Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

No system restore,some antivirus not working and graphics glitchingg

Started by henrymills , Dec 18 2014 05:12 PM

Please log in to reply

#16
zep516

Posted 13 January 2015 - 07:07 AM

Trusted Helper

Malware Removal
8,090 posts

Hello,

Re: Firefox (Mozilla Firefox (3.6.24)) can you up date Firefox, it's way out of date, that was my concern.

In the Firefox browser click help, click about Firefox and up-date from there.

Thanks
Joe

#17
henrymills

Posted 15 January 2015 - 10:56 AM

Member

Topic Starter
Member
47 posts

When I run FRST on normal boot I got this

I add it to exception and continue what you said.Then I had another problem FRST hanged the first time I run Fix probably because of the antivirus so I disabled it and run

FRST again,leaving me with two fixlog.txt.

------------------------------------------------------------------------------------------------------

Fixlog.txt(First run - hang)

------------------------------------------------------------------------------------------------------

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 11-01-2015
Ran by MyEminence at 2015-01-15 21:36:28 Run:1
Running from C:\Users\MyEminence\Desktop
Loaded Profile: MyEminence (Available profiles: MyEminence & Marcus & Tempo)
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
start
CloseProcesses:
HKU\S-1-5-21-185903628-1420016957-2107898834-1000\...\Run: [zASRockInstantBoot] => [X]
HKU\S-1-5-21-185903628-1420016957-2107898834-1000\...\Run: [PlayNC Launcher] => [X]
HKU\S-1-5-21-185903628-1420016957-2107898834-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
S2 CsrBtOBEXService; "C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtOBEXService.exe" [X]
S2 CsrBtService; "C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtService.exe" [X]
S3 BthAudioHF; system32\DRIVERS\BthAudioHF.sys [X]
S3 btwaudio; system32\drivers\btwaudio.sys [X]
S3 btwavdt; system32\drivers\btwavdt.sys [X]
S3 btwl2cap; system32\DRIVERS\btwl2cap.sys [X]
S3 btwrchid; system32\DRIVERS\btwrchid.sys [X]
S3 catchme; \??\C:\Users\MYEMIN~1\AppData\Local\Temp\catchme.sys [X]
S3 cpuz135; \??\C:\Windows\TEMP\cpuz135\cpuz135_x32.sys [X]
S3 CsrBtPort; system32\DRIVERS\CsrBtPort.sys [X]
S3 csrusb; System32\Drivers\csrusb.sys [X]
S3 GPU-Z; \??\C:\Users\MYEMIN~1\AppData\Local\Temp\GPU-Z.sys [X]
S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [X]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
S3 taphss6; system32\DRIVERS\taphss6.sys [X]
2014-12-15 13:08 - 2012-04-02 12:41 - 00000000 ____D () C:\ProgramData\InstallMate
C:\Users\MyEminence\AppData\Local\temp\Quarantine.exe
C:\Users\MyEminence\AppData\Local\temp\sqlite3.dll
AlternateDataStreams: C:\ProgramData\TEMP:553CA6CA
C:\ProgramData\TEMP:553CA6CA
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\42459759.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\70585251.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\76530116.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\42459759.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\70585251.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\76530116.sys => ""="Driver"
CMD: bitsadmin /reset /allusers
CMD: netsh winsock reset catalog
CMD: ipconfig /flushdns
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
Emptytemp:
reboot:
end
*****************

Processes closed successfully.
HKU\S-1-5-21-185903628-1420016957-2107898834-1000\Software\Microsoft\Windows\CurrentVersion\Run\\zASRockInstantBoot => value deleted successfully.
HKU\S-1-5-21-185903628-1420016957-2107898834-1000\Software\Microsoft\Windows\CurrentVersion\Run\\PlayNC Launcher => value deleted successfully.
"HKU\S-1-5-21-185903628-1420016957-2107898834-1000\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
CsrBtOBEXService => Service deleted successfully.
CsrBtService => Service deleted successfully.
BthAudioHF => Service deleted successfully.
btwaudio => Service deleted successfully.
btwavdt => Service deleted successfully.
btwl2cap => Service deleted successfully.
btwrchid => Service deleted successfully.
catchme => Service deleted successfully.
cpuz135 => Service deleted successfully.
CsrBtPort => Service deleted successfully.
csrusb => Service deleted successfully.
GPU-Z => Service deleted successfully.
hwusbdev => Service deleted successfully.
IpInIp => Service deleted successfully.
NwlnkFlt => Service deleted successfully.
NwlnkFwd => Service deleted successfully.
taphss6 => Service deleted successfully.
C:\ProgramData\InstallMate => Moved successfully.
C:\Users\MyEminence\AppData\Local\temp\Quarantine.exe => Moved successfully.
C:\Users\MyEminence\AppData\Local\temp\sqlite3.dll => Moved successfully.
C:\ProgramData\TEMP => ":553CA6CA" ADS removed successfully.
"C:\ProgramData\TEMP:553CA6CA" => File/Directory not found.
"HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\42459759.sys" => Key deleted successfully.
"HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\70585251.sys" => Key deleted successfully.
"HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\76530116.sys" => Key deleted successfully.
"HKLM\System\CurrentControlSet\Control\SafeBoot\Network\42459759.sys" => Key deleted successfully.
"HKLM\System\CurrentControlSet\Control\SafeBoot\Network\70585251.sys" => Key deleted successfully.
"HKLM\System\CurrentControlSet\Control\SafeBoot\Network\76530116.sys" => Key deleted successfully.

========= bitsadmin /reset /allusers =========

BITSADMIN version 3.0 [ 7.0.6001 ]
BITS administration utility.
© Copyright 2000-2006 Microsoft Corp.

0 out of 0 jobs canceled.

========= End of CMD: =========

========= netsh winsock reset catalog =========

Sucessfully reset the Winsock Catalog.
You must restart the computer in order to complete the reset.

========= End of CMD: =========

========= ipconfig /flushdns =========

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========= End of CMD: =========

========= netsh int ipv4 reset =========

Reseting Echo Request, OK!
Reseting Global, OK!
Reseting Interface, OK!
A reboot is required to complete this action.

========= End of CMD: =========

========= netsh int ipv6 reset =========

Reseting Echo Request, OK!
A reboot is required to complete this action.

========= End of CMD: =========

------------------------------------------------------------------------------------------------------

Fixlog.txt(Second run - completed)

------------------------------------------------------------------------------------------------------

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 15-01-2015
Ran by MyEminence at 2015-01-15 22:25:45 Run:2
Running from C:\Users\MyEminence\Desktop
Loaded Profiles: MyEminence (Available profiles: MyEminence & Marcus & Tempo)
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
start
CloseProcesses:
HKU\S-1-5-21-185903628-1420016957-2107898834-1000\...\Run: [zASRockInstantBoot] => [X]
HKU\S-1-5-21-185903628-1420016957-2107898834-1000\...\Run: [PlayNC Launcher] => [X]
HKU\S-1-5-21-185903628-1420016957-2107898834-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
S2 CsrBtOBEXService; "C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtOBEXService.exe" [X]
S2 CsrBtService; "C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtService.exe" [X]
S3 BthAudioHF; system32\DRIVERS\BthAudioHF.sys [X]
S3 btwaudio; system32\drivers\btwaudio.sys [X]
S3 btwavdt; system32\drivers\btwavdt.sys [X]
S3 btwl2cap; system32\DRIVERS\btwl2cap.sys [X]
S3 btwrchid; system32\DRIVERS\btwrchid.sys [X]
S3 catchme; \??\C:\Users\MYEMIN~1\AppData\Local\Temp\catchme.sys [X]
S3 cpuz135; \??\C:\Windows\TEMP\cpuz135\cpuz135_x32.sys [X]
S3 CsrBtPort; system32\DRIVERS\CsrBtPort.sys [X]
S3 csrusb; System32\Drivers\csrusb.sys [X]
S3 GPU-Z; \??\C:\Users\MYEMIN~1\AppData\Local\Temp\GPU-Z.sys [X]
S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [X]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
S3 taphss6; system32\DRIVERS\taphss6.sys [X]
2014-12-15 13:08 - 2012-04-02 12:41 - 00000000 ____D () C:\ProgramData\InstallMate
C:\Users\MyEminence\AppData\Local\temp\Quarantine.exe
C:\Users\MyEminence\AppData\Local\temp\sqlite3.dll
AlternateDataStreams: C:\ProgramData\TEMP:553CA6CA
C:\ProgramData\TEMP:553CA6CA
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\42459759.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\70585251.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\76530116.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\42459759.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\70585251.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\76530116.sys => ""="Driver"
CMD: bitsadmin /reset /allusers
CMD: netsh winsock reset catalog
CMD: ipconfig /flushdns
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
Emptytemp:
reboot:
end
*****************

Processes closed successfully.
HKU\S-1-5-21-185903628-1420016957-2107898834-1000\Software\Microsoft\Windows\CurrentVersion\Run\\zASRockInstantBoot => Value not found.
HKU\S-1-5-21-185903628-1420016957-2107898834-1000\Software\Microsoft\Windows\CurrentVersion\Run\\PlayNC Launcher => Value not found.
HKU\S-1-5-21-185903628-1420016957-2107898834-1000\SOFTWARE\Policies\Microsoft\Internet Explorer => Key not found.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value not found.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value not found.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value not found.
CsrBtOBEXService => Service not found.
CsrBtService => Service not found.
BthAudioHF => Service not found.
btwaudio => Service not found.
btwavdt => Service not found.
btwl2cap => Service not found.
btwrchid => Service not found.
catchme => Service not found.
cpuz135 => Service not found.
CsrBtPort => Service not found.
csrusb => Service not found.
GPU-Z => Service not found.
hwusbdev => Service not found.
IpInIp => Service not found.
NwlnkFlt => Service not found.
NwlnkFwd => Service not found.
taphss6 => Service not found.
"C:\ProgramData\InstallMate" => File/Directory not found.
"C:\Users\MyEminence\AppData\Local\temp\Quarantine.exe" => File/Directory not found.
"C:\Users\MyEminence\AppData\Local\temp\sqlite3.dll" => File/Directory not found.
"C:\ProgramData\TEMP" => ":553CA6CA" ADS not found.
"C:\ProgramData\TEMP:553CA6CA" => File/Directory not found.
HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\42459759.sys => Key not found.
HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\70585251.sys => Key not found.
HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\76530116.sys => Key not found.
HKLM\System\CurrentControlSet\Control\SafeBoot\Network\42459759.sys => Key not found.
HKLM\System\CurrentControlSet\Control\SafeBoot\Network\70585251.sys => Key not found.
HKLM\System\CurrentControlSet\Control\SafeBoot\Network\76530116.sys => Key not found.

========= bitsadmin /reset /allusers =========

BITSADMIN version 3.0 [ 7.0.6001 ]
BITS administration utility.
© Copyright 2000-2006 Microsoft Corp.

0 out of 0 jobs canceled.

========= End of CMD: =========

========= netsh winsock reset catalog =========

Sucessfully reset the Winsock Catalog.
You must restart the computer in order to complete the reset.

========= End of CMD: =========

========= ipconfig /flushdns =========

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========= End of CMD: =========

========= netsh int ipv4 reset =========

Reseting Interface, OK!
A reboot is required to complete this action.

========= End of CMD: =========

========= netsh int ipv6 reset =========

There's no user specified settings to be reset.

========= End of CMD: =========

EmptyTemp: => Removed 1.3 GB temporary data.

The system needed a reboot.

==== End of Fixlog 22:37:45 ====

------------------------------------------------------------------------------------------------------

Minitoolbox Log

------------------------------------------------------------------------------------------------------

MiniToolBox by Farbar Version: 30-11-2014
Ran by MyEminence (administrator) on 16-01-2015 at 00:48:16
Running from "C:\Users\MyEminence\Desktop"
Microsoft® Windows Vista™ Ultimate Service Pack 2 (X86)
Boot Mode: Normal
***************************************************************************

========================= Flush DNS: ===================================

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========================= IE Proxy Settings: ==============================

Proxy is not enabled.
No Proxy Server is set.

"Reset IE Proxy Settings": IE Proxy Settings were reset.

========================= FF Proxy Settings: ==============================

"Reset FF Proxy Settings": Firefox Proxy settings were reset.

========================= IP Configuration: ================================

Atheros AR8151 PCI-E Gigabit Ethernet Controller = Local Area Connection 8 (Connected)

# ----------------------------------
# IPv4 Configuration
# ----------------------------------
pushd interface ipv4

reset

popd
# End of IPv4 configuration

Windows IP Configuration

   Host Name . . . . . . . . . . . . : Me-PC
   Primary Dns Suffix . . . . . . . :
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No
   DNS Suffix Search List. . . . . . : Belkin

Ethernet adapter Local Area Connection 8:

   Connection-specific DNS Suffix . : Belkin
   Description . . . . . . . . . . . : Atheros AR8151 PCI-E Gigabit Ethernet Controller
   Physical Address. . . . . . . . . : 74-D4-35-35-54-76
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::282e:90e4:e900:f979%20(Preferred)
   IPv4 Address. . . . . . . . . . . : 192.168.2.8(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Lease Obtained. . . . . . . . . . : Friday, January 16, 2015 12:10:27 AM
   Lease Expires . . . . . . . . . . : Monday, February 22, 2151 7:16:47 AM
   Default Gateway . . . . . . . . . : 192.168.2.1
   DHCP Server . . . . . . . . . . . : 192.168.2.1
   DHCPv6 IAID . . . . . . . . . . . : 477418549
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-0F-27-C2-C2-00-25-22-28-96-A8
   DNS Servers . . . . . . . . . . . : 192.168.2.1
   NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter Local Area Connection* 6:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix . :
   Description . . . . . . . . . . . : isatap.{81CE8E85-A8F4-4C39-B093-F1C2DA72357B}
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 7:

   Connection-specific DNS Suffix . :
   Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
   Physical Address. . . . . . . . . : 02-00-54-55-4E-01
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   IPv6 Address. . . . . . . . . . . : 2001:0:9d38:90d7:1c30:b43f:8f39:bfb5(Preferred)
   Link-local IPv6 Address . . . . . : fe80::1c30:b43f:8f39:bfb5%11(Preferred)
   Default Gateway . . . . . . . . . : ::
   NetBIOS over Tcpip. . . . . . . . : Disabled

Tunnel adapter Local Area Connection* 11:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix . :
   Description . . . . . . . . . . . : isatap.{81CE8E85-A8F4-4C39-B093-F1C2DA72357B}
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 13:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix . :
   Description . . . . . . . . . . . : isatap.{81CE8E85-A8F4-4C39-B093-F1C2DA72357B}
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 15:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix . :
   Description . . . . . . . . . . . : isatap.{81CE8E85-A8F4-4C39-B093-F1C2DA72357B}
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 19:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix . : Belkin
   Description . . . . . . . . . . . : isatap.Belkin
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 21:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix . :
   Description . . . . . . . . . . . : isatap.{A9E2C173-1BE8-4EEA-84D3-4B07CD078812}
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 20:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix . :
   Description . . . . . . . . . . . : isatap.{A9E2C173-1BE8-4EEA-84D3-4B07CD078812}
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 27:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix . :
   Description . . . . . . . . . . . : isatap.{313DE87E-7C01-429A-AB1C-B47671A3A03A}
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
Server: router.belkin
Address: 192.168.2.1

DNS request timed out.
    timeout was 2 seconds.
DNS request timed out.
    timeout was 2 seconds.
Name:    google.com
Addresses: 2404:6800:4005:807::1003
      173.194.127.129
      173.194.127.130
      173.194.127.131
      173.194.127.132
      173.194.127.133
      173.194.127.134
      173.194.127.135
      173.194.127.136
      173.194.127.137
      173.194.127.142
      173.194.127.128

Pinging google.com [173.194.127.129] with 32 bytes of data:

Reply from 173.194.127.129: bytes=32 time=89ms TTL=45

Reply from 173.194.127.129: bytes=32 time=73ms TTL=45

Ping statistics for 173.194.127.129:

    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

    Minimum = 73ms, Maximum = 89ms, Average = 81ms

Server: router.belkin
Address: 192.168.2.1

DNS request timed out.
    timeout was 2 seconds.
DNS request timed out.
    timeout was 2 seconds.
Name:    yahoo.com
Addresses: 206.190.36.45
      98.138.253.109
      98.139.183.24

Pinging yahoo.com [206.190.36.45] with 32 bytes of data:

Reply from 206.190.36.45: bytes=32 time=256ms TTL=37

Reply from 206.190.36.45: bytes=32 time=258ms TTL=37

Ping statistics for 206.190.36.45:

    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

    Minimum = 256ms, Maximum = 258ms, Average = 257ms

Pinging 127.0.0.1 with 32 bytes of data:

Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Ping statistics for 127.0.0.1:

    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

    Minimum = 0ms, Maximum = 0ms, Average = 0ms

===========================================================================
Interface List
20 ...74 d4 35 35 54 76 ...... Atheros AR8151 PCI-E Gigabit Ethernet Controller
1 ........................... Software Loopback Interface 1
12 ...00 00 00 00 00 00 00 e0 isatap.{81CE8E85-A8F4-4C39-B093-F1C2DA72357B}
11 ...02 00 54 55 4e 01 ...... Teredo Tunneling Pseudo-Interface
13 ...00 00 00 00 00 00 00 e0 isatap.{81CE8E85-A8F4-4C39-B093-F1C2DA72357B}
15 ...00 00 00 00 00 00 00 e0 isatap.{81CE8E85-A8F4-4C39-B093-F1C2DA72357B}
17 ...00 00 00 00 00 00 00 e0 isatap.{81CE8E85-A8F4-4C39-B093-F1C2DA72357B}
36 ...00 00 00 00 00 00 00 e0 isatap.Belkin
24 ...00 00 00 00 00 00 00 e0 isatap.{A9E2C173-1BE8-4EEA-84D3-4B07CD078812}
25 ...00 00 00 00 00 00 00 e0 isatap.{A9E2C173-1BE8-4EEA-84D3-4B07CD078812}
35 ...00 00 00 00 00 00 00 e0 isatap.{313DE87E-7C01-429A-AB1C-B47671A3A03A}
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface Metric
          0.0.0.0          0.0.0.0      192.168.2.1      192.168.2.8     20
        127.0.0.0        255.0.0.0         On-link         127.0.0.1    306
        127.0.0.1 255.255.255.255         On-link         127.0.0.1    306
127.255.255.255 255.255.255.255         On-link         127.0.0.1    306
      192.168.2.0    255.255.255.0         On-link       192.168.2.8    276
      192.168.2.8 255.255.255.255         On-link       192.168.2.8    276
    192.168.2.255 255.255.255.255         On-link       192.168.2.8    276
        224.0.0.0        240.0.0.0         On-link         127.0.0.1    306
        224.0.0.0        240.0.0.0         On-link       192.168.2.8    276
255.255.255.255 255.255.255.255         On-link         127.0.0.1    306
255.255.255.255 255.255.255.255         On-link       192.168.2.8    276
===========================================================================
Persistent Routes:
None

IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination      Gateway
11     18 ::/0                     On-link
1    306 ::1/128                  On-link
11     18 2001::/32                On-link
11    266 2001:0:9d38:90d7:1c30:b43f:8f39:bfb5/128
                                    On-link
20    276 fe80::/64                On-link
11    266 fe80::/64                On-link
11    266 fe80::1c30:b43f:8f39:bfb5/128
                                    On-link
20    276 fe80::282e:90e4:e900:f979/128
                                    On-link
1    306 ff00::/8                 On-link
11    266 ff00::/8                 On-link
20    276 ff00::/8                 On-link
===========================================================================
Persistent Routes:
None

=========================== Installed Programs ============================
2d3 SteadyMove Pro (HKLM\...\{2BF4F570-038D-45F1-8CD3-B0134B345BB3}) (Version: 1.21.6220 - 2d3 Ltd)
7-Zip 9.20 (HKLM\...\7-Zip) (Version: - )
Accent RAR Password Recovery (HKLM\...\{994D4DFE-FC8C-4039-A493-5B94E4143B1C}) (Version: 3.2.48.3188 - Passcovery Co. Ltd.)
Adobe After Effects CS4 (Version: 9 - Adobe Systems Incorporated) Hidden
Adobe After Effects CS4 Presets (Version: 9 - Adobe Systems Incorporated) Hidden
Adobe After Effects CS4 Template Projects & Footage (Version: 9 - Adobe Systems Incorporated) Hidden
Adobe After Effects CS4 Third Party Content (HKLM\...\Adobe_5aab5a491a3a52ae624fd639f6aaa95) (Version: 9 - Adobe Systems Incorporated)
Adobe After Effects CS4 Third Party Content (Version: 9 - Adobe Systems Incorporated) Hidden
Adobe AIR (HKLM\...\Adobe AIR) (Version: 1.1.0.5790 - Adobe Systems Inc.)
Adobe AIR (Version: 1.1.0.5790 - Adobe Systems Inc.) Hidden
Adobe Anchor Service CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Bridge CS4 (Version: 3 - Adobe Systems Incorporated) Hidden
Adobe CMaps CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Color - Photoshop Specific CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Color EU Extra Settings CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Color JA Extra Settings CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Color NA Recommended Settings CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Color Video Profiles AE CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Color Video Profiles CS CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Creative Suite 4 Production Premium (HKLM\...\Adobe_0a572e121e19f0f54d2d23782236e1b) (Version: 4.0 - Adobe Systems Incorporated)
Adobe Creative Suite 4 Production Premium (HKLM\...\Adobe_36ac9dc8c9a94feb9e5886810012e78) (Version: 4.0 - Adobe Systems Incorporated)
Adobe Creative Suite 4 Production Premium (HKLM\...\Adobe_83e762451b5cf1655cb11b0be8ae31a) (Version: 4.0 - Adobe Systems Incorporated)
Adobe Creative Suite 4 Production Premium (Version: 4.0 - Adobe Systems Incorporated) Hidden
Adobe CS4 American English Speech Analysis Models (Version: 1 - Adobe Systems Incorporated) Hidden
Adobe CS4 French Speech Analysis Models (Version: 1 - Adobe Systems Incorporated) Hidden
Adobe CS4 German Speech Analysis Models (Version: 1 - Adobe Systems Incorporated) Hidden
Adobe CS4 International English Speech Analysis Models (Version: 1 - Adobe Systems Incorporated) Hidden
Adobe CS4 Italian Speech Analysis Models (Version: 1 - Adobe Systems Incorporated) Hidden
Adobe CS4 Japanese Speech Analysis Models (Version: 1 - Adobe Systems Incorporated) Hidden
Adobe CS4 Spanish Speech Analysis Models (Version: 1 - Adobe Systems Incorporated) Hidden
Adobe CSI CS4 (Version: 1 - Adobe Systems Incorporated) Hidden
Adobe Default Language CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Device Central CS4 (Version: 2 - Adobe Systems Incorporated) Hidden
Adobe Drive CS4 (Version: 1 - Adobe Systems Incorporated) Hidden
Adobe Dynamiclink Support (Version: 1 - Adobe Systems Incorporated) Hidden
Adobe Encore CS4 (Version: 4 - Adobe Systems Incorporated) Hidden
Adobe Encore CS4 Library (Version: 4 - Adobe Systems Incorporated) Hidden
Adobe ExtendScript Toolkit CS4 (Version: 3.0.0 - Adobe Systems Incorporated) Hidden
Adobe Extension Manager CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Flash CS4 (Version: 10.0 - Adobe Systems Incorporated) Hidden
Adobe Flash CS4 Extension - Flash Lite STI en (Version: 3.0 - Adobe Systems Incorporated) Hidden
Adobe Flash CS4 STI-en (Version: 10.0 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 15 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 15.0.0.246 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 15.0.0.246 - Adobe Systems Incorporated)
Adobe Fonts All (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Linguistics CS4 (Version: 4.0.0 - Adobe Systems Incorporated) Hidden
Adobe Media Encoder CS4 (Version: 1.0 - Adobe Systems Incorporated) Hidden
Adobe Media Encoder CS4 Additional Exporter (Version: 1.0 - Adobe Systems Incorporated) Hidden
Adobe Media Encoder CS4 Dolby (Version: 1.0 - Adobe Systems Incorporated) Hidden
Adobe Media Encoder CS4 Exporter (HKLM\...\Adobe_5eba9bbdf1514a06b1a4c79a2920188) (Version: 1.0 - Adobe Systems Incorporated)
Adobe Media Encoder CS4 Exporter (Version: 1.0 - Adobe Systems Incorporated) Hidden
Adobe Media Player (HKLM\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.1 - Adobe Systems Incorporated)
Adobe Media Player (Version: 0.0.0 - Adobe Systems Incorporated) Hidden
Adobe MotionPicture Color Files CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Output Module (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe PDF Library Files CS4 (Version: 9.0 - Adobe Systems Incorporated) Hidden
Adobe Photoshop CS4 (Version: 11.0 - Adobe Systems Incorporated) Hidden
Adobe Photoshop CS4 Support (Version: 11.0 - Adobe Systems Incorporated) Hidden
Adobe Premiere Pro CS4 (Version: 4 - Adobe Systems Incorporated) Hidden
Adobe Premiere Pro CS4 Functional Content (Version: 4 - Adobe Systems Incorporated) Hidden
Adobe Search for Help (Version: 1.0 - Adobe Systems Incorporated) Hidden
Adobe Service Manager Extension (Version: 1.0 - Adobe Systems Incorporated) Hidden
Adobe Setup (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Type Support CS4 (Version: 9.0 - Adobe Systems Incorporated) Hidden
Adobe Update Manager CS4 (Version: 6.0.0 - Adobe Systems Incorporated) Hidden
Adobe WinSoft Linguistics Plugin (Version: 1.1 - Adobe Systems Incorporated) Hidden
Adobe XMP Panels CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
AdobeColorCommonSetCMYK (Version: 2.0 - Adobe Systems Incorporated) Hidden
AdobeColorCommonSetRGB (Version: 2.0 - Adobe Systems Incorporated) Hidden
Advanced Archive Password Recovery (HKCU\...\Advanced Archive Password Recovery) (Version: 4.53 - ElcomSoft Co. Ltd.)
Anvil Studio 2011 (HKLM\...\{9E3D3F0B-D447-44DA-9204-2CA004A4133E}) (Version: 11.02.12 - Willow Software)
Any Video Converter 3.2.3 (HKLM\...\Any Video Converter_is1) (Version: - Any-Video-Converter.com)
ASRock InstantBoot v1.23 (HKLM\...\ASRock InstantBoot_is1) (Version: - )
Atheros Communications Inc.® AR81Family Gigabit/Fast Ethernet Driver (HKLM\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.2.51 - Atheros Communications Inc.)
Audacity 2.0.5 (HKLM\...\Audacity_is1) (Version: 2.0.5 - Audacity Team)
AV Music Morpher Gold (HKLM\...\AV Music Morpher Gold) (Version: - )
Avast Free Antivirus (HKLM\...\Avast) (Version: 10.0.2208 - AVAST Software)
AviSynth 2.5 (HKLM\...\AviSynth) (Version: - )
Belkin Setup and Router Monitor (HKLM\...\Belkin Setup and Router Monitor_is1) (Version: - )
Belkin USB Print and Storage Center (HKLM\...\Belkin USB Print and Storage Center) (Version: 1.1.4 - Belkin International, Inc.)
BitTorrent (HKLM\...\BitTorrent) (Version: 7.2.1 - )
Blade and Soul (HKLM\...\{CEF766E5-6E15-441F-B14A-C44CB168DBE7}) (Version: 1.0.0 - PlayBns.com)
Boris Continuum Complete 7 Adobe CS3 CS4 (HKLM\...\{B8CB8785-3E0E-41AB-B201-6FFE6D9FF3CC}) (Version: 7.00.1000 - Boris FX, Inc.)
Canon Easy-PhotoPrint EX (HKLM\...\Easy-PhotoPrint EX) (Version: - )
Canon iP2700 series Printer Driver (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_iP2700_series) (Version: - )
CCleaner (HKLM\...\CCleaner) (Version: 4.00 - Piriform)
Cedocida DV Codec (HKLM\...\cedocida) (Version: - )
Cheat Engine 6.0 (HKLM\...\Cheat Engine 6.0_is1) (Version: - Dark Byte)
Connect (Version: 1.0.0.1 - Adobe Systems Incorporated) Hidden
CPUID CPU-Z 1.57 (HKLM\...\CPUID CPU-Z_is1) (Version: - )
CyberLink PowerDVD 10 (HKLM\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.1705 - CyberLink Corp.)
CyberLink PowerDVD 10 (Version: 10.0.1705 - CyberLink Corp.) Hidden
Debugging Tools for Windows (x86) (HKLM\...\{300A2961-B2B5-4889-9CB9-5C2A570D08AD}) (Version: 6.11.1.404 - Microsoft Corporation)
DivX Setup (HKLM\...\DivX Setup) (Version: 2.6.3.88 - DivX, LLC)
DMIView B8.0717.01 (HKLM\...\{3EE1008C-11A1-4F4F-8DB7-27573924DE78}) (Version: 1.4 - Gigabyte)
Download Accelerator Plus (DAP) (HKLM\...\Download Accelerator Plus (DAP)) (Version: 9607 (Build 2134) - Speedbit Ltd.)
E.M. Youtube Video Download Tool 3.15 (HKLM\...\E.M. Youtube Video Download Tool_is1) (Version: - EffectMatrix, Inc.)
EasySaver B9.0904.1 (HKLM\...\{07300F01-89CA-4CF8-92BD-2A605EB83C95}) (Version: 1.00.0000 - Gigabyte)
FileASSASSIN (HKLM\...\FileASSASSIN) (Version: 1.06 - Malwarebytes)
Foxit Reader (HKLM\...\Foxit Reader) (Version: 4.3.1.118 - Foxit Corporation)
Fraps (remove only) (HKLM\...\Fraps) (Version: - )
Freez FLV to MP3 Converter (HKLM\...\Freez FLV to MP3 Converter v1.5_is1) (Version: 1.5 - www.smallvideosoft.com)
Futuremark SystemInfo (HKLM\...\{BEE64C14-BEF1-4610-8A68-A16EAA47B882}) (Version: 4.2.0 - Futuremark Corporation)
GenArts Monsters GT V6 for After Effects CS4 (HKLM\...\{BC0F92C4-4F1C-475E-9FAE-B26A54BC0852}_is1) (Version: - GenArts, Inc.)
GenArts Sapphire Plug-ins 5.0 for After Effects and Compatible (HKLM\...\GenArts Sapphire AE_is1) (Version: - )
GenArts Sapphire RLM Server 8.0.5.1 (HKLM\...\GenArts Reprise License Manager Server_is1) (Version: - )
Globe Broadband (HKLM\...\Globe Broadband) (Version: 11.300.05.20.158 - Huawei Technologies Co.,Ltd)
Globe Tattoo Broadband (HKLM\...\Globe Tattoo Broadband) (Version: 23.009.09.01.158 - Huawei Technologies Co.,Ltd)
Gmask 1.70 English (HKLM\...\Gmask 1.70 English) (Version: - )
Google Chrome (HKLM\...\Google Chrome) (Version: 39.0.2171.95 - Google Inc.)
Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden
GPU Caps Viewer v1.8.2 (HKLM\...\GPU Caps Viewer_is1) (Version: - oZone3D.Net)
HandBrake 0.9.5 (HKLM\...\HandBrake) (Version: 0.9.5 - )
HWiNFO32 Version 3.84 (HKLM\...\HWiNFO32_is1) (Version: 3.84 - Martin Malík - REALiX)
Instant HD (HKLM\...\Instant HD) (Version: - )
Instant HD Advanced (HKLM\...\Instant HD Advanced) (Version: - )
Intel® Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: - Intel Corporation)
Java 7 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
JDownloader (HKLM\...\JDownloader) (Version: - AppWork UG (haftungsbeschränkt))
kuler (Version: 2.0 - Adobe Systems Incorporated) Hidden
Lagarith Lossless Codec (1.3.21) (HKLM\...\{F59AC46C-10C3-4023-882C-4212A92283B3}_is1) (Version: - )
LightScribe 1.4.124.1 (Version: 1.4.124.1 - http://www.lightscribe.com) Hidden
Malwarebytes Anti-Exploit version 1.05.1.1016 (HKLM\...\Malwarebytes Anti-Exploit_is1) (Version: 1.05.1.1016 - Malwarebytes)
Malwarebytes Anti-Malware version 2.0.4.1028 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Mega Manager (HKLM\...\{3B6E3FC6-274C-4B6C-BC85-5C3B15DE18E2}) (Version: 3.5.1.0 - Megaupload Limited)
Mega Manager (Version: 3.5.1.0 - Megaupload Limited) Hidden
MegaTrainer eXperience V1.0.3.6 (HKLM\...\MegaTrainer eXperience_is1) (Version: - )
Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30320 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30320 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (Version: 4.0.30320 - Microsoft Corporation) Hidden
Microsoft Games for Windows - LIVE (HKLM\...\{4D243BA7-9AC4-46D1-90E5-EEB88974F501}) (Version: 2.0.687.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM\...\{05B49229-22A2-4F88-842A-BBC2EBE1CCF6}) (Version: 2.0.687.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft WSE 3.0 Runtime (HKLM\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
MKVcleaver (HKLM\...\{5BAEAA63-8C55-4571-B0FE-695299835907}) (Version: 5.0.3 - MKVcleaver)
MKVtoolnix 2.5.1 (HKLM\...\MKVtoolnix) (Version: 2.5.1 - Moritz Bunkus)
mocha Pro V2.5.2-3520 (HKLM\...\{B7D4740D-02F7-4D53-A50F-7D6ED4BAA54A}) (Version: 2.52.3520 - Imagineer Systems)
MotioninJoy ds3 driver version 0.6.0005 (HKLM\...\{330DAC67-5B62-452A-A0E4-6B4A5923940F}_is1) (Version: 0.6.00005 - www.motioninjoy.com)
Mozilla Firefox 35.0 (x86 en-US) (HKLM\...\Mozilla Firefox 35.0 (x86 en-US)) (Version: 35.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 30.0 - Mozilla)
MyFreeCodec (HKCU\...\MyFreeCodec) (Version: - )
NARUTO SHIPPUDEN: Ultimate Ninja STORM 3 Full Burst (HKLM\...\TkFSVVRPU0hJUFBVREVOVWx0aW1hdGVOaW5qYVNUT1JNM0Z1~D4302771_is1) (Version: 1 - )
NCsoft Launcher (HKLM\...\{5F8E2CBB-949D-4175-AC98-5ADE7F6C9697}) (Version: 1.5.19002 - NCsoft)
Nero 7 Essentials (HKLM\...\{874AF83E-1BF6-4F2B-9086-BF62BDAE1033}) (Version: 7.02.5608 - Nero AG)
Neverwinter Nights 2 (HKLM\...\{F20C1251-1D0A-4944-B2AE-678581B33B19}) (Version: 1.00.0000 - Obsidian)
NVIDIA Control Panel 332.21 (Version: 332.21 - NVIDIA Corporation) Hidden
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.10 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.133.889 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Performance (HKLM\...\InstallShield_{7C7F30F4-94E7-4AA8-8941-90C4A80C68BF}) (Version: 6.5 - NVIDIA Corporation)
NVIDIA Performance (Version: 6.5 - NVIDIA Corporation) Hidden
NVIDIA PhysX (Version: 9.13.0725 - NVIDIA Corporation) Hidden
NVIDIA System Monitor (HKLM\...\InstallShield_{E9CFBE78-ED91-4FCF-9E6F-210E477E527D}) (Version: 6.5 - NVIDIA Corporation)
NVIDIA System Monitor (Version: 6.5 - NVIDIA Corporation) Hidden
NVIDIA Update 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 10.11.15 - NVIDIA Corporation) Hidden
ON_OFF Charge B11.0110.1 (HKLM\...\{3DECD372-76A1-4483-BF10-B547790A3261}) (Version: 1.00.0001 - GIGABYTE)
Opera Stable 18.0.1284.68 (HKLM\...\Opera 18.0.1284.68) (Version: 18.0.1284.68 - Opera Software ASA)
PCSX2 - Playstation 2 Emulator (HKLM\...\pcsx2-r3878) (Version: - )
PCSX2 - Playstation 2 Emulator (HKLM\...\pcsx2-r4600) (Version: - )
PCSX2 - Playstation 2 Emulator (HKLM\...\pcsx2-r5350) (Version: - )
PCSX2 - Playstation 2 Emulator (HKLM\...\pcsx2-r5875) (Version: - )
PDF Settings CS4 (Version: 9.0 - Adobe Systems Incorporated) Hidden
Photomatix Pro version 5.0.4 (HKLM\...\PhotomatixPro5x32_is1) (Version: 5.0.4 - HDRsoft Ltd)
Photoshop Camera Raw (Version: 5.0 - Adobe Systems Incorporated) Hidden
PianoFX STUDIO 4.0 (HKLM\...\PianoFX STUDIO 4.0_is1) (Version: 4.0 - Tanseon Systems)
Pixel Bender Toolkit (Version: 1.0 - Adobe Systems Incorporated) Hidden
Primatte Keyer Pro 4.0 (HKLM\...\Primatte Keyer Pro 4.0) (Version: - )
Q-Share Ver.1.2 (HKLM\...\{F308B531-AB20-4A79-8F5E-83071FE5BE60}) (Version: 1.2 - GIGABYTE)
RAR Password Recovery Professional (HKLM\...\RAR Password Recovery Professional) (Version: - SmartKey, Inc.)
Realtek 8169 8168 8101E 8102E Ethernet Driver (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1.00.0000 - Realtek)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6387 - Realtek Semiconductor Corp.)
RESIDENT EVIL 5 (HKLM\...\{AC08BBA0-96B9-431A-A7D0-D8598E493775}) (Version: 1.0.0.129 - CAPCOM CO., LTD.)
Revo Uninstaller Pro 3.1.1 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.1.1 - VS Revo Group, Ltd.)
Samsung Kies (HKLM\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.3.14044_17 - Samsung Electronics Co., Ltd.)
Samsung Kies (Version: 2.6.3.14044_17 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.45.0 - SAMSUNG Electronics Co., Ltd.)
Sandboxie 3.52 (HKLM\...\Sandboxie) (Version: - )
SES Driver (HKLM\...\{0673654C-5296-453B-9798-B61CD7E03FEB}) (Version: 1.0.0 - Western Digital)
SMART BRO (HKLM\...\{A9E5EDA7-2E6C-49E7-924B-A32B89C24A04}) (Version: 1.0.0.1 - ZTE)
SmartCam -- Smart Phone Camera (HKLM\...\SmartCam) (Version: 1.4 - Ionut Dediu)
SpeedFan (remove only) (HKLM\...\SpeedFan) (Version: - )
Suite Shared Configuration CS4 (Version: 1.0 - Adobe Systems Incorporated) Hidden
Sun Broadband Hotspot (HKLM\...\{AEFF9E60-3E93-41EE-9895-311F7D1C5FFD}) (Version: 1.0.0.2 - ZTE Corporation)
Sun Broadband Wireless (HKLM\...\Sun Broadband Wireless) (Version: 16.001.06.04.256 - Huawei Technologies Co.,Ltd)
SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 4.49.1000 - SUPERAntiSpyware.com)
System Requirements Lab (HKLM\...\{0A3A9522-EFA2-4C56-9138-101692C2A130}) (Version: 4.4.26.0 - Husdawg, LLC)
System Requirements Lab (HKLM\...\SystemRequirementsLab) (Version: - )
System Requirements Lab CYRI (HKLM\...\{F3FCB08B-E752-444D-86A0-0634A4F3B23D}) (Version: 6.0.8.0 - Husdawg, LLC)
System Requirements Lab for Intel (HKLM\...\{CD41B576-4787-4D5C-95EE-24A4ABD89CD3}) (Version: 4.4.24.0 - Husdawg, LLC)
Tattoo (HKLM\...\Tattoo) (Version: 1.09.00.158 - Huawei Technologies Co.,Ltd)
TechPowerUp GPU-Z (HKLM\...\TechPowerUp GPU-Z) (Version: - TechPowerUp)
The Elder Scrolls V: SKYRIM (HKLM\...\The Elder Scrolls V: SKYRIM_is1) (Version: 1.1.21.0 - Bethesda Softworks)
The Elder Scrolls V: SKYRIM Update 1 + Crack (HKLM\...\The Elder Scrolls V: SKYRIM Update 1 + Crack_is1) (Version: - )
The Sims™ 3 (HKLM\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.0.615 - Electronic Arts)
Torchlight (HKLM\...\Runic Games Torchlight) (Version: 0.0.66.192 - )
Total Video Converter 3.71 100812 (HKLM\...\Total Video Converter 3.71_is1) (Version: - EffectMatrix Inc.)
Trapcode Form (HKLM\...\Trapcode Form) (Version: - )
Trapcode Lux (HKLM\...\Trapcode Lux) (Version: - )
Trapcode Particular v2 (HKLM\...\Trapcode Particular v2) (Version: - )
Trapcode Shine (HKLM\...\Trapcode Shine) (Version: - )
Trapcode Starglow (HKLM\...\Trapcode Starglow) (Version: - )
Ultimate Extras sounds from Microsoft® Tinker™ (HKLM\...\UltSounds2) (Version: - Microsoft Corporation)
UnCleaner (HKLM\...\UnCleaner) (Version: 1.7 - Josh Cell Softwares Corporation)
Unlocker 1.9.2 (HKLM\...\Unlocker) (Version: 1.9.2 - Cedrick Collomb)
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden
Video Enhancer 1.9.6 (HKLM\...\Video Enhancer_is1) (Version: - Infognition Co. Ltd.)
Video Mover (HKLM\...\Video Mover_is1) (Version: - )
VirtualCloneDrive (HKLM\...\VirtualCloneDrive) (Version: - Elaborate Bytes)
VirtualDub Filter Pack 1.0 (HKLM\...\VirtualDub Filter Pack_is1) (Version: - Dee Mon)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Windows Sound Schemes (HKLM\...\UltSounds) (Version: - Microsoft Corporation)
WinRAR 5.10 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH)
Xvid Video Codec (HKLM\...\Xvid Video Codec 1.3.0) (Version: 1.3.0 - Xvid Team)
Yahoo! Detect (HKLM\...\YTdetect) (Version: - )
Yahoo! Messenger (HKLM\...\Yahoo! Messenger) (Version: - Yahoo! Inc.)

========================= Memory info: ===================================

Percentage of memory in use: 45%
Total physical RAM: 2045.77 MB
Available physical RAM: 1124.44 MB
Total Pagefile: 7988.99 MB
Available Pagefile: 6978.39 MB
Total Virtual: 2047.88 MB
Available Virtual: 1959.43 MB

========================= Partitions: =====================================

1 Drive c: () (Fixed) (Total:169.41 GB) (Free:25.23 GB) NTFS
2 Drive d: () (Fixed) (Total:63.48 GB) (Free:10.23 GB) NTFS

========================= Users: ========================================

User accounts for \\ME-PC

Administrator            Guest                    Marcus
MyEminence               Stempo                   Tempo

========================= Restore Points ==================================

15-01-2015 12:44:05 avast! antivirus system restore point
15-01-2015 13:30:42 Removed Adobe Reader 9.2.
15-01-2015 13:32:42 Removed Java™ 6 Update 30

**** End of log ****

#18
zep516

Posted 15 January 2015 - 04:55 PM

Trusted Helper

Malware Removal
8,090 posts

Hello,

henrymills,

I see that you made more free space 1 Drive c: () (Fixed) (Total:169.41 GB) (Free:25.23 GB) NTFS. Very Good !

Please run these 2 next.

Next

Please download AdwCleaner by Xplode onto your Desktop.

Close all open programs and internet browsers.
Double click on AdwCleaner.exe to run the tool.
Click the Scan button and wait for the process to complete.
Click the Report button and the report will open in Notepad.
NOTE: If you get an error message, it means that nothing was found. Exit from AdwCleaner.
Click on the Clean button follow the prompts.
A log file will automatically open after the scan has finished and the PC has rebooted.
Please post the content of that log file with your next answer.
You can find the log file at C:\AdwCleaner
Next

Please download Junkware Removal Tool to your Desktop.

Please close your security software to avoid potential conflicts. See Here how to disable you security protection (Anti Virus)
Run the tool by double-clicking it. If you are using Windows Vista or 7, right-mouse click it and select Run as administrator.
The tool will open and start scanning your system.
Please be patient as this can take a while to complete, depending on your system's specifications.
On completion, a log (JRT.txt) is saved to your Desktop and will automatically open.
Please post the contents of JRT.txt into your reply.

In your next reply post;
- The AdwCleaner [SO].txt Log
- The JRT.txt Log
Thanks
Joe

#19
henrymills

Posted 19 January 2015 - 07:50 AM

Member

Topic Starter
Member
47 posts

------------------------------------------------------------------------------------------------------

AdwCleaner Log

------------------------------------------------------------------------------------------------------

# AdwCleaner v4.108 - Report created 19/01/2015 at 21:33:12
# Updated 17/01/2015 by Xplode
# Database : 2015-01-13.2 [Local]
# Operating System : Windows Vista ™ Ultimate Service Pack 2 (32 bits)
# Username : MyEminence - ME-PC
# Running from : C:\Users\MyEminence\Desktop\adwcleaner_4.108.exe
# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

File Deleted : C:\Users\MyEminence\AppData\Roaming\Mozilla\Firefox\Profiles\2isryo5x.jamocha\foxydeal.sqlite
File Deleted : C:\Users\MyEminence\AppData\Roaming\Mozilla\Firefox\Profiles\7h9u3pwa.AllyEml\foxydeal.sqlite
File Deleted : C:\Users\MyEminence\AppData\Roaming\Mozilla\Firefox\Profiles\ywjnhiw1.default\searchplugins\speedbit.xml

***** [ Scheduled Tasks ] *****

***** [ Shortcuts ] *****

***** [ Registry ] *****

***** [ Browsers ] *****

-\\ Internet Explorer v9.0.8112.16421

-\\ Mozilla Firefox v35.0 (x86 en-US)

[ywjnhiw1.default\prefs.js] - Line Deleted : user_pref("browser.startup.homepage", "hxxp://home.speedbit.com/?pid=%s&aid=%s");
[ywjnhiw1.default\prefs.js] - Line Deleted : user_pref("browser.startup.homepage_override_url", "hxxp://home.speedbit.com/?pid=%s&aid=%s");

-\\ Google Chrome v39.0.2171.95

-\\ Opera v18.0.1284.68

*************************

AdwCleaner[R0].txt - [43493 octets] - [09/11/2014 20:28:35]
AdwCleaner[R1].txt - [42850 octets] - [09/11/2014 20:56:25]
AdwCleaner[R2].txt - [3950 octets] - [22/12/2014 15:42:39]
AdwCleaner[R3].txt - [1781 octets] - [19/01/2015 21:27:42]
AdwCleaner[S0].txt - [1336 octets] - [09/11/2014 20:32:39]
AdwCleaner[S1].txt - [46594 octets] - [09/11/2014 20:59:01]
AdwCleaner[S2].txt - [4413 octets] - [22/12/2014 15:54:40]
AdwCleaner[S3].txt - [1730 octets] - [19/01/2015 21:33:12]

########## EOF - C:\AdwCleaner\AdwCleaner[S3].txt - [1790 octets] ##########

------------------------------------------------------------------------------------------------------

JRT.txt

------------------------------------------------------------------------------------------------------

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.1 (12.28.2014:1)
OS: Windows Vista ™ Ultimate x86
Ran by MyEminence on Mon 01/19/2015 at 21:39:24.81
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Registry Values

~~~ Registry Keys

~~~ Files

~~~ Folders

~~~ Event Viewer Logs were cleared

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Mon 01/19/2015 at 21:44:29.80
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

#20
zep516

Posted 20 January 2015 - 03:38 PM

Trusted Helper

Malware Removal
8,090 posts

Hello Henrymills ,

Sorry for some delay work has been busy.

What problems do we still have with this computer ?

Thanks
Joe

#21
henrymills

Posted 22 January 2015 - 11:27 AM

Member

Topic Starter
Member
47 posts

I dont see any error anymore.One thing that bothers me though is the driver from www.komeil.com/blog/install-csr-bluetooth-driver-headset-windows-7.Before the problem in my PC I,installed the driver from www.komeil.com first and they work.Then I was afraid its not from official source,so I look for an official source and found one,more updated CSR bluetooth driver.The problem is when I installed it,it showed the error "Could not access VBScript run time for custom action".So I tried to uninstalled it and it gave the same error.Then I researched and found i should register vbscript.dll but I needed to turn off my antivirus.After I turned off my antivirus it still gives the same error when uninstalling so I just manually uninstall the more updated CSR bluetooth driver.Then i installed again the driver that work from www.komeil.com.Then the virus came,so Ive no idea if its the driver that caused the virus or something else.Can you please check if the driver from www.komeil.com/blog/install-csr-bluetooth-driver-headset-windows-7 is safe for me to use.

#22
zep516

Posted 22 January 2015 - 07:12 PM

Trusted Helper

Malware Removal
8,090 posts

Hello,

OK. I'll look into the driver for you. Can you run an ESET scan for me. It may take a while to run so don't wait for it. It may also show things that we already took care of....

ESET Online Scanner

Note: You can use either Internet Explorer or Mozilla FireFox for this scan. You will however need to disable your current installed Anti-Virus, how to do so can be read here.

Please go >>HERE<< then click on:

Note: If using Mozilla Firefox you will need to download esetsmartinstaller_enu.exe when prompted then double click on the icon to install.

All of the below instructions are compatible with either Internet Explorer or Mozilla FireFox.
Select the option YES, I accept the Terms of Use then click on:
When prompted allow the Add-On/Active X to install.
Make sure that the option Remove found threats is NOT checked, and the option Scan archives is checked.
Now click on Advanced Settings and select the following:
- Scan for potentially unwanted applications
- Scan for potentially unsafe applications
- Enable Anti-Stealth Technology

Now click on:
The virus signature database... will begin to download. Be patient this make take some time depending on the speed of your Internet Connection.
When completed the Online Scan will begin automatically.
Do not touch either the Mouse or keyboard during the scan otherwise it may stall.
When completed make sure you first copy the logfile located at C:\Program Files\ESET\EsetOnlineScanner\log.txt
Copy and paste that log as a reply to this topic.
Now click on:
(Selecting Uninstall application on close if you so wish)

Post the ESET Log in your next reply to me.

Thanks
Joe

#23
henrymills

Posted 24 January 2015 - 11:16 AM

Member

Topic Starter
Member
47 posts

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=c74238c132adc24aba9ae3baca06bbb2
# engine=22124
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2015-01-24 04:29:46
# local_time=2015-01-25 12:29:46 (+0800, Malay Peninsula Standard Time)
# country="United States"
# lang=1033
# osver=6.0.6002 NT Service Pack 2
# compatibility_mode_1='avast! Antivirus'
# compatibility_mode=783 16777213 71 94 779212 6742597 0 0
# compatibility_mode_1=''
# compatibility_mode=5892 16776574 100 100 2665895 259646241 0 0
# scanned=369157
# found=42
# cleaned=0
# scan_time=12418
sh=8BF5D5B8A41DBCE96A547B946BBA904922F6A2A4 ft=1 fh=805195d82b305a4d vn="Win32/Toolbar.Conduit potentially unwanted application" ac=I fn="C:\HSS-2.88-install-zdnetcom-5-conduit.exe"
sh=D6AD39128E426EA315AD1CB2FB6476573ADCD550 ft=1 fh=6d329a1c7cb9e116 vn="a variant of Win32/Bundled.Toolbar.Ask.G potentially unsafe application" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\Ask.com\GenericAskToolbar.dll.vir"
sh=E47BEEA3E70DAFCEEECD9F2F1602EE779E7CEA86 ft=1 fh=286a523ce1e77408 vn="a variant of Win32/Bundled.Toolbar.Ask.G potentially unsafe application" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\Ask.com\precache.exe.vir"
sh=7E0FC1B7D58BAC85E4CB6C8895EDFAA2D817C563 ft=1 fh=0b3980be7072c926 vn="a variant of Win32/Bundled.Toolbar.Ask.G potentially unsafe application" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\Ask.com\SaUpdate.exe.vir"
sh=14D47E1A3F0ED57C361A4A8D5CF0CF80DD5FEB08 ft=1 fh=8883c7f6eb72daf7 vn="a variant of Win32/Bundled.Toolbar.Ask.G potentially unsafe application" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\Ask.com\UpdateTask.exe.vir"
sh=365D6C466798F62ED86556CD6549BD6B4E540889 ft=1 fh=72b178fa6283d654 vn="a variant of Win32/Bundled.Toolbar.Ask.G potentially unsafe application" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\Ask.com\Updater\Updater.exe.vir"
sh=613BDCDC4B16EB466124A549D021646EAFB70B7C ft=1 fh=9de8d346ff807dc8 vn="Win32/Bundled.Toolbar.Ask potentially unsafe application" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\MyEminence\AppData\LocalLow\AskToolbar\setup.exe.vir"
sh=3F02D0088497448A98B0C43FC688DE8A17C16AA0 ft=0 fh=0000000000000000 vn="Win32/Adware.ADON potentially unwanted application" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\MyEminence\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\eBay.lnk.vir"
sh=3F02D0088497448A98B0C43FC688DE8A17C16AA0 ft=0 fh=0000000000000000 vn="Win32/Adware.ADON potentially unwanted application" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\MyEminence\AppData\Roaming\Microsoft\Windows\Start Menu\eBay.lnk.vir"
sh=3F02D0088497448A98B0C43FC688DE8A17C16AA0 ft=0 fh=0000000000000000 vn="Win32/Adware.ADON potentially unwanted application" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\MyEminence\Desktop\eBay.lnk.vir"
sh=CA16074471717A59B89027B2BFF7AB309DA7C916 ft=1 fh=29a15d6658e7ef8c vn="a variant of Win32/HackTool.CheatEngine.AB potentially unsafe application" ac=I fn="C:\Program Files\Cheat Engine 6\cheatengine-i386.exe"
sh=1E23475F101FC37965A455948DB18E823010A5B9 ft=1 fh=a8f2a133d9eaf55a vn="a variant of Win32/HackTool.CheatEngine.AA potentially unsafe application" ac=I fn="C:\Program Files\Cheat Engine 6\dbk32.sys"
sh=C97173F20554AEC2779014122C00412661E031B4 ft=1 fh=da30f2d8603fcc8d vn="a variant of Win32/Bundled.Toolbar.Ask.G potentially unsafe application" ac=I fn="C:\Program Files\epsxe170\va32.exe"
sh=93C70CCC7BCB2FE33BE921DAD059B016B02D6638 ft=0 fh=0000000000000000 vn="Win32/Adware.ADON potentially unwanted application" ac=I fn="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eBay.url"
sh=60C77FF66F63F585FCE95C78FF44B513E2AAB9F9 ft=1 fh=17494879e4339ab3 vn="Win32/Bundled.Toolbar.Google.D potentially unsafe application" ac=I fn="C:\tempo\downloads\ccsetup400.exe"
sh=59F39A58312371A3D83089A71D86615D6EE5FE66 ft=1 fh=ed69c0f981857828 vn="Win32/OpenCandy potentially unsafe application" ac=I fn="C:\tempo\downloads\CheatEngine60.exe"
sh=9D6198C674F18CB1D7AE3BBFBB1F7DD6BE634CEF ft=0 fh=0000000000000000 vn="a variant of Win32/GameHack.F potentially unsafe application" ac=I fn="C:\tempo\downloads\nn2motb112promo-ch.zip"
sh=0C6E8F80E71A62ED3AB05E93688854AE528B3A8F ft=0 fh=0000000000000000 vn="a variant of Win32/HackTool.CheatEngine.AB potentially unsafe application" ac=I fn="C:\tempo\downloads\The_Elder_Scrolls_V_Skyrim_v1.2.12.0_+_8_Trainer.rar"
sh=E115AC80776D091765ED3EA022A001E0D8AA4DC9 ft=1 fh=85ce5afd4a88c17f vn="Win32/Adware.ADON potentially unwanted application" ac=I fn="C:\tempo\downloads\unlocker1.9.0.exe"
sh=642EAE83A0B04822A1A194F3AA8FFD79AE65C1C2 ft=1 fh=61b6c1e0c1208a47 vn="a variant of Win32/Bundled.Toolbar.Ask potentially unsafe application" ac=I fn="C:\tempo\downloads\2worlds\cpu-z_1.57-setup-en.exe"
sh=EEDE6AF38E8608E309BFB4B1ABC74DF0DCE0B39B ft=1 fh=25fa6ad5069447f8 vn="Win32/Spigot.A potentially unwanted application" ac=I fn="C:\tempo\downloads\Jpop Funk\Unlocker1.9.2.exe.dap"
sh=3C0E821790759B866FDED3C1DB3A5DBAD90C442D ft=1 fh=b480bc319bd813a9 vn="Win32/Spigot.A potentially unwanted application" ac=I fn="C:\tempo\downloads\Jpop Funk\Unlocker1.9.2_1.exe"
sh=23F266BC84C2F0F2E910970F25ED515C7A8F3EE4 ft=1 fh=a960bfce66bc0bff vn="a variant of Win32/GameHack.F potentially unsafe application" ac=I fn="C:\tempo\downloads\nn2motb112promo-ch\Neverwinter Nights 2 and Mask of the Betrayor Promo Trainer.exe"
sh=A2BF7ACD7B9D1CEE7308A7D3598931F9B8E11A05 ft=1 fh=d3599f35f12040b4 vn="a variant of Win32/HackTool.CheatEngine.AB potentially unsafe application" ac=I fn="C:\tempo\downloads\The_Elder_Scrolls_V_Skyrim_v1.2.12.0_+_8_Trainer\The Elder Scrolls V Skyrim v1.2.12.0 + 8 Trainer.exe"
sh=93C70CCC7BCB2FE33BE921DAD059B016B02D6638 ft=0 fh=0000000000000000 vn="Win32/Adware.ADON potentially unwanted application" ac=I fn="C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\eBay.url"
sh=93C70CCC7BCB2FE33BE921DAD059B016B02D6638 ft=0 fh=0000000000000000 vn="Win32/Adware.ADON potentially unwanted application" ac=I fn="C:\Users\MyEminence\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\eBay.url"
sh=93C70CCC7BCB2FE33BE921DAD059B016B02D6638 ft=0 fh=0000000000000000 vn="Win32/Adware.ADON potentially unwanted application" ac=I fn="C:\Users\MyEminence\Desktop\DesktopFiles\eBay.url"
sh=A453ABD0443494969C382C3753F83A64B4D27768 ft=0 fh=0000000000000000 vn="a variant of Win32/HackTool.CheatEngine.AF potentially unsafe application" ac=I fn="C:\Users\MyEminence\Documents\gghz-tesvstrn.zip"
sh=513BDF5FEF6352CCF591D74D3A28AAB5BDDCDCDD ft=0 fh=0000000000000000 vn="a variant of Win32/HackTool.CheatEngine.AB potentially unsafe application" ac=I fn="C:\Users\MyEminence\Documents\The Elder Scrolls V Skyrim v1.1.21.0 + 8 Trainer.zip"
sh=63C406E8FF3E318C7C7F224A30DF0A4C83A96697 ft=1 fh=ae96fd50ad80207f vn="a variant of Win32/HackTool.CheatEngine.AF potentially unsafe application" ac=I fn="C:\Users\MyEminence\Documents\gghz-tesvstrn\gghz-tesvstrn.EXE"
sh=C87D2FC032CC036EB8E5FD5A2F284679966D6221 ft=1 fh=8145b14b6a7a164d vn="Win32/OpenCandy potentially unsafe application" ac=I fn="C:\Users\MyEminence\Documents\My DAP Downloads\avc-free.exe"
sh=07FD6588CB07E4D25BF76AE676A6A89D0C241932 ft=1 fh=5dca21ea9aded1b0 vn="a variant of Win32/HackTool.CheatEngine.AB potentially unsafe application" ac=I fn="C:\Users\MyEminence\Documents\The Elder Scrolls V Skyrim v1.1.21.0 + 8 Trainer\The Elder Scrolls V Skyrim v1.1.21.0 + 8 Trainer.exe"
sh=9A4F277CD28AE0D2961861ED8837732AF31667AE ft=0 fh=0000000000000000 vn="a variant of Win32/Bundled.Toolbar.Ask.G potentially unsafe application" ac=I fn="C:\Windows\Installer\2a0d75.msi"
sh=68246432F1C1A7707AF1D24A9F0F232CCC30497B ft=1 fh=7a063cda2b8e0a07 vn="a variant of Win32/HackTool.CheatEngine.AA potentially unsafe application" ac=I fn="C:\Windows.old\Program Files\Cheat Engine\Cheat Engine.exe"
sh=2FE950B870D9069F0B22C7AC1FAEF8E4424E9651 ft=1 fh=a5c846115a65f7bb vn="a variant of Win32/HackTool.CheatEngine.AA potentially unsafe application" ac=I fn="C:\Windows.old\Program Files\Cheat Engine\dbk32.dll"
sh=F923B0CFE8705E470B9FE4C47D0E5290D565603B ft=1 fh=950e50074358bcad vn="a variant of Win32/HackTool.CheatEngine.AA potentially unsafe application" ac=I fn="C:\Windows.old\Program Files\Cheat Engine\dbk32.sys"
sh=9C723751D6AB01D63E919D43E155C286746BD3C0 ft=1 fh=a3a11abfd3f5cc9e vn="a variant of Win32/HackTool.SystemCall.AA potentially unsafe application" ac=I fn="C:\Windows.old\Program Files\Cheat Engine\Systemcallretriever.exe"
sh=BF3AD67791DC89BAACDA47D492B767C5779E62A6 ft=1 fh=9dce5f4a7c211890 vn="a variant of Win32/HackTool.SystemCall.AA potentially unsafe application" ac=I fn="C:\Windows.old\Program Files\Cheat Engine\systemcallsignal.exe"
sh=93C70CCC7BCB2FE33BE921DAD059B016B02D6638 ft=0 fh=0000000000000000 vn="Win32/Adware.ADON potentially unwanted application" ac=I fn="D:\Users\All Users\Microsoft\Windows\Start Menu\Programs\eBay.url"
sh=4DAD4AF6EDC09D957BDA5361E3894A977A11C6DA ft=1 fh=91324aad7b873151 vn="a variant of Win32/GameHack.F potentially unsafe application" ac=I fn="D:\Users\watta\AppData\Local\Temp\Temp1_nastywarriors6ofdyn-ch.zip\Dynasty Warriors 6 Trainer.exe"
sh=8BF5D5B8A41DBCE96A547B946BBA904922F6A2A4 ft=1 fh=805195d82b305a4d vn="Win32/Toolbar.Conduit potentially unwanted application" ac=I fn="D:\Users\watta\Downloads\HSS-2.88-install-zdnetcom-5-conduit.exe"
sh=07F64659395EA307A5350E09004C9C789F0C7A9E ft=1 fh=eaaa106b05e3b536 vn="Win32/OpenCandy potentially unsafe application" ac=I fn="D:\Users\watta\Music\CheatEngine561.exe"

#24
zep516

Posted 25 January 2015 - 01:51 PM

Trusted Helper

Malware Removal
8,090 posts

Thanks Henrymills,

Let me look that over for you.

#25
zep516

Posted 26 January 2015 - 06:30 PM

Trusted Helper

Malware Removal
8,090 posts

There are some minor things in your online scan that should be removed.

delete files

Copy all text in the quote box (below)...to Notepad.
@echo off
rd /s /q "D:\Users\watta\Music\CheatEngine561.exe"
rd /s /q "D:\Users\watta\Downloads\HSS-2.88-install-zdnetcom-5-conduit.exe"
rd /s /q "D:\Users\watta\AppData\Local\Temp\Temp1_nastywarriors6ofdyn-ch.zip\Dynasty Warriors 6 Trainer.exe"
rd /s /q "D:\Users\All Users\Microsoft\Windows\Start Menu\Programs\eBay.url"
rd /s /q "C:\Windows.old\Program Files\Cheat Engine\systemcallsignal.exe"
rd /s /q "C:\Windows.old\Program Files\Cheat Engine\Systemcallretriever.exe"
rd /s /q "C:\Windows.old\Program Files\Cheat Engine\dbk32.sys"
rd /s /q "C:\Windows.old\Program Files\Cheat Engine\dbk32.dll"
rd /s /q "C:\Windows.old\Program Files\Cheat Engine\Cheat Engine.exe"
rd /s /q "C:\Windows\Installer\2a0d75.msi"
rd /s /q "C:\Users\MyEminence\Documents\The Elder Scrolls V Skyrim v1.1.21.0 + 8 Trainer\The Elder Scrolls V Skyrim v1.1.21.0 + 8 Trainer.exe"
rd /s /q "C:\Users\MyEminence\Documents\gghz-tesvstrn\gghz-tesvstrn.EXE"
rd /s /q "C:\Users\MyEminence\Documents\My DAP Downloads\avc-free.exe"
rd /s /q "C:\Users\MyEminence\Documents\The Elder Scrolls V Skyrim v1.1.21.0 + 8 Trainer.zip"
rd /s /q "C:\Users\MyEminence\Documents\gghz-tesvstrn.zip"
rd /s /q "C:\Users\MyEminence\Desktop\DesktopFiles\eBay.url"
rd /s /q "C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\eBay.url"
rd /s /q "C:\Users\MyEminence\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\eBay.url"
rd /s /q "C:\tempo\downloads\The_Elder_Scrolls_V_Skyrim_v1.2.12.0_+_8_Trainer\The Elder Scrolls V Skyrim v1.2.12.0 + 8 Trainer.exe"
rd /s /q "C:\tempo\downloads\nn2motb112promo-ch\Neverwinter Nights 2 and Mask of the Betrayor Promo Trainer.exe"
rd /s /q "C:\tempo\downloads\Jpop Funk\Unlocker1.9.2_1.exe"
rd /s /q "C:\tempo\downloads\2worlds\cpu-z_1.57-setup-en.exe"
rd /s /q "C:\tempo\downloads\unlocker1.9.0.exe"
rd /s /q "C:\tempo\downloads\The_Elder_Scrolls_V_Skyrim_v1.2.12.0_+_8_Trainer.rar"
rd /s /q "C:\Program Files\epsxe170\va32.exe"
rd /s /q "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eBay.url"
rd /s /q "C:\Program Files\Cheat Engine 6\dbk32.sys"
rd /s /q "C:\tempo\downloads\CheatEngine60.exe"
rd /s /q "C:\tempo\downloads\nn2motb112promo-ch.zip"
del %0
Save the Notepad file on your desktop...as delfile.bat... save type as "All Files"
It should look like this: <--XP<--vista
Double click on delfile.bat to execute it.
A black CMD window will flash, then disappear...this is normal.
The files and folders, if found...will have been deleted and the "delfile.bat" file will also be deleted.

Let me know when that is done.

Thanks
Joe

#26
henrymills

Posted 26 January 2015 - 06:33 PM

Member

Topic Starter
Member
47 posts

Do i need to remove unlocker and cheatengine? Because Im using those when file is lock and on games.

#27
zep516

Posted 26 January 2015 - 06:46 PM

Trusted Helper

Malware Removal
8,090 posts

Hello,

No you don't need to remove that if you're using it or any other item you're using.

Joe

#28
henrymills

Posted 26 January 2015 - 06:49 PM

Member

Topic Starter
Member
47 posts

But they are part of those files you ask me to delete and found by eset as potentially unsafe/unwanted program.So its ok if I dont delete those 2 or should I delete then reinstall new?