023

Description = 

 

 

< End of report >

 

Edited by jeffcaissie, 27 October 2014 - 11:07 PM.

[Advertisements]

Hi jeffcaissie,



My name is Valinorum and I will be the acolyte today. Before we proceed, please, acknowledge yourself the following(s):

• Please do not create any new threads on this while we are working on your system as it wastes another volunteer's time. If you are being helped/have solved the issue/no longer wish to continue, notify me in your reply and I will quickly close this thread. Failing to comply will result in denial of future assistance.
• Please do not install any new software while we are working on this system as it may hinder our process.
• Malware removal is a complicated process so don't stop following the steps even if the symptoms are not found. Keep up with me until I declare you clean.
• Please do not try to fix anything without being ask.
• Please do not attach your logs or put them inside code/quote tags. Do a Copy/Paste of the entire contents of the log file and submit it inside your post unless directed otherwise.
• Please print or save the instructions I give you for quick reference. We may be using Safe mode which will cut you off from internet and you will not always be able to access this thread.
• Back up your data. I will not knowingly suggest your any course that might damage your system but sometimes Malware infections are so severe that only option we have is to re-format and re-install the operating system.
• If you are confused about any instruction, stop and ask. Do not keep on going.
• Do not repeat the steps if you face any problems.
• I am not an omniscient. There are things even I cannot foresee. But what I know took years to learn and perfect the skill. This site is run by volunteers who help people in need in their own free time. I would ask you to respect their time and be patient as sometimes real life demands our time and replies to you can be delayed.
• Private Message(PM) if and only if I have not responded to your thread within three days or your query is offtopic and personal. Do not PM me under any other circumstances. Your thread is the only medium of communication.
• The fixes are for your system only. Please refrain from using these fixes on other system as it may do serious damage.

 

• Step #1 Fix with OTL
  • Re-run OTL by right clicking and choosing Run as administrator;
  • Under the Custom Scans/Fixes Box copy and paste the following contents inside the quote box. (Do not include the word 'quote').
    

    :Commands
    [createrestorepoint]
    
    :Files
    C:\Users\Ffej.JEFF\AppData\Roaming\BitTorrent\
    
    :OTL
    O4 - HKCU..\Run: [uTorrent] C:\Users\Ffej.JEFF\Downloads\uTorrent.exe (BitTorrent Inc.)
    O15 - HKCU\..Trusted Domains: dell.com ([]* in Trusted sites)
    [2014/10/27 22:12:47 | 000,000,000 | ---D | C] -- C:\Users\Levi\AppData\Roaming\uTorrent
    [2014/10/27 01:31:35 | 000,000,000 | -HSD | C] -- C:\Windows\System32\AI_RecycleBin
    [2014/10/26 23:25:40 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
    [2014/10/27 22:43:06 | 000,000,756 | ---- | C] () -- C:\Users\Levi\Desktop\µTorrent.lnk
    @Alternate Data Stream - 139 bytes -> C:\ProgramData\TEMP:D1B5B4F1
    @Alternate Data Stream - 129 bytes -> C:\ProgramData\TEMP:CB0AACC9
    @Alternate Data Stream - 118 bytes -> C:\ProgramData\TEMP:373E1720
    
    :Commands
    [Emptytemp]

  • Click on "Run Fix" and let the program run unhindered;
  • Your PC will reboot automatically and a log will be opened;
  • Please post it in your next reply.

 

• Required Log(s):
  • OTL Fix Log

Regards,
Valinorum

[Valinorum]

Hi jeffcaissie,



My name is Valinorum and I will be the acolyte today. Before we proceed, please, acknowledge yourself the following(s):

• Please do not create any new threads on this while we are working on your system as it wastes another volunteer's time. If you are being helped/have solved the issue/no longer wish to continue, notify me in your reply and I will quickly close this thread. Failing to comply will result in denial of future assistance.
• Please do not install any new software while we are working on this system as it may hinder our process.
• Malware removal is a complicated process so don't stop following the steps even if the symptoms are not found. Keep up with me until I declare you clean.
• Please do not try to fix anything without being ask.
• Please do not attach your logs or put them inside code/quote tags. Do a Copy/Paste of the entire contents of the log file and submit it inside your post unless directed otherwise.
• Please print or save the instructions I give you for quick reference. We may be using Safe mode which will cut you off from internet and you will not always be able to access this thread.
• Back up your data. I will not knowingly suggest your any course that might damage your system but sometimes Malware infections are so severe that only option we have is to re-format and re-install the operating system.
• If you are confused about any instruction, stop and ask. Do not keep on going.
• Do not repeat the steps if you face any problems.
• I am not an omniscient. There are things even I cannot foresee. But what I know took years to learn and perfect the skill. This site is run by volunteers who help people in need in their own free time. I would ask you to respect their time and be patient as sometimes real life demands our time and replies to you can be delayed.
• Private Message(PM) if and only if I have not responded to your thread within three days or your query is offtopic and personal. Do not PM me under any other circumstances. Your thread is the only medium of communication.
• The fixes are for your system only. Please refrain from using these fixes on other system as it may do serious damage.

 

• Step #1 Fix with OTL
  • Re-run OTL by right clicking and choosing Run as administrator;
  • Under the Custom Scans/Fixes Box copy and paste the following contents inside the quote box. (Do not include the word 'quote').
    

    :Commands
    [createrestorepoint]
    
    :Files
    C:\Users\Ffej.JEFF\AppData\Roaming\BitTorrent\
    
    :OTL
    O4 - HKCU..\Run: [uTorrent] C:\Users\Ffej.JEFF\Downloads\uTorrent.exe (BitTorrent Inc.)
    O15 - HKCU\..Trusted Domains: dell.com ([]* in Trusted sites)
    [2014/10/27 22:12:47 | 000,000,000 | ---D | C] -- C:\Users\Levi\AppData\Roaming\uTorrent
    [2014/10/27 01:31:35 | 000,000,000 | -HSD | C] -- C:\Windows\System32\AI_RecycleBin
    [2014/10/26 23:25:40 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
    [2014/10/27 22:43:06 | 000,000,756 | ---- | C] () -- C:\Users\Levi\Desktop\µTorrent.lnk
    @Alternate Data Stream - 139 bytes -> C:\ProgramData\TEMP:D1B5B4F1
    @Alternate Data Stream - 129 bytes -> C:\ProgramData\TEMP:CB0AACC9
    @Alternate Data Stream - 118 bytes -> C:\ProgramData\TEMP:373E1720
    
    :Commands
    [Emptytemp]

  • Click on "Run Fix" and let the program run unhindered;
  • Your PC will reboot automatically and a log will be opened;
  • Please post it in your next reply.

 

• Required Log(s):
  • OTL Fix Log

Regards,
Valinorum

[Valinorum]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.