Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

W7 x64 boot failure C0000135 "%hs is missing".

Started by senselocke , Sep 01 2015 04:26 PM

Please log in to reply

#1
senselocke

Posted 01 September 2015 - 04:26 PM

Member

Member
35 posts

Windows starts to boot, I see the logo, then I get a flash of blue.
Held F8, disabled auto-restart, got the above blue screen error.

Already booted into Windows RE, ran repair, didn't fix it. Error that popped up was "BadDriver".

Tried safe mode, System seems to hang on/after "aswrvrt.sys" file

I've run chkdsk from the command prompt within WinRE, however sfc won't function. It tosses up an error about how a system reboot is scheduled. No parameters I've found (OFFWINDIR, OFFBOOTDIR) will circumvent this.

I cannot get to the desktop on this machine. I do have a few laptops with Windows 7 in the house I can use otherwise.

I've found several threads with this issue on this site, but the details are all slightly different from mine. You folks seem very helpful and knowledgeable, I'm hopeful you can help me recover my OS installation.

Thank you.

#2
JSntgRvr

Posted 01 September 2015 - 06:02 PM

Global Moderator

Global Moderator
11,579 posts

Hi and :welcome:

Please download Farbar Recovery Scan Tool and save it to a flash drive.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

Plug the flash drive into the infected PC.

If you are using Windows 8 consult How to use the Windows 8 System Recovery Environment Command Prompt to enter System Recovery Command prompt.

If you are using Vista or Windows 7 enter System Recovery Options.

To enter System Recovery Options from the Advanced Boot Options:
Restart the computer.
As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
Use the arrow keys to select the Repair your computer menu item.
Select US as the keyboard language settings, and then click Next.
Select the operating system you want to repair, and then click Next.
Select your user account an click Next.
Note: In case you can not enter System Recovery Options by using F8 method, you can use Windows installation disc, or make a repair disc. Any Windows installation disc or a repair disc made on another computer can be used.
To make a repair disk on Windows 7 consult: http://www.sevenforu...isc-create.html

To enter System Recovery Options by using Windows installation disc:
Insert the installation disc.
Restart your computer.
If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.
Click Repair your computer.
Select US as the keyboard language settings, and then click Next.
Select the operating system you want to repair, and then click Next.
Select your user account and click Next.
On the System Recovery Options menu you will get the following options:
Startup Repair
System Restore
Windows Complete PC Restore
Windows Memory Diagnostic Tool
Command Prompt
Select Command Prompt

Once in the Command Prompt:
In the command window type in notepad and press Enter.
The notepad opens. Under File menu select Open.
Select "Computer" and find your flash drive letter and close the notepad.
In the command window type e:\frst (for x64 bit version type e:\frst64) and press Enter
Note: Replace letter e with the drive letter of your flash drive.
The tool will start to run.
When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) on the flash drive. Please copy and paste it to your reply.

#3
senselocke

Posted 01 September 2015 - 06:34 PM

Member

Topic Starter
Member
35 posts

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:31-08-2015

Ran by SYSTEM on MININT-Q72KSTL (01-09-2015 19:26:43)

Running from F:\

Platform: WIN_7 Service Pack 1 (X64) Language: English (United States)

Boot Mode: Recovery

Default: ControlSet001

ATTENTION!:=====> If the system is bootable FRST must be run from normal or Safe mode to create a complete log.

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Winlogon: [Userinit]

HKLM-x32\...\Winlogon: [Userinit] [X]

HKLM\...\Winlogon: [Shell] [0 ] () <=== ATTENTION

HKLM-x32\...\Winlogon: [Shell] [0 ] () <=== ATTENTION

HKLM\...\InprocServer32: [Default-wbemess] ATTENTION! ====> ZeroAccess?

HKLM\...D6A79037F57F\InprocServer32: [Default-fastprox] ATTENTION! ====> ZeroAccess?

HKLM\...26dfa299cadb\InprocServer32: [Authentication UI Logon UI] <==== ATTENTION

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 AMD FUEL Service; C:\Program Files\ATI\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-08-06] (Advanced Micro Devices, Inc.)

S4 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-19] (Apple Inc.)

S2 avast! Antivirus; C:\Program Files\AVAST\AvastSvc.exe [146600 2015-08-08] (AVAST Software)

S2 dkab_device; C:\Windows\system32\DKabcoms.exe [1034480 2008-07-01] ( )

S2 dkab_device; C:\Windows\SysWOW64\DKabcoms.exe [586992 2008-07-01] ( )

S2 FoxitCloudUpdateService; C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe [242880 2015-07-02] (Foxit Software Inc.)

S2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1155216 2015-07-23] (NVIDIA Corporation)

S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)

S2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1871504 2015-07-23] (NVIDIA Corporation)

S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5544592 2015-07-23] (NVIDIA Corporation)

S2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [166912 2013-10-17] ()

S4 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27792 2012-08-02] (VIA Technologies, Inc.)

S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-26] (Microsoft Corporation)

S3 AvastVBoxSvc; "C:\Program Files\AVAST\ng\vbox\AvastVBoxSVC.exe" [X]

S3 msiserver; %systemroot%\system32\msiexec.exe /V [X]

S3 SysMain; %systemroot%\system32\sysmain.dll [X]

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 AODDriver4.1; C:\Program Files\ATI\ATI.ACE\Fuel\amd64\AODDriver2.sys [53888 2012-03-05] (Advanced Micro Devices)

S2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-08-08] (AVAST Software)

S2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [90968 2015-08-08] (AVAST Software)

S1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-08-08] (AVAST Software)

S0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-08-08] (AVAST Software)

S1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1048344 2015-08-15] (AVAST Software)

S1 aswSP; C:\Windows\system32\drivers\aswSP.sys [447944 2015-08-08] (AVAST Software)

S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [150672 2015-08-08] (AVAST Software)

S0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [274808 2015-08-08] (AVAST Software)

S0 dcrypt; C:\Windows\System32\drivers\dcrypt.sys [210632 2014-07-09] ()

S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)

S1 ElRawDisk; C:\Windows\system32\drivers\rsdrvx64.sys [26024 2009-02-12] (EldoS Corporation)

S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)

S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-04-14] (Malwarebytes Corporation)

S3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [47976 2015-07-02] (NVIDIA Corporation)

S0 snapman380; C:\Windows\System32\DRIVERS\snman380.sys [237600 2015-04-13] (Acronis)

S0 tdrpman174; C:\Windows\System32\DRIVERS\tdrpm174.sys [1581088 2015-04-13] (Acronis)

S3 VUSB3HUB; C:\Windows\System32\DRIVERS\ViaHub3.sys [225792 2014-10-31] (VIA Technologies, Inc.)

S2 WinI2C-DDC; C:\Windows\SysWOW64\drivers\DDCDrv.sys [10240 2008-04-09] (Nicomsoft Ltd.)

S3 xhcdrv; C:\Windows\System32\DRIVERS\xhcdrv.sys [305664 2014-10-31] (VIA Technologies, Inc.)

S3 AtiDCM; \??\C:\Users\senselocke\AppData\Local\Temp\atdcm64a.sys [X]

S3 monitor; system32\DRIVERS\monitor.sys [X]

S4 NVHDA; system32\drivers\nvhda64v.sys [X]

S2 VBoxAswDrv; \??\C:\Program Files\AVAST\ng\vbox\VBoxAswDrv.sys [X]

S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-09-01 19:25 - 2015-09-01 19:26 - 00000000 ____D C:\FRST

2015-09-01 15:04 - 2015-09-01 15:04 - 00000000 __SHD C:\found.000

2015-08-25 05:41 - 2015-08-25 05:41 - 01048576 ___SH C:\Windows\System32\config\CO7AE4~1.REG

2015-08-25 05:41 - 2015-08-25 05:41 - 01048576 ___SH C:\Windows\System32\config\CO55CA~1.REG

2015-08-25 05:41 - 2015-08-25 05:41 - 01048576 ___SH C:\Windows\System32\config\CO11E9~1.REG

2015-08-17 11:58 - 2015-08-17 11:58 - 00000000 ____D C:\Program Files\Dell_HostCD

2015-08-17 11:58 - 2008-09-08 13:22 - 00594432 _____ ( ) C:\Windows\System32\lexlog.dll

2015-08-17 11:58 - 2008-06-26 06:59 - 00928256 _____ C:\Windows\System32\softcoin.dll

2015-08-17 11:58 - 2008-06-26 06:59 - 00420864 _____ C:\Windows\System32\gencoin.dll

2015-08-17 11:57 - 2015-08-17 11:59 - 00039146 _____ C:\Windows\System32\LexFiles.ulf

2015-08-17 11:57 - 2015-08-17 11:57 - 00000000 ____D C:\Program Files\Dell

2015-08-17 11:57 - 2008-09-08 13:22 - 00020152 _____ C:\Windows\System32\DKabpmui.chm

2015-08-17 11:57 - 2008-07-01 18:03 - 01034480 _____ ( ) C:\Windows\System32\DKabcoms.exe

2015-08-17 11:57 - 2008-07-01 18:03 - 00586992 _____ ( ) C:\Windows\SysWOW64\DKabcoms.exe

2015-08-17 11:57 - 2008-06-25 11:06 - 00982528 _____ ( ) C:\Windows\System32\dkabpmui.dll

2015-08-17 11:57 - 2008-06-25 11:03 - 01620992 _____ ( ) C:\Windows\System32\dkabserv.dll

2015-08-17 11:57 - 2008-06-25 11:03 - 01386496 _____ ( ) C:\Windows\System32\dkabip1.dll

2015-08-17 11:57 - 2008-06-25 11:01 - 01331712 _____ ( ) C:\Windows\System32\dkabusb1.dll

2015-08-17 11:57 - 2008-06-25 10:59 - 00752128 _____ ( ) C:\Windows\System32\dkabpar1.dll

2015-08-17 11:57 - 2008-06-25 10:59 - 00676864 _____ ( ) C:\Windows\System32\dkabhcp.dll

2015-08-17 11:57 - 2008-06-25 10:59 - 00582144 _____ ( ) C:\Windows\System32\dkabcomm.dll

2015-08-17 11:57 - 2008-06-25 10:58 - 01395200 _____ ( ) C:\Windows\System32\dkabcomc.dll

2015-08-17 11:57 - 2008-06-25 10:58 - 00893440 _____ ( ) C:\Windows\System32\dkablmpm.dll

2015-08-17 11:57 - 2008-06-25 10:58 - 00674816 _____ ( ) C:\Windows\System32\dkabiobj.dll

2015-08-17 11:57 - 2008-06-25 10:58 - 00549376 _____ ( ) C:\Windows\System32\dkabinpa.dll

2015-08-17 11:57 - 2008-06-25 10:58 - 00514048 _____ ( ) C:\Windows\System32\dkabiesc.dll

2015-08-17 11:57 - 2008-06-25 10:29 - 01044480 _____ ( ) C:\Windows\SysWOW64\dkabserv.dll

2015-08-17 11:57 - 2008-06-25 10:24 - 00819200 _____ ( ) C:\Windows\SysWOW64\dkabcomc.dll

2015-08-17 11:57 - 2008-06-25 10:24 - 00438272 _____ ( ) C:\Windows\SysWOW64\dkabhcp.dll

2015-08-17 11:57 - 2008-06-25 10:24 - 00376832 _____ ( ) C:\Windows\SysWOW64\dkabcomm.dll

2015-08-17 11:57 - 2008-04-15 11:50 - 00002590 _____ C:\Windows\SysWOW64\dkab.loc

2015-08-17 11:57 - 2008-04-15 11:50 - 00002590 _____ C:\Windows\System32\dkab.loc

2015-08-13 05:13 - 2015-08-13 05:13 - 00000000 ____D C:\Users\senselocke\Desktop\com.gamehivecorp.taptitans --tourney 2874

2015-08-12 13:13 - 2015-08-12 13:13 - 00000000 ____D C:\Program Files (x86)\HFSExplorer

2015-08-12 13:12 - 2015-08-12 13:12 - 01688563 ____X C:\Users\senselocke\Desktop\hfsexplorer-0.23-setup.exe

2015-08-11 18:50 - 2015-08-11 18:50 - 00003118 _____ C:\Windows\System32\Tasks\{227D5253-E7AB-437E-8500-A5BA6259000F}

2015-08-11 18:38 - 2015-08-11 18:38 - 00000000 ____D C:\Program Files (x86)\Microsoft XNA

2015-08-11 10:42 - 2015-08-11 10:42 - 00000000 ____D C:\Users\senselocke\Desktop\DE=HRDC hard save files

2015-08-09 20:42 - 2015-08-09 20:42 - 00000000 ____D C:\Users\senselocke\AppData\Roaming\NVIDIA

2015-08-09 20:27 - 2015-08-09 20:27 - 00000000 ____D C:\Users\senselocke\AppData\Roaming\vlc

2015-08-09 14:45 - 2015-08-09 20:33 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2015-08-08 05:12 - 2015-08-08 05:12 - 00000000 ____D C:\Users\senselocke\AppData\Local\NVIDIA

2015-08-08 05:11 - 2015-08-08 05:11 - 00000000 ____D C:\ProgramData\NVIDIA

2015-08-08 05:02 - 2015-07-23 20:21 - 01756608 _____ (NVIDIA Corporation) C:\Windows\System32\nvspbridge64.dll

2015-08-08 05:02 - 2015-07-23 20:21 - 01710568 _____ (NVIDIA Corporation) C:\Windows\System32\nvspcap64.dll

2015-08-08 05:02 - 2015-07-23 20:21 - 01423304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll

2015-08-08 05:02 - 2015-07-23 20:21 - 01316000 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll

2015-08-08 05:01 - 2015-07-22 17:31 - 06873744 _____ (NVIDIA Corporation) C:\Windows\System32\nvcpl.dll

2015-08-08 05:01 - 2015-07-22 17:31 - 03493008 _____ (NVIDIA Corporation) C:\Windows\System32\nvsvc64.dll

2015-08-08 05:01 - 2015-07-22 17:31 - 02558608 _____ (NVIDIA Corporation) C:\Windows\System32\nvsvcr.dll

2015-08-08 05:01 - 2015-07-22 17:31 - 00937616 _____ (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

2015-08-08 05:01 - 2015-07-22 17:31 - 00385168 _____ (NVIDIA Corporation) C:\Windows\System32\nvmctray.dll

2015-08-08 05:01 - 2015-07-22 17:31 - 00062792 _____ (NVIDIA Corporation) C:\Windows\System32\nvshext.dll

2015-08-08 05:01 - 2015-07-20 06:16 - 05121613 _____ C:\Windows\System32\nvcoproc.bin

2015-08-08 05:00 - 2015-07-22 20:06 - 42730128 _____ C:\Windows\System32\nvcompiler.dll

2015-08-08 05:00 - 2015-07-22 20:06 - 37748880 _____ C:\Windows\SysWOW64\nvcompiler.dll

2015-08-08 05:00 - 2015-07-22 20:06 - 30487880 _____ (NVIDIA Corporation) C:\Windows\System32\nvoglv64.dll

2015-08-08 05:00 - 2015-07-22 20:06 - 22950544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll

2015-08-08 05:00 - 2015-07-22 20:06 - 17615408 _____ (NVIDIA Corporation) C:\Windows\System32\nvwgf2umx.dll

2015-08-08 05:00 - 2015-07-22 20:06 - 16151688 _____ (NVIDIA Corporation) C:\Windows\System32\nvopencl.dll

2015-08-08 05:00 - 2015-07-22 20:06 - 15892200 _____ (NVIDIA Corporation) C:\Windows\System32\nvd3dumx.dll

2015-08-08 05:00 - 2015-07-22 20:06 - 15129192 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll

2015-08-08 05:00 - 2015-07-22 20:06 - 14503880 _____ (NVIDIA Corporation) C:\Windows\System32\nvcuda.dll

2015-08-08 05:00 - 2015-07-22 20:06 - 13268712 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll

2015-08-08 05:00 - 2015-07-22 20:06 - 12876336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll

2015-08-08 05:00 - 2015-07-22 20:06 - 11836680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll

2015-08-08 05:00 - 2015-07-22 20:06 - 11055248 _____ (NVIDIA Corporation) C:\Windows\System32\Drivers\nvlddmkm.sys

2015-08-08 05:00 - 2015-07-22 20:06 - 03407144 _____ (NVIDIA Corporation) C:\Windows\System32\nvapi64.dll

2015-08-08 05:00 - 2015-07-22 20:06 - 03008880 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll

2015-08-08 05:00 - 2015-07-22 20:06 - 02933576 _____ (NVIDIA Corporation) C:\Windows\System32\nvcuvid.dll

2015-08-08 05:00 - 2015-07-22 20:06 - 02600592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll

2015-08-08 05:00 - 2015-07-22 20:06 - 01898128 _____ (NVIDIA Corporation) C:\Windows\System32\nvdispco6435362.dll

2015-08-08 05:00 - 2015-07-22 20:06 - 01557648 _____ (NVIDIA Corporation) C:\Windows\System32\nvdispgenco6435362.dll

2015-08-08 05:00 - 2015-07-22 20:06 - 01101856 _____ (NVIDIA Corporation) C:\Windows\System32\nvumdshimx.dll

2015-08-08 05:00 - 2015-07-22 20:06 - 01061008 _____ (NVIDIA Corporation) C:\Windows\System32\NvIFR64.dll

2015-08-08 05:00 - 2015-07-22 20:06 - 01053000 _____ (NVIDIA Corporation) C:\Windows\System32\NvFBC64.dll

2015-08-08 05:00 - 2015-07-22 20:06 - 00983368 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll

2015-08-08 05:00 - 2015-07-22 20:06 - 00976528 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll

2015-08-08 05:00 - 2015-07-22 20:06 - 00940104 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll

2015-08-08 05:00 - 2015-07-22 20:06 - 00503592 _____ (NVIDIA Corporation) C:\Windows\System32\nvEncodeAPI64.dll

2015-08-08 05:00 - 2015-07-22 20:06 - 00408208 _____ (NVIDIA Corporation) C:\Windows\System32\NvIFROpenGL.dll

2015-08-08 05:00 - 2015-07-22 20:06 - 00407296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll

2015-08-08 05:00 - 2015-07-22 20:06 - 00364176 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll

2015-08-08 05:00 - 2015-07-22 20:06 - 00176904 _____ (NVIDIA Corporation) C:\Windows\System32\nvinitx.dll

2015-08-08 05:00 - 2015-07-22 20:06 - 00155280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll

2015-08-08 05:00 - 2015-07-22 20:06 - 00150832 _____ (NVIDIA Corporation) C:\Windows\System32\nvoglshim64.dll

2015-08-08 05:00 - 2015-07-22 20:06 - 00128512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll

2015-08-08 05:00 - 2015-07-22 20:06 - 00030966 _____ C:\Windows\System32\nvinfo.pb

2015-08-08 04:23 - 2015-07-02 20:28 - 00069992 _____ (NVIDIA Corporation) C:\Windows\System32\nvaudcap64v.dll

2015-08-08 04:23 - 2015-07-02 20:28 - 00065896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll

2015-08-08 04:23 - 2015-07-02 20:28 - 00047976 _____ (NVIDIA Corporation) C:\Windows\System32\Drivers\nvvad64v.sys

2015-08-08 04:15 - 2015-08-08 04:15 - 00000000 ____D C:\NVIDIA

2015-08-08 04:08 - 2015-08-09 20:28 - 00000000 ____D C:\Users\senselocke\AppData\Local\Tomahawk

2015-08-08 04:08 - 2015-08-08 04:08 - 00000000 ____D C:\Program Files (x86)\Tomahawk

2015-08-08 04:06 - 2015-08-08 04:10 - 292456168 ____X C:\Users\senselocke\Desktop\353.62-desktop-win8-win7-winvista-64bit-international-whql.exe

2015-08-08 03:53 - 2015-08-18 09:25 - 00000000 ____D C:\Users\senselocke\AppData\Local\dxhr

2015-08-08 03:52 - 2015-08-08 03:52 - 00000000 ____D C:\Users\senselocke\AppData\Local\238010

2015-08-08 03:52 - 2015-08-08 03:52 - 00000000 ____D C:\ProgramData\Intel

2015-08-08 03:44 - 2015-08-08 03:44 - 00378880 _____ (AVAST Software) C:\Windows\System32\aswBoot.exe

2015-08-08 03:44 - 2015-08-08 03:44 - 00043112 _____ (AVAST Software) C:\Windows\avastSS.scr

2015-08-07 11:14 - 2015-08-07 11:27 - 35828536 ____X C:\Users\senselocke\Desktop\tomahawk-0.8.4.exe

2015-08-07 07:59 - 2010-06-02 01:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll

2015-08-07 07:59 - 2010-06-02 01:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\System32\XAudio2_7.dll

2015-08-07 07:59 - 2010-06-02 01:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll

2015-08-07 07:59 - 2010-06-02 01:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\System32\xactengine3_7.dll

2015-08-07 07:59 - 2010-06-02 01:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\System32\XAPOFX1_5.dll

2015-08-07 07:59 - 2010-06-02 01:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll

2015-08-07 07:59 - 2010-05-26 08:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\System32\D3DCompiler_43.dll

2015-08-07 07:59 - 2010-05-26 08:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\System32\D3DX9_43.dll

2015-08-07 07:59 - 2010-05-26 08:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll

2015-08-07 07:59 - 2010-05-26 08:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll

2015-08-07 07:59 - 2010-05-26 08:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\System32\d3dcsx_43.dll

2015-08-07 07:59 - 2010-05-26 08:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll

2015-08-07 07:59 - 2010-05-26 08:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\System32\d3dx10_43.dll

2015-08-07 07:59 - 2010-05-26 08:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll

2015-08-07 07:59 - 2010-05-26 08:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\System32\d3dx11_43.dll

2015-08-07 07:59 - 2010-05-26 08:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll

2015-08-07 07:59 - 2010-02-04 07:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\System32\XAudio2_6.dll

2015-08-07 07:59 - 2010-02-04 07:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll

2015-08-07 07:59 - 2010-02-04 07:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll

2015-08-07 07:59 - 2010-02-04 07:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\System32\xactengine3_6.dll

2015-08-07 07:59 - 2010-02-04 07:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\System32\XAPOFX1_4.dll

2015-08-07 07:59 - 2010-02-04 07:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll

2015-08-07 07:59 - 2010-02-04 07:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\System32\X3DAudio1_7.dll

2015-08-07 07:59 - 2010-02-04 07:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll

2015-08-07 07:59 - 2009-09-04 14:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\System32\XAudio2_5.dll

2015-08-07 07:59 - 2009-09-04 14:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll

2015-08-07 07:59 - 2009-09-04 14:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll

2015-08-07 07:59 - 2009-09-04 14:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\System32\xactengine3_5.dll

2015-08-07 07:59 - 2009-09-04 14:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\System32\XAPOFX1_3.dll

2015-08-07 07:59 - 2009-09-04 14:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll

2015-08-07 07:59 - 2009-09-04 14:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\System32\d3dcsx_42.dll

2015-08-07 07:59 - 2009-09-04 14:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll

2015-08-07 07:59 - 2009-09-04 14:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\System32\D3DCompiler_42.dll

2015-08-07 07:59 - 2009-09-04 14:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\System32\D3DX9_42.dll

2015-08-07 07:59 - 2009-09-04 14:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll

2015-08-07 07:59 - 2009-09-04 14:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\System32\d3dx10_42.dll

2015-08-07 07:59 - 2009-09-04 14:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\System32\d3dx11_42.dll

2015-08-07 07:59 - 2009-09-04 14:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll

2015-08-07 07:59 - 2008-10-27 07:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\System32\XAudio2_3.dll

2015-08-07 07:59 - 2008-10-27 07:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll

2015-08-07 07:59 - 2008-10-27 07:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll

2015-08-07 07:59 - 2008-10-27 07:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\System32\xactengine3_3.dll

2015-08-07 07:59 - 2008-10-27 07:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\System32\XAPOFX1_2.dll

2015-08-07 07:59 - 2008-10-27 07:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll

2015-08-07 07:59 - 2008-10-27 07:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\System32\X3DAudio1_5.dll

2015-08-07 07:59 - 2008-10-27 07:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll

2015-08-07 07:59 - 2008-07-31 07:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll

2015-08-07 07:59 - 2008-07-31 07:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\System32\xactengine3_2.dll

2015-08-07 07:59 - 2008-07-31 07:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\System32\XAPOFX1_1.dll

2015-08-07 07:59 - 2008-07-31 07:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll

2015-08-07 07:59 - 2008-07-31 07:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\System32\XAudio2_2.dll

2015-08-07 07:59 - 2008-07-31 07:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll

2015-08-06 19:49 - 2015-08-06 22:18 - 00000000 ____D C:\Users\senselocke\AppData\Roaming\Tropico 4

2015-08-06 19:47 - 2015-08-06 19:47 - 00000000 ____D C:\Users\senselocke\AppData\Roaming\Kalypso Media

2015-08-06 17:57 - 2009-03-16 11:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\System32\XAudio2_4.dll

2015-08-06 17:57 - 2009-03-16 11:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll

2015-08-06 17:57 - 2009-03-16 11:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll

2015-08-06 17:57 - 2009-03-16 11:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\System32\xactengine3_4.dll

2015-08-06 17:57 - 2009-03-16 11:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\System32\X3DAudio1_6.dll

2015-08-06 17:57 - 2009-03-16 11:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll

2015-08-06 17:57 - 2009-03-09 12:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\System32\D3DX9_41.dll

2015-08-06 17:57 - 2009-03-09 12:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll

2015-08-06 17:57 - 2009-03-09 12:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\System32\D3DCompiler_41.dll

2015-08-06 17:57 - 2009-03-09 12:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll

2015-08-06 17:57 - 2009-03-09 12:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\System32\d3dx10_41.dll

2015-08-06 17:57 - 2009-03-09 12:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll

2015-08-06 17:57 - 2008-10-15 03:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\System32\D3DX9_40.dll

2015-08-06 17:57 - 2008-10-15 03:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll

2015-08-06 17:57 - 2008-10-15 03:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\System32\D3DCompiler_40.dll

2015-08-06 17:57 - 2008-10-15 03:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll

2015-08-06 17:57 - 2008-10-15 03:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\System32\d3dx10_40.dll

2015-08-06 17:57 - 2008-10-15 03:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll

2015-08-06 17:57 - 2008-07-10 08:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll

2015-08-06 17:57 - 2008-07-10 08:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\System32\D3DX9_39.dll

2015-08-06 17:57 - 2008-07-10 08:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll

2015-08-06 17:57 - 2008-07-10 08:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\System32\D3DCompiler_39.dll

2015-08-06 17:57 - 2008-07-10 08:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll

2015-08-06 17:57 - 2008-07-10 08:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\System32\d3dx10_39.dll

2015-08-06 17:57 - 2008-05-30 11:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\System32\XAudio2_1.dll

2015-08-06 17:57 - 2008-05-30 11:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll

2015-08-06 17:57 - 2008-05-30 11:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll

2015-08-06 17:57 - 2008-05-30 11:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\System32\xactengine3_1.dll

2015-08-06 17:57 - 2008-05-30 11:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\System32\XAPOFX1_0.dll

2015-08-06 17:57 - 2008-05-30 11:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll

2015-08-06 17:57 - 2008-05-30 11:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll

2015-08-06 17:57 - 2008-05-30 11:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\System32\X3DAudio1_4.dll

2015-08-06 17:57 - 2008-05-30 11:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\System32\D3DX9_38.dll

2015-08-06 17:57 - 2008-05-30 11:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll

2015-08-06 17:57 - 2008-05-30 11:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\System32\D3DCompiler_38.dll

2015-08-06 17:57 - 2008-05-30 11:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll

2015-08-06 17:57 - 2008-05-30 11:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\System32\d3dx10_38.dll

2015-08-06 17:57 - 2008-05-30 11:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll

2015-08-06 17:57 - 2008-03-05 13:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\System32\XAudio2_0.dll

2015-08-06 17:57 - 2008-03-05 13:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll

2015-08-06 17:57 - 2008-03-05 13:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll

2015-08-06 17:57 - 2008-03-05 13:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\System32\xactengine3_0.dll

2015-08-06 17:57 - 2008-03-05 13:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\System32\X3DAudio1_3.dll

2015-08-06 17:57 - 2008-03-05 13:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll

2015-08-06 17:57 - 2008-03-05 12:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\System32\D3DX9_37.dll

2015-08-06 17:57 - 2008-03-05 12:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll

2015-08-06 17:57 - 2008-03-05 12:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\System32\D3DCompiler_37.dll

2015-08-06 17:57 - 2008-03-05 12:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll

2015-08-06 17:57 - 2008-02-05 20:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\System32\d3dx10_37.dll

2015-08-06 17:57 - 2008-02-05 20:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll

2015-08-06 17:57 - 2007-10-22 00:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\System32\xactengine2_10.dll

2015-08-06 17:57 - 2007-10-22 00:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll

2015-08-06 17:57 - 2007-10-22 00:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\System32\X3DAudio1_2.dll

2015-08-06 17:57 - 2007-10-22 00:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll

2015-08-06 17:57 - 2007-10-12 12:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\System32\d3dx9_36.dll

2015-08-06 17:57 - 2007-10-12 12:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll

2015-08-06 17:57 - 2007-10-12 12:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\System32\D3DCompiler_36.dll

2015-08-06 17:57 - 2007-10-12 12:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll

2015-08-06 17:57 - 2007-10-02 06:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\System32\d3dx10_36.dll

2015-08-06 17:57 - 2007-10-02 06:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll

2015-08-06 17:57 - 2007-07-19 21:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\System32\xactengine2_9.dll

2015-08-06 17:57 - 2007-07-19 21:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll

2015-08-06 17:57 - 2007-07-19 15:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\System32\d3dx9_35.dll

2015-08-06 17:57 - 2007-07-19 15:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll

2015-08-06 17:57 - 2007-07-19 15:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\System32\D3DCompiler_35.dll

2015-08-06 17:57 - 2007-07-19 15:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll

2015-08-06 17:57 - 2007-07-19 15:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\System32\d3dx10_35.dll

2015-08-06 17:57 - 2007-07-19 15:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll

2015-08-06 17:57 - 2007-06-20 17:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\System32\xactengine2_8.dll

2015-08-06 17:57 - 2007-06-20 17:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll

2015-08-06 17:57 - 2007-05-16 13:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\System32\d3dx9_34.dll

2015-08-06 17:57 - 2007-05-16 13:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll

2015-08-06 17:57 - 2007-05-16 13:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\System32\D3DCompiler_34.dll

2015-08-06 17:57 - 2007-05-16 13:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll

2015-08-06 17:57 - 2007-05-16 13:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\System32\d3dx10_34.dll

2015-08-06 17:57 - 2007-05-16 13:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll

2015-08-06 17:57 - 2007-04-04 15:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\System32\xactengine2_7.dll

2015-08-06 17:57 - 2007-04-04 15:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll

2015-08-06 17:57 - 2007-04-04 15:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\System32\xinput1_3.dll

2015-08-06 17:57 - 2007-03-15 13:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\System32\d3dx10_33.dll

2015-08-06 17:57 - 2007-03-15 13:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll

2015-08-06 17:57 - 2007-03-12 13:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\System32\d3dx9_33.dll

2015-08-06 17:57 - 2007-03-12 13:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll

2015-08-06 17:57 - 2007-03-12 13:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\System32\D3DCompiler_33.dll

2015-08-06 17:57 - 2007-03-12 13:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll

2015-08-06 17:57 - 2007-03-05 09:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\System32\x3daudio1_1.dll

2015-08-06 17:57 - 2007-03-05 09:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll

2015-08-06 17:57 - 2007-01-24 12:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\System32\xactengine2_6.dll

2015-08-06 17:57 - 2007-01-24 12:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll

2015-08-06 17:57 - 2006-12-08 09:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll

2015-08-06 17:57 - 2006-12-08 09:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\System32\xactengine2_5.dll

2015-08-06 17:57 - 2006-11-29 10:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\System32\d3dx9_32.dll

2015-08-06 17:57 - 2006-11-29 10:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll

2015-08-06 17:57 - 2006-11-29 10:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\System32\d3dx10.dll

2015-08-06 17:57 - 2006-11-29 10:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll

2015-08-06 17:57 - 2006-09-28 13:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\System32\d3dx9_31.dll

2015-08-06 17:57 - 2006-09-28 13:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll

2015-08-06 17:57 - 2006-09-28 13:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll

2015-08-06 17:57 - 2006-09-28 13:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\System32\xactengine2_4.dll

2015-08-06 17:57 - 2006-07-28 06:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\System32\xactengine2_3.dll

2015-08-06 17:57 - 2006-07-28 06:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll

2015-08-06 17:56 - 2015-08-07 07:58 - 00027750 _____ C:\Windows\DirectX.log

2015-08-06 17:56 - 2006-07-28 06:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\System32\xinput1_2.dll

2015-08-06 17:56 - 2006-07-28 06:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll

2015-08-06 17:56 - 2006-05-31 04:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll

2015-08-06 17:56 - 2006-05-31 04:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\System32\xactengine2_2.dll

2015-08-06 17:56 - 2006-03-31 09:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\System32\d3dx9_30.dll

2015-08-06 17:56 - 2006-03-31 09:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll

2015-08-06 17:56 - 2006-03-31 09:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\System32\xactengine2_1.dll

2015-08-06 17:56 - 2006-03-31 09:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll

2015-08-06 17:56 - 2006-03-31 09:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\System32\xinput1_1.dll

2015-08-06 17:56 - 2006-03-31 09:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll

2015-08-06 17:56 - 2006-02-03 05:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\System32\d3dx9_29.dll

2015-08-06 17:56 - 2006-02-03 05:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll

2015-08-06 17:56 - 2006-02-03 05:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\System32\xactengine2_0.dll

2015-08-06 17:56 - 2006-02-03 05:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll

2015-08-06 17:56 - 2006-02-03 05:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\System32\x3daudio1_0.dll

2015-08-06 17:56 - 2006-02-03 05:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll

2015-08-06 17:56 - 2005-12-05 15:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\System32\d3dx9_28.dll

2015-08-06 17:56 - 2005-12-05 15:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll

2015-08-06 17:56 - 2005-07-22 16:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\System32\d3dx9_27.dll

2015-08-06 17:56 - 2005-07-22 16:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll

2015-08-06 17:56 - 2005-05-26 12:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\System32\d3dx9_26.dll

2015-08-06 17:56 - 2005-05-26 12:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll

2015-08-06 17:56 - 2005-03-18 14:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\System32\d3dx9_25.dll

2015-08-06 17:56 - 2005-03-18 14:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll

2015-08-06 17:56 - 2005-02-05 16:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\System32\d3dx9_24.dll

2015-08-06 17:56 - 2005-02-05 16:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll

2015-08-06 17:36 - 2015-08-17 16:51 - 00000000 ____D C:\Users\senselocke\Desktop\Barrister Jobs

2015-08-06 14:52 - 2015-08-07 07:21 - 00000000 ____D C:\Users\senselocke\AppData\Roaming\Beat Hazard

2015-08-05 04:15 - 2015-08-08 03:46 - 00000000 ____D C:\Users\senselocke\Desktop\One S Wallpapers 1080x960

2015-08-03 04:25 - 2015-08-03 04:25 - 00001747 _____ C:\Users\senselocke\Desktop\tempity temp.txt

2015-08-03 02:50 - 2015-08-03 02:51 - 00000000 ____D C:\Users\senselocke\Desktop\foooneeeezzz

2015-08-02 06:42 - 2015-08-02 06:42 - 00001832 _____ C:\Users\House\Desktop\HAZMAT Security Training.lnk

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-08-27 05:58 - 2015-04-05 16:28 - 00000898 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-08-27 05:58 - 2015-04-05 12:58 - 01530780 _____ C:\Windows\WindowsUpdate.log

2015-08-26 13:15 - 2009-07-13 20:45 - 00026352 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-08-26 13:15 - 2009-07-13 20:45 - 00026352 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-08-26 13:13 - 2009-07-13 21:13 - 00781298 _____ C:\Windows\System32\PerfStringBackup.INI

2015-08-26 13:07 - 2009-07-13 21:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2015-08-26 13:07 - 2009-07-13 20:51 - 00068302 _____ C:\Windows\setupact.log

2015-08-26 07:00 - 2015-04-05 17:31 - 00034559 _____ C:\Users\senselocke\Desktop\bills paid.txt

2015-08-26 04:33 - 2015-04-05 16:29 - 00002385 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2015-08-25 20:07 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\rescache

2015-08-25 05:39 - 2010-11-20 19:47 - 00183394 _____ C:\Windows\PFRO.log

2015-08-25 05:39 - 2009-07-13 20:45 - 02272232 _____ C:\Windows\System32\FNTCACHE.DAT

2015-08-20 18:17 - 2015-04-05 16:10 - 00000000 ____D C:\ProgramData\NVIDIA Corporation

2015-08-19 03:28 - 2015-05-21 15:53 - 00017950 _____ C:\Users\senselocke\Desktop\tempuh.txt

2015-08-18 09:27 - 2015-04-10 17:30 - 00000000 ____D C:\Program Files (x86)\Steam

2015-08-17 16:49 - 2015-04-05 17:29 - 00000000 ____D C:\Users\senselocke\Desktop\Eli Job

2015-08-17 16:48 - 2015-07-31 17:51 - 00000000 ____D C:\Users\senselocke\Desktop\Tina job

2015-08-16 17:15 - 2015-04-05 17:31 - 00016004 _____ C:\Users\senselocke\Desktop\rando.txt

2015-08-15 05:46 - 2015-04-06 05:08 - 01048344 _____ (AVAST Software) C:\Windows\System32\Drivers\aswsnx.sys

2015-08-11 18:50 - 2015-07-29 08:17 - 00000146 _____ C:\Windows\FolderSort.ini

2015-08-10 14:54 - 2015-07-16 07:43 - 00000132 _____ C:\Windows\winamp.ini

2015-08-09 20:33 - 2015-05-15 13:22 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2015-08-09 08:56 - 2015-08-01 06:35 - 00000000 ____D C:\Users\senselocke\AppData\Roaming\Foxit Software

2015-08-08 05:12 - 2015-04-05 18:26 - 00000000 ____D C:\Users\senselocke\AppData\Local\NVIDIA Corporation

2015-08-08 05:02 - 2015-04-27 08:33 - 00000000 ____D C:\Temp

2015-08-08 05:02 - 2015-04-05 16:10 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation

2015-08-08 05:02 - 2015-04-05 16:09 - 00000000 ____D C:\Program Files\NVIDIA Corporation

2015-08-08 05:01 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\Help

2015-08-08 03:52 - 2015-07-07 19:29 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2015-08-08 03:52 - 2015-07-07 19:29 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2015-08-08 03:51 - 2015-04-06 05:08 - 00004152 _____ C:\Windows\System32\Tasks\avast! Emergency Update

2015-08-08 03:51 - 2015-04-06 05:05 - 00000000 ____D C:\Program Files\AVAST

2015-08-08 03:44 - 2015-04-06 05:08 - 01048856 _____ (AVAST Software) C:\Windows\System32\Drivers\aswsnx.sys.1439646419758

2015-08-08 03:44 - 2015-04-06 05:08 - 00447944 _____ (AVAST Software) C:\Windows\System32\Drivers\aswSP.sys

2015-08-08 03:44 - 2015-04-06 05:08 - 00274808 _____ (AVAST Software) C:\Windows\System32\Drivers\aswVmm.sys

2015-08-08 03:44 - 2015-04-06 05:08 - 00150672 _____ (AVAST Software) C:\Windows\System32\Drivers\aswStm.sys

2015-08-08 03:44 - 2015-04-06 05:08 - 00093528 _____ (AVAST Software) C:\Windows\System32\Drivers\aswRdr2.sys

2015-08-08 03:44 - 2015-04-06 05:08 - 00090968 _____ (AVAST Software) C:\Windows\System32\Drivers\aswMonFlt.sys

2015-08-08 03:44 - 2015-04-06 05:08 - 00065224 _____ (AVAST Software) C:\Windows\System32\Drivers\aswRvrt.sys

2015-08-08 03:44 - 2015-04-06 05:08 - 00028656 _____ (AVAST Software) C:\Windows\System32\Drivers\aswHwid.sys

2015-08-06 19:49 - 2015-04-05 17:31 - 00009098 _____ C:\Users\senselocke\Desktop\Blah-gins.txt

2015-08-03 02:53 - 2015-04-05 17:37 - 00000000 ____D C:\Users\senselocke\Desktop\Misc

2015-08-03 02:51 - 2015-07-05 06:29 - 00000000 ____D C:\Users\senselocke\Desktop\EliHead

2015-08-02 05:52 - 2015-04-10 16:16 - 00000000 ___DX C:\Users\senselocke\Desktop\nyuubah

==================== Known DLLs (Whitelisted) =========================

C:\Windows\System32\ole32.dll IS MISSING <==== ATTENTION

C:\Windows\SysWOW64\ole32.dll IS MISSING <==== ATTENTION

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit

C:\Windows\System32\dnsapi.dll => MD5 is legit

C:\Windows\SysWOW64\dnsapi.dll => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== Restore Points =========================

==================== Memory info ===========================

Percentage of memory in use: 9%

Total physical RAM: 8173.55 MB

Available physical RAM: 7429.71 MB

Total Virtual: 8171.75 MB

Available Virtual: 7430.2 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:111.69 GB) (Free:43.43 GB) NTFS

Drive f: (TI102782W0E) (Removable) (Total:29.82 GB) (Free:11.79 GB) NTFS

Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS

Drive y: (System Reserved) (Fixed) (Total:0.1 GB) (Free:0.06 GB) NTFS ==>[system with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================

Disk: 0 (Size: 223.6 GB) (Disk ID: 5E56B0F6)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=111.7 GB) - (Type=07 NTFS)

========================================================

Disk: 1 (MBR Code: Windows 7 or Vista) (Size: 29.8 GB) (Disk ID: 00000000)

Partition: GPT.

LastRegBack: 2015-08-12 03:34

==================== End of FRST.txt ============================

#4
JSntgRvr

Posted 01 September 2015 - 06:46 PM

Global Moderator

Global Moderator
11,579 posts

Several items on your registry are missing. Open FRST as you did before.

Type the following in the edit box on FRST, after "Search:".

ole32.dll

It then should look like:

Search: ole32.dll

Click Search Files button and post the log (Search.txt) it makes on the USB drive in your next reply.

#5
senselocke

Posted 01 September 2015 - 07:01 PM

Member

Topic Starter
Member
35 posts

Farbar Recovery Scan Tool (x64) Version:31-08-2015

Ran by SYSTEM (2015-09-01 19:59:55)

Running from F:\

Boot Mode: Recovery

================== Search Files: "ole32.dll" =============

C:\Windows\winsxs\x86_microsoft-windows-com-base-qfe-ole32_31bf3856ad364e35_6.1.7601.17514_none_ae2511475093798f\ole32.dll

[2010-11-20 19:24][2010-11-20 19:24] 1414144 ____A (Microsoft Corporation) 928CF7268086631F54C3D8E17238C6DD

C:\Windows\winsxs\amd64_microsoft-windows-com-base-qfe-ole32_31bf3856ad364e35_6.1.7601.17514_none_0a43accb08f0eac5\ole32.dll

[2010-11-20 19:23][2010-11-20 19:23] 2086912 ____A (Microsoft Corporation) 6C60B5ACA7442EFB794082CDACFC001C

X:\Windows\winsxs\amd64_microsoft-windows-com-base-qfe-ole32_31bf3856ad364e35_6.1.7601.17514_none_0a43accb08f0eac5\ole32.dll

[2010-11-20 02:35][2010-11-20 05:27] 2086912 ____A (Microsoft Corporation) 6C60B5ACA7442EFB794082CDACFC001C

X:\Windows\System32\ole32.dll

[2010-11-20 02:35][2010-11-20 05:27] 2086912 ____A (Microsoft Corporation) 6C60B5ACA7442EFB794082CDACFC001C

X:\Windows\winsxs\amd64_microsoft-windows-com-base-qfe-ole32_31bf3856ad364e35_6.1.7601.17514_none_0a43accb08f0eac5\ole32.dll

[2010-11-20 02:35][2010-11-20 05:27] 2086912 ____A (Microsoft Corporation) 6C60B5ACA7442EFB794082CDACFC001C

X:\Windows\System32\ole32.dll

[2010-11-20 02:35][2010-11-20 05:27] 2086912 ____A (Microsoft Corporation) 6C60B5ACA7442EFB794082CDACFC001C

====== End of Search ======

#6
JSntgRvr

Posted 01 September 2015 - 07:09 PM

Global Moderator

Global Moderator
11,579 posts

Download the attached file [attachment=78256:fixlist.txt] and save it in the same directory FRST64 is saved in the USB drive.

Start FRST64.
Press the Fix button.
When finished, a log file (Fixlog.txt) will pop up and saved in the same location the tool was ran from (USB drive).

Please copy and paste its contents in your next reply.

Attempt to start in Normal mode.

#7
senselocke

Posted 01 September 2015 - 07:21 PM

Member

Topic Starter
Member
35 posts

Fix result of Farbar Recovery Scan Tool (x64) Version:31-08-2015

Ran by SYSTEM (2015-09-01 20:19:56) Run:1

Running from F:\

Boot Mode: Recovery

==============================================

fixlist content:

*****************

HKLM\...\Winlogon: [Userinit]

HKLM-x32\...\Winlogon: [Userinit] [X]

HKLM\...\Winlogon: [Shell] [0 ] () <=== ATTENTION

HKLM-x32\...\Winlogon: [Shell] [0 ] () <=== ATTENTION

Replace: C:\Windows\winsxs\x86_microsoft-windows-com-base-qfe-ole32_31bf3856ad364e35_6.1.7601.17514_none_ae2511475093798f\ole32.dll C:\Windows\System32\ole32.dll

Replace: C:\Windows\winsxs\amd64_microsoft-windows-com-base-qfe-ole32_31bf3856ad364e35_6.1.7601.17514_none_0a43accb08f0eac5\ole32.dll C:\Windows\SysWOW64\ole32.dll

*****************

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Userinit => value restored successfully

HKLM\Software\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\\Userinit => value restored successfully

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell => value restored successfully

HKLM\Software\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell => value restored successfully

"C:\Windows\System32\ole32.dll" => not found

C:\Windows\winsxs\x86_microsoft-windows-com-base-qfe-ole32_31bf3856ad364e35_6.1.7601.17514_none_ae2511475093798f\ole32.dll copied successfully to C:\Windows\System32\ole32.dll

"C:\Windows\SysWOW64\ole32.dll" => not found

C:\Windows\winsxs\amd64_microsoft-windows-com-base-qfe-ole32_31bf3856ad364e35_6.1.7601.17514_none_0a43accb08f0eac5\ole32.dll copied successfully to C:\Windows\SysWOW64\ole32.dll

==== End of Fixlog 20:19:56 ====

#8
senselocke

Posted 01 September 2015 - 07:23 PM

Member

Topic Starter
Member
35 posts

Tried restarting in Normal mode, same blue screen and same error message. BTW, I really appreciate the help =)

#9
JSntgRvr

Posted 01 September 2015 - 07:25 PM

Global Moderator

Global Moderator
11,579 posts

Please re-scan with FRST64 once again and post the new FRST.txt log.

#10
JSntgRvr

Posted 01 September 2015 - 07:39 PM

Global Moderator

Global Moderator
11,579 posts

Please re-scan with FRST64 once again and post the new FRST.txt log.

#11
senselocke

Posted 01 September 2015 - 07:46 PM

Member

Topic Starter
Member
35 posts

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:31-08-2015

Ran by SYSTEM on MININT-0U0H4VJ (01-09-2015 20:44:50)