Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

unable to enter antivirus homepages and use malwarebytes on normal [So


  • This topic is locked This topic is locked

#1
mavol6

mavol6

    New Member

  • Member
  • Pip
  • 4 posts

good day, im currently having this problem for months, i realized my avast stopped working (it used to show on the notification area but it didnt respond or provide with anything) so i decided to uninstall and try it again but im unable to enter the avast page to download the new version. i tried passing the file to install it but it didnt work.

 

i tried malwarebytes but it only works on safe mode without networking. other programs i used while checking this forum were adwcleaner, mcshield and rkill, they removed a good amount of malware but im still unable to get a new AV or use malwarebytes on normal.

 

so i need help to get this fixed, and atleast get some protection on my computer.

 

here is frst logs:

 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:28-12-2015
Ran by jcvielma (administrator) on JCVIELMA-LAPTOP (28-12-2015 11:31:17)
Running from C:\Users\jcvielma\Desktop
Loaded Profiles: jcvielma (Available Profiles: jcvielma)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
() C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Comodo Security Solutions, Inc.) C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Projector\EPSON USB Display V1.4\EMP_UDSA.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Intel® Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Program Files (x86)\SkypeUpdateEx\SkypeUpdateEx.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleCrashHandler64.exe
(TOSHIBA Corporation) C:\Windows\System32\ThpSrv.exe
(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
() C:\Users\jcvielma\AppData\Roaming\XBox\XBLive.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\TecoService.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel® Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(MyCity) C:\Program Files (x86)\MCShield\MCShieldRTM.exe
() C:\Program Files (x86)\PdaNet for Android\PdaNetPC.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Windows\SysWOW64\MDM.EXE
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Oracle Corporation) C:\Program Files\Java\jre1.8.0_25\bin\jp2launcher.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
 
==================== Registry (Whitelisted) ===========================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Run: [] => [X]
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11663976 2010-12-09] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2186856 2010-12-10] (Realtek Semiconductor)
HKLM\...\Run: [IntelWireless] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1933584 2010-12-07] (Intel® Corporation)
HKLM\...\Run: [TosVolRegulator] => C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe [24376 2009-11-11] (TOSHIBA Corporation)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [507776 2014-10-07] (Oracle Corporation)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5565448 2015-11-12] (LogMeIn Inc.)
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\...\Run: [DAEMON Tools Pro Agent] => C:\Program Files (x86)\Portable\DAEMON Tools Pro Advanced v5.2.0.0348\DTAgent.exe [3108480 2012-10-23] (DT Soft Ltd)
HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7451928 2015-03-13] (Piriform Ltd)
HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\...\Run: [Dropbox Update] => C:\Users\jcvielma\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-19] (Dropbox, Inc.)
HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\...\Run: [MCShield Monitor] => C:\Program Files (x86)\MCShield\mcshieldrtm.exe [650816 2014-04-11] (MyCity)
HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\...\MountPoints2: {08bedcc6-5cb8-11e2-87e9-b870f44c5e26} - E:\LGAutoRun.exe
HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\...\MountPoints2: {50b69cad-06ce-11e1-b145-b870f44c5e26} - E:\EMP_UDSe.exe /autorun
HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\...\MountPoints2: {5e0cab59-4595-11e5-b7df-b870f44c5e26} - V:\autoplay.exe
HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\...\MountPoints2: {8a07fcb5-8c66-11e5-84bb-b870f44c5e26} - V:\setup.exe
HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\...\MountPoints2: {90df7b31-8ec3-11e5-b6bd-b870f44c5e26} - V:\setup.exe
HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\...\MountPoints2: {a95f117e-0b7f-11e5-9342-b870f44c5e26} - V:\setup.exe
HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\...\MountPoints2: {a95f1186-0b7f-11e5-9342-b870f44c5e26} - V:\setup.exe
HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\...\MountPoints2: {baeb06dc-aa48-11e5-9d52-8ca9822f79e2} - V:\Setup.exe
HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\...\MountPoints2: {deb65990-7663-11e5-bb9b-b870f44c5e26} - V:\setup.exe
HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\...\MountPoints2: {f6c627c8-4674-11e5-8b46-b870f44c5e26} - V:\autoplay.exe
HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\windows\system32\Bubbles.scr [899584 2010-11-20] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [  GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2015-11-04] (Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2015-11-04] (Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2015-11-04] (Google)
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File
ShellIconOverlayIdentifiers: [ExplorerEx] -> {E056AFDD-03E9-4D73-8D33-8FCCBCA73438} =>  No File
ShellIconOverlayIdentifiers: [GDriveSharedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} =>  No File
ShellIconOverlayIdentifiers: [SugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll No File
ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll No File
ShellIconOverlayIdentifiers: [SugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll No File
ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll No File
ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.)
Startup: C:\Users\jcvielma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PdaNet Desktop.lnk [2015-02-26]
ShortcutTarget: PdaNet Desktop.lnk -> C:\Program Files (x86)\PdaNet for Android\PdaNetPC.exe ()
GroupPolicy: Restriction - Chrome <======= ATTENTION
CHR HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
Winsock: Catalog5 10 C:\ProgramData\System32\SafeGuard32.dll No File 
Winsock: Catalog5-x64 10 C:\ProgramData\System32\SafeGuard64.dll [3387320 2015-11-17] ()
Hosts: 127.0.0.1 activate.adobe.com
Tcpip\..\Interfaces\{7AA7BC47-E692-4EA9-8A62-B108E1BB8086}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{D3E7F3A2-905B-468D-A652-10412DE6A0D6}: [NameServer] 208.67.222.222,208.67.220.220
Tcpip\..\Interfaces\{D3E7F3A2-905B-468D-A652-10412DE6A0D6}: [DhcpNameServer] 192.168.0.1
 
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://nav.brotlab.net?uid={a488cd19a49d439997197f5077097076}&r=eg
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://nav.brotlab.net?uid={a488cd19a49d439997197f5077097076}&r=eg
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://nav.brotlab.net?uid={a488cd19a49d439997197f5077097076}&r=eg
HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://nav.brotlab.net?uid={a488cd19a49d439997197f5077097076}&r=eg
HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\Software\Microsoft\Internet Explorer\Main,Window Title = Visita www.landerextremo.s5.com
SearchScopes: HKLM -> DefaultScope {E921F400-D383-4B1B-9DE6-FCFCACFC1173} URL = 
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {DFB425F9-040B-4296-85BE-7FA4BA584D99} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNF
SearchScopes: HKLM-x32 -> DefaultScope {E921F400-D383-4B1B-9DE6-FCFCACFC1173} URL = 
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> {69CE00C5-1258-482B-8912-2F3C293105A6} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNF
SearchScopes: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000 -> DefaultScope {E921F400-D383-4B1B-9DE6-FCFCACFC1173} URL = 
SearchScopes: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000 -> {69CE00C5-1258-482B-8912-2F3C293105A6} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNF
SearchScopes: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000 -> {798AAF5F-D83E-42F9-BAA0-9F3CCAD8B1FF} URL = hxxps://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000 -> {CE5AAAF0-AC26-4525-8294-504FD8BF0BE2} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNF_en
SearchScopes: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000 -> {DFB425F9-040B-4296-85BE-7FA4BA584D99} URL = 
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll [2015-09-19] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-12-22] (Google Inc.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll [2015-09-19] (Oracle Corporation)
BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-05-21] (Hewlett-Packard Co.)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll => No File
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-12-22] (Google Inc.)
BHO-x32: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll => No File
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: TOSHIBA Media Controller Plug-in -> {F3C88694-EFFA-4d78-B409-54B7B2535B14} -> C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll [2010-11-09] (<TOSHIBA>)
BHO-x32: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll => No File
BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-05-21] (Hewlett-Packard Co.)
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  No File
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-12-22] (Google Inc.)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll No File
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-12-22] (Google Inc.)
Toolbar: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-12-22] (Google Inc.)
Toolbar: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)
 
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_11_6_602_168.dll [2013-02-24] ()
FF Plugin: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll [2015-09-19] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll [2015-09-19] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_168.dll [2013-02-24] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\windows\SysWOW64\Adobe\Director\np32dsw_1217157.dll [2015-02-16] (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2012-08-08] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @raidcall.en/RCplugin -> C:\Users\jcvielma\AppData\Roaming\raidcall\plugins\nprcplugin.dll [2014-05-27] (Raidcall)
FF Plugin-x32: @RIM.com/WebSLLauncher,version=1.0 -> C:\Program Files (x86)\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll [2012-12-13] ()
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-04] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-04] (Google Inc.)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll [2012-07-27] (Adobe Systems Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll [2012-07-30] (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012-07-18] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2012-10-22] [not signed]
FF HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
 
Chrome: 
=======
CHR Profile: C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (YouTube) - C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-02-03]
CHR Extension: (Búsqueda de Google) - C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-03-28]
CHR Extension: (Bookmark Manager) - C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-22]
CHR Extension: (Avast Online Security) - C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-03-13]
CHR Extension: (Windows Media Player Extension for HTML5) - C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Default\Extensions\hokdglbhghcebcopdbanieangmcamaak [2012-11-09] [UpdateUrl: hxxp://www.interoperabilitybridges.com/ChromeWMP/wmpChromeupdates.xml] <==== ATTENTION
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-04-16]
CHR Extension: (Skype Click to Call) - C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2014-07-22]
CHR Extension: (Google Wallet) - C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-03-07]
CHR Extension: (Gmail) - C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-29]
CHR Profile: C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Extension: (Presentaciones de Google) - C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-04-22]
CHR Extension: (Google Docs) - C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-22]
CHR Extension: (Google Drive) - C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-20]
CHR Extension: (YouTube) - C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24]
CHR Extension: (Búsqueda de Google) - C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-26]
CHR Extension: (Mouse Drag) - C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\eddldcghfdhmdcfmjolaefkjglmeobpf [2015-12-28]
CHR Extension: (SoundCloud Download Finder) - C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\fggklngmkhplepnjhhnenbgfbeagdfil [2015-04-22]
CHR Extension: (Documentos de Google sin conexión) - C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-16]
CHR Extension: (AdBlock) - C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-12-03]
CHR Extension: (SoundCloud Downloader Ad-Free) - C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gpbageahapehhjckpkipehfkphhneahf [2015-04-22]
CHR Extension: (Skype) - C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2015-12-18]
CHR Extension: (Sistema de pagos de Chrome Web Store) - C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-22]
CHR Extension: (Gmail) - C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-22]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-10-12]
 
==================== Services (Whitelisted) ========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [18656 2011-02-02] ()
S3 Blackberry Device Manager; C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe [577536 2013-01-18] (Research In Motion Limited) [File not signed]
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2015-10-12] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2015-10-12] (Microsoft Corporation)
R2 DragonUpdater; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2139328 2014-05-27] (Comodo Security Solutions, Inc.)
R2 EMP_UDSA; C:\Program Files (x86)\EPSON Projector\EPSON USB Display V1.4\EMP_UDSA.exe [104424 2010-06-09] (SEIKO EPSON CORPORATION)
S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [166112 2013-09-05] (Futuremark)
R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [248832 2009-05-21] (Hewlett-Packard Co.) [File not signed]
R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-05-21] (Hewlett-Packard Co.) [File not signed]
S2 KMService; C:\windows\SysWOW64\srvany.exe [8192 2012-10-22] () [File not signed]
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-11-12] (LogMeIn, Inc.)
S4 msvsmon90; C:\Program Files\Microsoft Visual Studio 9.0\Common7\IDE\Remote Debugger\x64\msvsmon.exe [4737024 2008-07-29] (Microsoft Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2010-12-07] ()
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]
R2 SkypeUpdateEx; C:\Program Files (x86)\SkypeUpdateEx\SkypeUpdateEx.exe [193456 2015-12-10] ()
S3 Visual Studio Analyzer RPC bridge; C:\Program Files (x86)\Microsoft Visual Studio\Common\Tools\VS-Ent98\Vanalyzr\varpc.exe [34036 1998-06-06] (Microsoft Corporation) [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 XBox; C:\Users\jcvielma\AppData\Roaming\XBox\XBLive.exe [7142328 2015-12-08] ()
S2 AdobeARMservice; "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe" [X]
S2 PCCUJobMgr; "C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.6.22\ccSvcHst.exe" /s "PCCUJobMgr" /m "C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.6.22\diMaster.dll" /prefetch:1
 
===================== Drivers (Whitelisted) ==========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R2 6077757b; C:\windows\system32\drivers\regi.sys [14112 2007-04-17] (InterVideo)
S3 AndNetDiag; C:\Windows\System32\DRIVERS\lgandnetdiag64.sys [29184 2011-09-06] (LG Electronics Inc.)
S3 ANDNetModem; C:\Windows\System32\DRIVERS\lgandnetmodem64.sys [35840 2011-09-06] (LG Electronics Inc.)
S3 andnetndis; C:\Windows\System32\DRIVERS\lgandnetndis64.sys [93184 2011-09-16] (LG Electronics Inc.)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S3 gfiark; C:\Windows\System32\drivers\gfiark.sys [40584 2015-08-27] (ThreatTrack Security)
S3 gfiutil; C:\Windows\System32\drivers\gfiutil.sys [31264 2013-09-04] (ThreatTrack Security)
U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2011-10-23] (Huawei Technologies Co., Ltd.)
S3 PlantronicsGC; C:\Windows\System32\drivers\PLTGC.sys [1328128 2013-02-07] (C-Media Electronics Inc)
S3 pwdrvio; C:\windows\system32\pwdrvio.sys [19152 2013-09-30] ()
S3 pwdspio; C:\windows\system32\pwdspio.sys [12504 2013-09-30] ()
S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [78336 2013-01-03] (Research In Motion Limited)
R3 RimVSerPort; C:\Windows\System32\DRIVERS\RimSerial_AMD64.sys [44544 2012-12-10] (Research in Motion Ltd)
S3 USBTINSP; C:\Windows\System32\DRIVERS\tinspusb.sys [142848 2010-03-29] (Texas Instruments)
S3 cpuz135; \??\C:\windows\TEMP\cpuz135\cpuz135_x64.sys [X]
S3 cpuz136; \??\C:\windows\TEMP\cpuz136\cpuz136_x64.sys [X]
S3 smhwser; system32\DRIVERS\smhwser.sys [X]
 
==================== NetSvcs (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
 
==================== One Month Created files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2015-12-28 11:31 - 2015-12-28 11:31 - 00034862 _____ C:\Users\jcvielma\Desktop\FRST.txt
2015-12-28 11:30 - 2015-12-28 11:31 - 00000000 ____D C:\FRST
2015-12-28 11:29 - 2015-12-28 11:29 - 02370560 _____ (Farbar) C:\Users\jcvielma\Desktop\FRST64.exe
2015-12-28 10:00 - 2015-12-28 10:00 - 01000416 _____ C:\Users\jcvielma\Desktop\backup.reg
2015-12-28 00:40 - 2015-12-28 00:41 - 00038346 _____ C:\Program Files\20151227185434.xml
2015-12-27 18:54 - 2015-12-28 00:42 - 03058084 _____ C:\Program Files\20151227185434.csv
2015-12-27 18:54 - 2015-12-28 00:41 - 00000000 ____D C:\Program Files\Quarantine
2015-12-27 18:54 - 2015-12-28 00:11 - 10486086 _____ C:\Program Files\20151227185434_3.csv
2015-12-27 18:54 - 2015-12-27 22:17 - 10486086 _____ C:\Program Files\20151227185434_2.csv
2015-12-27 18:54 - 2015-12-27 20:38 - 10486082 _____ C:\Program Files\20151227185434_1.csv
2015-12-27 18:54 - 2015-12-27 18:54 - 00000012 _____ C:\Program Files\FSSC.dat
2015-12-27 18:54 - 2015-08-27 06:32 - 00069600 _____ (ThreatTrack Security) C:\Program Files\gfiarkup.dll
2015-12-27 18:54 - 2015-08-27 06:31 - 00070112 _____ (ThreatTrack Security) C:\Program Files\gfiark.dll
2015-12-27 18:54 - 2015-08-27 06:31 - 00043176 _____ (ThreatTrack Security) C:\Program Files\gfiark32.sys
2015-12-27 18:54 - 2015-08-27 06:31 - 00040584 _____ (ThreatTrack Security) C:\windows\system32\Drivers\gfiark.sys
2015-12-27 18:54 - 2015-08-27 06:31 - 00040584 _____ (ThreatTrack Security) C:\Program Files\gfiark64.sys
2015-12-27 18:54 - 2013-09-04 13:57 - 00031264 _____ (ThreatTrack Security) C:\windows\system32\Drivers\gfiutil.sys
2015-12-27 18:54 - 2013-09-04 13:57 - 00031264 _____ (ThreatTrack Security) C:\Program Files\gfiutl64.sys
2015-12-27 18:54 - 2013-09-04 13:57 - 00024040 _____ (ThreatTrack Security) C:\Program Files\gfiutl32.sys
2015-12-27 18:54 - 2013-09-04 13:57 - 00014656 _____ (ThreatTrack Security) C:\Program Files\gfiutil.dll
2015-12-27 18:51 - 2015-12-28 00:41 - 00000000 ____D C:\Program Files\Definitions
2015-12-27 18:51 - 2015-12-27 18:51 - 00000000 ____D C:\Program Files\x64
2015-12-27 18:13 - 2015-12-27 18:51 - 258727936 _____ C:\Users\jcvielma\Desktop\VIPRERescue46100.exe
2015-12-27 18:03 - 2015-12-27 18:16 - 00000000 ____D C:\Users\jcvielma\Desktop\rescate
2015-12-27 18:02 - 2015-12-27 18:05 - 00002128 _____ C:\Users\jcvielma\Desktop\Rkill.txt
2015-12-27 17:40 - 2015-12-28 11:15 - 00000000 ____D C:\ProgramData\MCShield
2015-12-27 17:40 - 2015-12-27 17:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MCShield
2015-12-27 17:40 - 2015-12-27 17:40 - 00000000 ____D C:\Program Files (x86)\MCShield
2015-12-27 17:27 - 2015-12-27 17:56 - 00000000 ____D C:\AdwCleaner
2015-12-27 16:36 - 2015-12-28 10:40 - 00192216 _____ (Malwarebytes) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2015-12-27 16:33 - 2015-12-28 11:13 - 00856452 _____ C:\windows\ntbtlog.txt
2015-12-27 16:29 - 2015-12-28 10:12 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-12-27 16:29 - 2015-12-27 16:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-12-27 16:29 - 2015-12-27 16:29 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-12-27 16:29 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\windows\system32\Drivers\mbamchameleon.sys
2015-12-27 16:29 - 2015-10-05 09:50 - 00063704 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys
2015-12-27 16:29 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\windows\system32\Drivers\mbam.sys
2015-12-27 16:26 - 2015-12-27 16:28 - 22908888 _____ (Malwarebytes ) C:\Users\jcvielma\Desktop\mbam-setup-org-2.2.0.1024.exe
2015-12-27 15:40 - 2015-12-27 16:10 - 00000000 ____D C:\ProgramData\AVAST Software
2015-12-26 12:11 - 2015-12-26 12:41 - 00011066 _____ C:\Users\jcvielma\Desktop\monedas.xlsx
2015-12-24 19:18 - 2015-12-24 18:14 - 05762544 _____ (AVAST Software) C:\Users\jcvielma\Desktop\avastclear.exe
2015-12-24 14:05 - 2015-12-24 14:05 - 00000000 ____D C:\Users\jcvielma\AppData\Local\Introversion
2015-12-24 14:05 - 2015-12-24 14:05 - 00000000 ____D C:\ProgramData\SkidRow
2015-12-24 14:01 - 2015-12-24 14:01 - 00001460 _____ C:\Users\Public\Desktop\Prison Architect.lnk
2015-12-24 14:00 - 2015-12-24 14:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Introversion Software
2015-12-24 14:00 - 2015-12-24 14:00 - 00000000 ____D C:\Program Files (x86)\Introversion Software
2015-12-24 13:59 - 2015-12-24 13:59 - 00000000 ____D C:\Users\jcvielma\AppData\Roaming\ImgBurn
2015-12-24 13:18 - 2015-12-24 13:52 - 00000000 ____D C:\Users\jcvielma\Downloads\Prison Architect-SKIDROW
2015-12-21 11:06 - 2015-12-21 11:07 - 02498304 _____ C:\Users\jcvielma\Desktop\CvGameCore_Expansion2.zip
2015-12-19 14:42 - 2015-12-27 18:56 - 00000000 ____D C:\Program Files (x86)\WTFast
2015-12-19 14:42 - 2015-12-19 14:42 - 00000000 ____D C:\Users\jcvielma\AppData\Local\AAA_Internet_Publishing,_
2015-12-19 14:42 - 2015-04-08 15:15 - 00011264 _____ (Microsoft Corporation) C:\windows\SysWOW64\SPORDER.DLL
2015-12-19 14:40 - 2015-12-19 14:41 - 07016240 _____ (Initex & AAA Internet Publishing ) C:\Users\jcvielma\Desktop\WTFastSetup.3.5.9.511.exe
2015-12-18 00:14 - 2015-12-18 09:32 - 00000000 ____D C:\081b2767b9c21126b0
2015-12-11 19:47 - 2015-12-11 19:48 - 00000000 ____D C:\Users\jcvielma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-12-09 23:42 - 2015-12-09 23:42 - 00000000 ____D C:\windows\7
2015-12-09 10:31 - 2015-11-11 16:42 - 00387792 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2015-12-09 10:31 - 2015-11-11 16:22 - 00341192 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2015-12-09 10:31 - 2015-11-11 11:51 - 25837568 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2015-12-09 10:31 - 2015-11-11 11:30 - 12856832 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2015-12-09 10:31 - 2015-11-11 11:14 - 00416256 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2015-12-09 10:31 - 2015-11-11 11:14 - 00279040 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2015-12-09 10:31 - 2015-11-11 11:11 - 20366848 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2015-12-09 10:31 - 2015-11-11 10:42 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2015-12-09 10:31 - 2015-11-11 10:27 - 00076288 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2015-12-09 10:31 - 2015-11-09 19:54 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2015-12-09 10:31 - 2015-11-09 19:43 - 00496640 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2015-12-09 10:31 - 2015-11-09 19:43 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2015-12-09 10:31 - 2015-11-09 19:42 - 00341504 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec
2015-12-09 10:31 - 2015-11-09 19:42 - 00047616 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2015-12-09 10:31 - 2015-11-09 19:41 - 00064000 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2015-12-09 10:31 - 2015-11-09 19:38 - 02280448 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2015-12-09 10:31 - 2015-11-09 19:36 - 00047104 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2015-12-09 10:31 - 2015-11-09 19:36 - 00030720 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2015-12-09 10:31 - 2015-11-09 19:34 - 00476160 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2015-12-09 10:31 - 2015-11-09 19:33 - 00115712 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2015-12-09 10:31 - 2015-11-09 19:32 - 00663552 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2015-12-09 10:31 - 2015-11-09 19:32 - 00620032 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2015-12-09 10:31 - 2015-11-09 19:20 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-12-09 10:31 - 2015-11-09 19:17 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2015-12-09 10:31 - 2015-11-09 19:16 - 04514816 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2015-12-09 10:31 - 2015-11-09 19:14 - 00130048 _____ (Microsoft Corporation) C:\windows\SysWOW64\occache.dll
2015-12-09 10:31 - 2015-11-09 19:07 - 00230400 _____ (Microsoft Corporation) C:\windows\SysWOW64\webcheck.dll
2015-12-09 10:31 - 2015-11-09 19:06 - 02050560 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2015-12-09 10:31 - 2015-11-09 19:06 - 00687104 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2015-12-09 10:31 - 2015-11-09 19:05 - 01155072 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll
2015-12-09 10:31 - 2015-11-09 18:47 - 02011136 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2015-12-09 10:31 - 2015-11-09 18:44 - 01311744 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2015-12-09 10:31 - 2015-11-09 18:42 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2015-12-09 10:31 - 2015-11-08 18:03 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2015-12-09 10:31 - 2015-11-08 18:02 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2015-12-09 10:31 - 2015-11-08 17:46 - 00066560 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2015-12-09 10:31 - 2015-11-08 17:45 - 02887168 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2015-12-09 10:31 - 2015-11-08 17:45 - 00571392 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2015-12-09 10:31 - 2015-11-08 17:45 - 00417792 _____ (Microsoft Corporation) C:\windows\system32\html.iec
2015-12-09 10:31 - 2015-11-08 17:45 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2015-12-09 10:31 - 2015-11-08 17:44 - 00088064 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2015-12-09 10:31 - 2015-11-08 17:37 - 00054784 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2015-12-09 10:31 - 2015-11-08 17:36 - 00034304 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2015-12-09 10:31 - 2015-11-08 17:34 - 05923840 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2015-12-09 10:31 - 2015-11-08 17:32 - 00615936 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2015-12-09 10:31 - 2015-11-08 17:31 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2015-12-09 10:31 - 2015-11-08 17:31 - 00814080 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2015-12-09 10:31 - 2015-11-08 17:31 - 00144384 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2015-12-09 10:31 - 2015-11-08 17:31 - 00114688 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2015-12-09 10:31 - 2015-11-08 17:22 - 00968704 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2015-12-09 10:31 - 2015-11-08 17:18 - 00489984 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2015-12-09 10:31 - 2015-11-08 17:10 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2015-12-09 10:31 - 2015-11-08 17:05 - 00199680 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2015-12-09 10:31 - 2015-11-08 17:02 - 00315392 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2015-12-09 10:31 - 2015-11-08 16:59 - 00152064 _____ (Microsoft Corporation) C:\windows\system32\occache.dll
2015-12-09 10:31 - 2015-11-08 16:48 - 00262144 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll
2015-12-09 10:31 - 2015-11-08 16:45 - 00798208 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2015-12-09 10:31 - 2015-11-08 16:45 - 00718336 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2015-12-09 10:31 - 2015-11-08 16:44 - 14456832 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2015-12-09 10:31 - 2015-11-08 16:44 - 01359360 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2015-12-09 10:31 - 2015-11-08 16:43 - 02123264 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2015-12-09 10:31 - 2015-11-08 16:23 - 02487808 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2015-12-09 10:31 - 2015-11-08 16:11 - 01546752 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2015-12-09 10:31 - 2015-11-08 16:00 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2015-12-09 10:28 - 2015-11-20 14:24 - 03170304 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll
2015-12-09 10:28 - 2015-11-20 14:24 - 02609152 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll
2015-12-09 10:28 - 2015-11-20 14:24 - 00709632 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll
2015-12-09 10:28 - 2015-11-20 14:24 - 00192512 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll
2015-12-09 10:28 - 2015-11-20 14:24 - 00140288 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe
2015-12-09 10:28 - 2015-11-20 14:24 - 00098816 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll
2015-12-09 10:28 - 2015-11-20 14:24 - 00091136 _____ (Microsoft Corporation) C:\windows\system32\WinSetupUI.dll
2015-12-09 10:28 - 2015-11-20 14:24 - 00037888 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll
2015-12-09 10:28 - 2015-11-20 14:24 - 00037888 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe
2015-12-09 10:28 - 2015-11-20 14:24 - 00036864 _____ (Microsoft Corporation) C:\windows\system32\wups.dll
2015-12-09 10:28 - 2015-11-20 14:24 - 00012288 _____ (Microsoft Corporation) C:\windows\system32\wu.upgrade.ps.dll
2015-12-09 10:28 - 2015-11-20 14:04 - 00573440 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll
2015-12-09 10:28 - 2015-11-20 14:04 - 00174080 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll
2015-12-09 10:28 - 2015-11-20 14:04 - 00093696 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll
2015-12-09 10:28 - 2015-11-20 14:04 - 00030208 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll
2015-12-09 10:28 - 2015-11-20 14:03 - 00035328 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe
2015-12-09 10:28 - 2015-11-10 14:25 - 01648128 _____ (Microsoft Corporation) C:\windows\system32\DWrite.dll
2015-12-09 10:28 - 2015-11-10 14:25 - 01180160 _____ (Microsoft Corporation) C:\windows\system32\FntCache.dll
2015-12-09 10:28 - 2015-11-10 14:25 - 01008640 _____ (Microsoft Corporation) C:\windows\system32\user32.dll
2015-12-09 10:28 - 2015-11-10 14:09 - 01251328 _____ (Microsoft Corporation) C:\windows\SysWOW64\DWrite.dll
2015-12-09 10:28 - 2015-11-10 14:07 - 00833024 _____ (Microsoft Corporation) C:\windows\SysWOW64\user32.dll
2015-12-09 10:28 - 2015-11-10 13:17 - 03211264 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2015-12-09 10:28 - 2015-11-05 14:32 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll
2015-12-09 10:28 - 2015-11-05 14:30 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\tzres.dll
2015-12-09 10:28 - 2015-11-03 14:34 - 00802304 _____ (Microsoft Corporation) C:\windows\system32\usp10.dll
2015-12-09 10:28 - 2015-11-03 14:26 - 00627712 _____ (Microsoft Corporation) C:\windows\SysWOW64\usp10.dll
2015-12-09 10:28 - 2015-10-08 18:52 - 00069120 _____ (Microsoft Corporation) C:\windows\system32\nlsbres.dll
2015-12-09 10:28 - 2015-10-08 18:48 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDAZE.DLL
2015-12-09 10:28 - 2015-10-08 18:48 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\kbdgeoqw.dll
2015-12-09 10:28 - 2015-10-08 18:48 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDAZEL.DLL
2015-12-09 10:28 - 2015-10-08 18:48 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDAZE.DLL
2015-12-09 10:28 - 2015-10-08 18:48 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\kbdgeoqw.dll
2015-12-09 10:28 - 2015-10-08 18:48 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDAZEL.DLL
2015-12-09 10:28 - 2015-10-08 18:47 - 00069120 _____ (Microsoft Corporation) C:\windows\SysWOW64\nlsbres.dll
2015-12-09 10:28 - 2015-10-08 14:43 - 00419928 _____ C:\windows\SysWOW64\locale.nls
2015-12-09 10:28 - 2015-10-08 14:22 - 00419928 _____ C:\windows\system32\locale.nls
2015-12-09 10:27 - 2015-11-11 14:23 - 01735680 _____ (Microsoft Corporation) C:\windows\system32\comsvcs.dll
2015-12-09 10:27 - 2015-11-11 14:23 - 00525312 _____ (Microsoft Corporation) C:\windows\system32\catsrvut.dll
2015-12-09 10:27 - 2015-11-11 14:09 - 01242624 _____ (Microsoft Corporation) C:\windows\SysWOW64\comsvcs.dll
2015-12-09 10:27 - 2015-11-11 14:09 - 00487936 _____ (Microsoft Corporation) C:\windows\SysWOW64\catsrvut.dll
2015-12-09 10:27 - 2015-11-05 14:35 - 00017408 _____ (Microsoft Corporation) C:\windows\system32\wshrm.dll
2015-12-09 10:27 - 2015-11-05 14:32 - 00014848 _____ (Microsoft Corporation) C:\windows\SysWOW64\wshrm.dll
2015-12-09 10:27 - 2015-11-05 05:23 - 00146944 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rmcast.sys
2015-12-09 10:22 - 2015-11-03 14:34 - 00241664 _____ (Microsoft Corporation) C:\windows\system32\els.dll
2015-12-09 10:22 - 2015-11-03 14:25 - 00179712 _____ (Microsoft Corporation) C:\windows\SysWOW64\els.dll
2015-12-08 09:31 - 2015-12-08 09:31 - 00000000 ___HD C:\windows\system32\GroupPolicy
2015-11-30 23:31 - 2015-11-30 23:31 - 00015464 _____ C:\windows\DelYac64.sys
2015-11-29 15:28 - 2015-11-29 18:27 - 00000000 ____D C:\Users\jcvielma\AppData\Roaming\Duelyst
2015-11-29 15:06 - 2015-11-30 22:27 - 00000000 ____D C:\Users\jcvielma\.counterplay
2015-11-29 15:06 - 2015-11-29 15:06 - 00002237 _____ C:\Users\jcvielma\Desktop\DuelystLauncher.lnk
2015-11-29 15:06 - 2015-11-29 15:06 - 00000000 ____D C:\Users\jcvielma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Counterplay Games Inc
2015-11-29 15:06 - 2015-11-29 15:06 - 00000000 ____D C:\Users\jcvielma\AppData\Roaming\DuelystLauncher
2015-11-29 15:06 - 2015-11-29 15:06 - 00000000 ____D C:\Users\jcvielma\AppData\Local\launcher
2015-11-29 15:05 - 2015-11-29 15:06 - 00000000 ____D C:\Users\jcvielma\AppData\Local\SquirrelTemp
2015-11-29 15:01 - 2015-11-29 15:05 - 56090880 _____ (Counterplay Games Inc.) C:\Users\jcvielma\Desktop\DuelystLauncher-v0.0.5.exe
 
==================== One Month Modified files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2015-12-28 11:30 - 2009-07-13 22:50 - 00000000 ____D C:\Windows
2015-12-28 11:22 - 2009-07-14 00:15 - 00019568 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-12-28 11:22 - 2009-07-14 00:15 - 00019568 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-12-28 11:19 - 2009-07-14 00:43 - 00788664 _____ C:\windows\system32\PerfStringBackup.INI
2015-12-28 11:19 - 2009-07-13 22:50 - 00000000 ____D C:\windows\inf
2015-12-28 11:14 - 2015-09-24 09:56 - 00000000 ____D C:\Program Files (x86)\SkypeUpdateEx
2015-12-28 11:14 - 2015-01-20 15:20 - 00000000 ____D C:\Users\jcvielma\AppData\Local\LogMeIn Hamachi
2015-12-28 11:14 - 2012-07-18 19:43 - 00000000 ____D C:\windows\hpoj4500g510a-f
2015-12-28 11:14 - 2010-12-28 20:22 - 00001032 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-12-28 11:14 - 2009-07-14 00:38 - 00000006 ____H C:\windows\Tasks\SA.DAT
2015-12-28 01:10 - 2010-12-28 20:22 - 00001036 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-12-28 00:42 - 2011-07-15 19:58 - 00000000 ____D C:\Users\jcvielma\AppData\Local\CrashDumps
2015-12-28 00:41 - 2015-10-17 10:15 - 00000000 ____D C:\Program Files (x86)\Sid Meiers Civilization Beyond Earth
2015-12-28 00:41 - 2015-05-23 09:25 - 00000000 ____D C:\Program Files (x86)\Age of Mythology Extended Edition
2015-12-28 00:41 - 2014-10-03 18:02 - 00000000 ____D C:\Program Files (x86)\RaidCall
2015-12-28 00:41 - 2014-05-09 11:36 - 00000000 ____D C:\Users\jcvielma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dungeon Crawl Stone Soup
2015-12-28 00:41 - 2014-05-09 11:36 - 00000000 ____D C:\Users\jcvielma\AppData\Local\Crawl
2015-12-28 00:39 - 2015-06-19 06:28 - 00001014 _____ C:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-1080308731-2573736826-3272458361-1000UA.job
2015-12-27 23:55 - 2015-02-14 16:29 - 00000000 ____D C:\Users\jcvielma\AppData\Roaming\TS3Client
2015-12-27 23:39 - 2015-06-19 06:28 - 00000962 _____ C:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-1080308731-2573736826-3272458361-1000Core.job
2015-12-27 19:08 - 2015-04-22 10:10 - 00000000 ____D C:\Users\jcvielma\AppData\Local\JDownloader v2.0
2015-12-27 18:37 - 2013-12-19 15:23 - 00000000 ____D C:\Users\jcvielma\AppData\Local\ElevatedDiagnostics
2015-12-27 17:54 - 2015-04-22 09:41 - 00000258 __RSH C:\ProgramData\ntuser.pol
2015-12-27 17:33 - 2012-07-18 19:49 - 00000000 ____D C:\Users\jcvielma\AppData\Roaming\Yahoo!
2015-12-27 17:32 - 2012-07-18 19:49 - 00000000 ____D C:\Program Files (x86)\Yahoo!
2015-12-27 17:22 - 2012-12-19 10:24 - 00000000 ____D C:\Users\jcvielma\AppData\Roaming\uTorrent
2015-12-27 17:08 - 2015-08-05 21:52 - 00000000 ____D C:\windows\msapps
2015-12-27 15:27 - 2012-08-27 17:53 - 00004182 _____ C:\windows\System32\Tasks\avast! Emergency Update
2015-12-25 10:26 - 2015-07-02 08:42 - 00000000 ____D C:\windows\SysWOW64\vbox
2015-12-25 10:26 - 2015-07-02 08:42 - 00000000 ____D C:\windows\system32\vbox
2015-12-24 16:19 - 2013-07-21 16:57 - 00000000 ____D C:\Program Files (x86)\Steam
2015-12-24 11:01 - 2015-09-09 22:40 - 00000000 ____D C:\Program Files (x86)\Civilization V 1.0.3.279
2015-12-22 16:14 - 2010-12-28 20:22 - 00002268 _____ C:\Users\jcvielma\Desktop\Google Chrome.lnk
2015-12-22 11:09 - 2011-07-05 10:06 - 00001562 _____ C:\Users\jcvielma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-12-19 14:55 - 2015-06-12 12:31 - 00001391 _____ C:\Users\jcvielma\Desktop\Wow - Shortcut.lnk
2015-12-19 14:53 - 2015-02-12 16:59 - 00000000 ____D C:\Program Files\World of Warcraft
2015-12-19 01:21 - 2011-07-05 15:57 - 00772974 _____ C:\windows\SysWOW64\PerfStringBackup.INI
2015-12-19 01:15 - 2015-04-04 23:56 - 00000000 ___SD C:\windows\SysWOW64\GWX
2015-12-19 01:15 - 2015-04-04 23:56 - 00000000 ___SD C:\windows\system32\GWX
2015-12-12 13:03 - 2009-07-13 22:50 - 00000000 ____D C:\windows\rescache
2015-12-11 19:48 - 2015-02-06 10:57 - 00000000 ____D C:\Users\jcvielma\AppData\Roaming\Dropbox
2015-12-11 12:21 - 2009-07-14 00:15 - 00492992 _____ C:\windows\system32\FNTCACHE.DAT
2015-12-11 08:49 - 2015-10-28 22:52 - 00000000 ____D C:\ProgramData\System32
2015-12-10 09:50 - 2012-05-15 20:26 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-12-10 09:50 - 2012-05-15 20:26 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2015-12-10 09:28 - 2012-05-15 20:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-12-10 09:25 - 2011-09-18 13:17 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-12-09 23:47 - 2011-03-16 05:24 - 00000000 ____D C:\ProgramData\Intel
2015-12-09 23:42 - 2015-09-18 09:56 - 00000000 ____D C:\Users\jcvielma\AppData\Roaming\XBox
2015-12-04 11:05 - 2010-12-28 20:22 - 00004032 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-12-04 11:05 - 2010-12-28 20:22 - 00003780 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-12-02 13:18 - 2011-07-12 15:36 - 00301728 ____N (Microsoft Corporation) C:\windows\system32\MpSigStub.exe
2015-12-01 01:13 - 2012-05-31 20:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2015-11-29 15:06 - 2011-07-05 10:05 - 00000000 ____D C:\Users\jcvielma
 
==================== Files in the root of some directories =======
 
2015-12-27 18:54 - 2015-12-28 00:42 - 3058084 _____ () C:\Program Files\20151227185434.csv
2015-12-28 00:40 - 2015-12-28 00:41 - 0038346 _____ () C:\Program Files\20151227185434.xml
2015-12-27 18:54 - 2015-12-27 20:38 - 10486082 _____ () C:\Program Files\20151227185434_1.csv
2015-12-27 18:54 - 2015-12-27 22:17 - 10486086 _____ () C:\Program Files\20151227185434_2.csv
2015-12-27 18:54 - 2015-12-28 00:11 - 10486086 _____ () C:\Program Files\20151227185434_3.csv
2015-12-27 18:54 - 2015-12-27 18:54 - 0000012 _____ () C:\Program Files\FSSC.dat
2015-12-27 18:54 - 2015-08-27 06:31 - 0070112 _____ (ThreatTrack Security) C:\Program Files\gfiark.dll
2015-12-27 18:54 - 2015-08-27 06:31 - 0043176 _____ (ThreatTrack Security) C:\Program Files\gfiark32.sys
2015-12-27 18:54 - 2015-08-27 06:31 - 0040584 _____ (ThreatTrack Security) C:\Program Files\gfiark64.sys
2013-09-30 20:33 - 2013-09-30 20:33 - 0063896 _____ (ThreatTrack Security) C:\Program Files\gfiarksh.dll
2015-12-27 18:54 - 2015-08-27 06:32 - 0069600 _____ (ThreatTrack Security) C:\Program Files\gfiarkup.dll
2015-12-27 18:54 - 2013-09-04 13:57 - 0014656 _____ (ThreatTrack Security) C:\Program Files\gfiutil.dll
2015-12-27 18:54 - 2013-09-04 13:57 - 0024040 _____ (ThreatTrack Security) C:\Program Files\gfiutl32.sys
2015-12-27 18:54 - 2013-09-04 13:57 - 0031264 _____ (ThreatTrack Security) C:\Program Files\gfiutl64.sys
2013-09-30 20:33 - 2013-09-30 20:33 - 0044944 _____ (ThreatTrack Security, Inc.) C:\Program Files\sbbd.exe
2013-09-30 20:33 - 2013-09-30 20:33 - 0202128 _____ (ThreatTrack Security, Inc.) C:\Program Files\SBRC.exe
2013-09-30 20:33 - 2013-09-30 20:33 - 1059728 _____ (ThreatTrack Security, Inc.) C:\Program Files\SBTE.dll
2013-09-30 20:33 - 2013-09-30 20:33 - 0333704 _____ (GFI Software) C:\Program Files\vipre.dll
2013-09-30 20:33 - 2013-09-30 20:33 - 0541584 _____ (ThreatTrack Security, Inc.) C:\Program Files\VipreRescueScanner.exe
2014-05-08 14:05 - 2014-10-25 11:19 - 0000693 _____ () C:\Users\jcvielma\AppData\Roaming\Rim.Desktop.Exception.log
2014-05-08 13:55 - 2014-05-08 19:02 - 0002257 _____ () C:\Users\jcvielma\AppData\Roaming\Rim.Desktop.HttpServerSetup.log
2014-05-08 19:04 - 2014-10-25 12:43 - 0000231 _____ () C:\Users\jcvielma\AppData\Roaming\Rim.DesktopHelper.Exception.log
2014-05-08 19:09 - 2014-10-25 12:43 - 0000231 _____ () C:\Users\jcvielma\AppData\Roaming\Rim.Transcoder.Exception.log
2012-10-31 22:41 - 2012-10-31 22:41 - 0582661 _____ () C:\Users\jcvielma\AppData\Roaming\technic-launcher.jar
2014-05-08 14:05 - 2014-10-25 10:16 - 0018432 _____ () C:\Users\jcvielma\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-10-22 19:54 - 2014-10-22 19:54 - 0000001 _____ () C:\Users\jcvielma\AppData\Local\llftool.4.12.agreement
2014-09-28 16:14 - 2015-06-14 13:48 - 0007602 _____ () C:\Users\jcvielma\AppData\Local\Resmon.ResmonCfg
2012-07-18 19:41 - 2012-08-22 08:05 - 0001291 _____ () C:\ProgramData\hpzinstall.log
2012-09-22 18:57 - 2015-09-26 14:12 - 0000952 ___SH () C:\ProgramData\KGyGaAvL.sys
2011-07-06 14:39 - 2011-07-06 14:39 - 0000153 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
 
Some files in TEMP:
====================
C:\Users\jcvielma\AppData\Local\Temp\proxy_vole1533515238743272440.dll
C:\Users\jcvielma\AppData\Local\Temp\proxy_vole5593007764641275202.dll
C:\Users\jcvielma\AppData\Local\Temp\proxy_vole6935337405942467074.dll
 
 
==================== Bamital & volsnap =================
 
(There is no automatic fix for files that do not pass verification.)
 
C:\windows\system32\winlogon.exe => File is digitally signed
C:\windows\system32\wininit.exe => File is digitally signed
C:\windows\SysWOW64\wininit.exe => File is digitally signed
C:\windows\explorer.exe => File is digitally signed
C:\windows\SysWOW64\explorer.exe => File is digitally signed
C:\windows\system32\svchost.exe => File is digitally signed
C:\windows\SysWOW64\svchost.exe => File is digitally signed
C:\windows\system32\services.exe => File is digitally signed
C:\windows\system32\User32.dll => File is digitally signed
C:\windows\SysWOW64\User32.dll => File is digitally signed
C:\windows\system32\userinit.exe => File is digitally signed
C:\windows\SysWOW64\userinit.exe => File is digitally signed
C:\windows\system32\rpcss.dll => File is digitally signed
C:\windows\system32\dnsapi.dll => File is digitally signed
C:\windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\windows\system32\Drivers\volsnap.sys => File is digitally signed
 
 
LastRegBack: 2015-12-20 13:04
 
==================== End of FRST.txt ============================
 
and the addition:
 
 
Additional scan result of Farbar Recovery Scan Tool (x64) Version:28-12-2015
Ran by jcvielma (2015-12-28 11:32:14)
Running from C:\Users\jcvielma\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2011-07-05 14:35:13)
Boot Mode: Normal
==========================================================
 
 
==================== Accounts: =============================
 
Administrator (S-1-5-21-1080308731-2573736826-3272458361-500 - Administrator - Disabled)
Guest (S-1-5-21-1080308731-2573736826-3272458361-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1080308731-2573736826-3272458361-1002 - Limited - Enabled)
jcvielma (S-1-5-21-1080308731-2573736826-3272458361-1000 - Administrator - Enabled) => C:\Users\jcvielma
VUSR_JCVIELMA-LAPTOP (S-1-5-21-1080308731-2573736826-3272458361-1003 - Limited - Enabled)
 
==================== Security Center ========================
 
(If an entry is included in the fixlist, it will be removed.)
 
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 
==================== Installed Programs ======================
 
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 
4500_G510af_Help (x32 Version: 000.0.439.000 - Hewlett-Packard) Hidden
4500G510af (x32 Version: 000.0.423.000 - Hewlett-Packard) Hidden
4500G510af_Software_Min (x32 Version: 000.0.423.000 - Hewlett-Packard) Hidden
64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version:  - )
Adobe Acrobat X Pro - Italiano, Español, Nederlands, Português (HKLM-x32\...\{AC76BA86-1040-7D70-7760-000000000005}) (Version: 10.1.4 - Adobe Systems)
Adobe Flash Player 11 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 11.6.602.168 - Adobe Systems Incorporated)
Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.206 - Adobe Systems Incorporated)
Adobe Reader 9.5.2 (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-A95000000001}) (Version: 9.5.2 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.7.157 - Adobe Systems, Inc.)
Age of Empires II HD The African Kingdoms (HKLM-x32\...\Age of Empires II HD The African Kingdoms_is1) (Version:  - )
Age of Mythology: Extended Edition (HKLM-x32\...\QWdlb2ZNeXRob2xvZ3lFeHRlbmRlZEVkaXRpb24=_is1) (Version: 1 - )
Akamai NetSession Interface (HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\...\Akamai) (Version:  - Akamai Technologies, Inc)
Amazon Links (HKLM-x32\...\{3135D885-9D9A-4B4D-8D45-9DB05DA115CA}) (Version: 2.02 - TOSHIBA Corporation)
Apple Mobile Device Support (HKLM\...\{7446FE8D-C1F9-4D42-AAAE-5DBCE58605A6}) (Version: 6.0.0.59 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Asistente para la publicación en Web 1.53 de Microsoft (HKLM-x32\...\WebPost) (Version:  - )
aTube Catcher (HKLM-x32\...\aTube Catcher) (Version: 3.8.7955 - DsNET Corp)
aTube Catcher versión 3.8 (HKLM-x32\...\{D43B360E-722D-421B-BC77-20B9E0F8B6CD}_is1) (Version: 3.8 - DsNET Corp)
Autodesk Content Service (HKLM-x32\...\{086F9A69-CD39-4893-A9FB-D3A0634CE3F7}) (Version: 2.0.90 - Autodesk)
Autodesk Design Review 2012 (HKLM-x32\...\Autodesk Design Review 2012) (Version: 12.0.0.93 - Autodesk, Inc.)
Autodesk Design Review 2012 (x32 Version: 12.0.0.93 - Autodesk, Inc.) Hidden
Autodesk Inventor Fusion 2012 (HKLM\...\Autodesk Inventor Fusion 2012) (Version: 1.0.0.79 - Autodesk, Inc.)
Autodesk Inventor Fusion 2012 (Version: 1.0.0.79 - Autodesk, Inc.) Hidden
Autodesk Inventor Fusion 2012 Language Pack (Version: 1.0.0.79 - Autodesk, Inc.) Hidden
Autodesk Inventor Fusion plug-in for AutoCAD 2012 (HKLM\...\Autodesk Inventor Fusion plug-in for AutoCAD 2012) (Version: 0.0.1.138 - Autodesk)
Autodesk Inventor Fusion plug-in for AutoCAD 2012 (Version: 0.0.1.138 - Autodesk) Hidden
Autodesk Inventor Fusion plug-in language pack for AutoCAD 2012 (Version: 0.0.1.138 - Autodesk) Hidden
Autodesk Material Library 2012 (HKLM-x32\...\{8F0837C2-EE09-4903-88F3-1976FE7FFF4E}) (Version: 2.5.0.8 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2012 (HKLM-x32\...\{65420DC9-306E-4371-905F-F4DC3B418E52}) (Version: 2.5.0.8 - Autodesk)
Autodesk Material Library Low Resolution Image Library 2012 (HKLM-x32\...\{24FF088D-CDCF-480C-8A4B-98F14A54CAA8}) (Version: 2.5.0.8 - Autodesk)
Autodesk Material Library Medium Resolution Image Library 2012 (HKLM-x32\...\{B5751715-EC10-43D9-8C95-62E1368433EF}) (Version: 2.5.0.8 - Autodesk)
Autodesk Revit DB Link 2012 (HKLM-x32\...\{7920BC7D-5D86-42B4-A6E0-2ADCBC38A76A}) (Version: 11.03.23131 - Autodesk)
Autodesk Revit Model Review 2012 (HKLM-x32\...\{DD616E6B-78A6-4F50-83F0-9BB754BEE5BE}) (Version: 11.01.07101 - Autodesk)
Autodesk Revit Structure 2012 (HKLM\...\Autodesk Revit Structure 2012) (Version: 11.03.09231 - Autodesk)
Autodesk Robot Structural Analysis Professional 2011 - Spanish regional settings (x32 Version: 2011.0.0.3481 - Autodesk) Hidden
Autodesk Robot Structural Analysis Professional 2011 (HKLM-x32\...\Autodesk Robot Structural Analysis Professional 2011) (Version: 2011.0.0.3481 - Autodesk)
Autodesk Robot Structural Analysis Professional 2011 (x32 Version: 2011.0.0.3481 - Autodesk) Hidden
Autodesk Robot Structural Analysis Professional 2012 - Spanish regional settings (Version: 2012.0.0.3774 - Autodesk) Hidden
Autodesk Robot Structural Analysis Professional 2012 (HKLM\...\Autodesk Robot Structural Analysis Professional 2012) (Version: 2012.0.0.3774 - Autodesk)
Autodesk Robot Structural Analysis Professional 2012 (Version: 2012.0.0.3774 - Autodesk) Hidden
Banished (HKLM-x32\...\1207660783_is1) (Version: 2.3.0.7 - GOG.com)
Banished 1.0.4 (HKLM-x32\...\Banished_is1) (Version:  - )
Batch Print for Autodesk Revit 2012 (HKLM-x32\...\{22255C78-9E67-4D4E-A73F-DCA621724363}) (Version: 11.03.23162 - Autodesk)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
BlackBerry Desktop Software 7.1 (HKLM-x32\...\BlackBerry_Desktop) (Version: 7.1.0.41 - Research In Motion Ltd.)
BlackBerry Desktop Software 7.1 (x32 Version: 7.1.0.41 - Research In Motion Ltd.) Hidden
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
BS.Player FREE (HKLM-x32\...\BSPlayerf) (Version: 2.64.1073 - AB Team, d.o.o.)
BufferChm (x32 Version: 130.0.331.000 - Hewlett-Packard) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.04 - Piriform)
CDisplay 1.8 (HKLM-x32\...\CDisplay_is1) (Version:  - dvd8n)
Civilization V Game of the Year Edition version 1.0.3.144 (HKLM-x32\...\Civilization V Game of the Year Edition_is1) (Version: 1.0.3.144 - Mr DJ)
Comodo Dragon (HKLM-x32\...\Comodo Dragon) (Version: 33.1.0.1 - Comodo)
Compatibilidad con Aplicaciones de Apple (HKLM-x32\...\{63EC2120-1742-4625-AA47-C6A8AEC9C64C}) (Version: 2.2.2 - Apple Inc.)
Corel WinDVD (HKLM-x32\...\{5C1F18D2-F6B7-4242-B803-B5A78648185D}) (Version: 10.0.5.773 - Corel Inc.)
Corneroids (HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\...\7027eb15f9eaa407) (Version: 1.0.1.2 - Microsoft)
Cuevana Storm versión 0.1b (HKLM-x32\...\{CB7BA2E8-323E-4684-8D96-4A5EAF481D9A}_is1) (Version: 0.1b - Cuevana)
Cuevana Storm versión 0.3b (HKLM-x32\...\{2AFB4518-E1D7-4D74-B4FC-C65AE00E531D}_is1) (Version: 0.3b - Cuevana)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Pro Advanced v5.2.0.0348 (HKLM-x32\...\DAEMON Tools Pro Advanced v5.2.0.03485.2.0.0348) (Version: 5.2.0.0348 - Friends in War)
Design Spreadsheets for Autodesk Robot Structural Analysis 2012 (HKLM-x32\...\{34841200-77DB-4BE5-A185-B6F187B3A05D}) (Version: 2012 - Autodesk, Inc.)
Destinations (x32 Version: 130.0.0.0 - Hewlett-Packard) Hidden
Dev-C++ 5 beta 9 release (4.9.9.2) (HKLM-x32\...\Dev-C++) (Version:  - )
DeviceDiscovery (x32 Version: 130.0.372.000 - Hewlett-Packard) Hidden
DocMgr (x32 Version: 130.0.000.000 - Nombre de su organización) Hidden
DocProc (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
Dolby Axon - 1.5.1.1 (HKLM-x32\...\{17936630-5344-4F18-9970-616129E2A114}_is1) (Version: 1.5.1.1 - Dolby Laboratories)
Don't Starve 9 Apr 2013 (HKLM-x32\...\Don't Starve 9 Apr 20139 Apr 2013) (Version: 9 Apr 2013 - Friends in War)
DPlot Graph Software version 2.3.3.0 (HKLM-x32\...\DPlot_is1) (Version: 2.3.3.0 - HydeSoft Computing, LLC)
Dropbox (HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\...\Dropbox) (Version: 3.12.5 - Dropbox, Inc.)
DuelystLauncher (HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\...\launcher) (Version: 0.05 - Counterplay Games Inc.)
Endless Legend Shadows (HKLM-x32\...\Endless Legend Shadows_is1) (Version:  - )
EPSON USB Display (HKLM-x32\...\{7650F538-6274-44EA-8F50-843479073333}) (Version: 1.45.000 - SEIKO EPSON CORPORATION)
Europa Universalis III (HKLM-x32\...\{59C80C5E-8C92-40FF-B910-2BB5C7281F61}) (Version:  - )
FARO LS 1.1.406.58 (HKLM-x32\...\{951B0F30-9F1A-4BF6-B3DA-99EB0E917B1C}) (Version: 4.6.58.2 - FARO Scanner Production)
Fax (x32 Version: 130.0.418.000 - Hewlett-Packard) Hidden
Five Nights at Freddy's (HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\...\Five Nights at Freddy's) (Version:  - )
Fraps (HKLM-x32\...\Fraps) (Version:  - )
Futuremark SystemInfo (HKLM-x32\...\{A72D5E68-8168-4B0F-AA78-163FF36F6D66}) (Version: 4.20.168 - Futuremark Corporation)
Globe Link for Autodesk Revit 2012 (HKLM-x32\...\{D49FFF70-9F9A-4598-9F4A-1312E9485F29}) (Version: 11.03.22150 - Autodesk)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 47.0.2526.106 - Google Inc.)
Google Drive (HKLM-x32\...\{1C3D2F92-D25E-4D98-B810-3F3B0857BF26}) (Version: 1.26.0707.2863 - Google, Inc.)
Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.7210.1528 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden
GPBaseService2 (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
Handset WinDriver 1.02.02.00 (HKLM-x32\...\Handset WinDriver) (Version: 1.02.02.00 - Huawei technologies Co., Ltd.)
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Herramienta de descarga USB/DVD de Windows 7 (HKLM-x32\...\{266F443F-A296-406F-9EE8-DF4A1061C6CE}) (Version: 1.0.30 - Microsoft Corporation)
HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP)
HP Document Manager 2.0 (HKLM\...\HP Document Manager) (Version: 2.0 - HP)
HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)
HP Officejet 4500 G510a-f (HKLM\...\{C98517B6-DCE9-49B7-B19E-E384178D3986}) (Version: 13.0 - HP)
HP Smart Web Printing 4.5 (HKLM\...\HP Smart Web Printing) (Version: 4.5 - HP)
HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)
HP Update (HKLM-x32\...\{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}) (Version: 5.003.001.001 - Hewlett-Packard)
HPProductAssistant (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
HPSSupply (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.7.0 - LIGHTNING UK!)
Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2291 - Intel Corporation)
Intel® PROSet/Wireless WiFi Software (HKLM\...\{290D4DB2-F1B4-4B8E-918D-D71EF29A001B}) (Version: 14.00.1000 - Intel Corporation)
Intel® Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.0.0.1046 - Intel Corporation)
Intel® Wireless Display (HKLM-x32\...\{B3926E82-9294-4D22-A8FF-9B3EA8F16840}) (Version: 1.3.9.7 - Intel Corporation)
Intel® Wireless Display (HKLM\...\{28EF7372-9087-4AC3-9B9F-D9751FCDF830}) (Version:  - )
iTunes (HKLM\...\{1493B2AE-0261-47D2-B1AA-F4DAD0F6C48B}) (Version: 10.7.0.21 - Apple Inc.)
Java 8 Update 25 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418025F0}) (Version: 8.0.250 - Oracle Corporation)
JDownloader 0.9 (HKLM-x32\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
JMicron Flash Media Controller Driver (HKLM-x32\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.53.5 - JMicron Technology Corp.)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Katawa Shoujo (HKLM-x32\...\Katawa Shoujo) (Version:  - )
[email protected] 1.0 (HKLM-x32\...\{0D795777-9D60-4692-8386-F2B3F2B5E5BF}) (Version: 1.0 - Corel)
LG United Mobile Drivers (HKLM-x32\...\{C2944BE7-9BFF-4EF0-A362-CB3281B7C50D}) (Version: 3.6.0.0 - LG Electronics)
LibreOffice 4.3.2.2 (HKLM-x32\...\{9C13F99C-6E1A-4126-AE91-EAA2DADE08D6}) (Version: 4.3.2.2 - The Document Foundation)
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.410 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.410 - LogMeIn, Inc.) Hidden
Malwarebytes Anti-Malware version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
MarketResearch (x32 Version: 130.0.374.000 - Hewlett-Packard) Hidden
MATLAB R2008a (HKLM-x32\...\MatlabR2008a) (Version: 7.6 - The MathWorks, Inc.)
MCShield ::Anti-Malware Tool:: (HKLM-x32\...\MCShield) (Version: 3.0.5.28 - MyCity)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Mouse and Keyboard Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 1.1.500.0 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Primary Interoperability Assemblies 2005 (HKLM-x32\...\{2C303EE0-A595-3543-A71A-931C7AC40EDE}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41105.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual Studio 2008 Remote Debugger Light (x64) - ENU (HKLM\...\Microsoft Visual Studio 2008 Remote Debugger Light (x64) - ENU) (Version:  - Microsoft Corporation)
Microsoft Visual Studio 2008 Remote Debugger Light (x64) - ENU Service Pack 1 (KB945140) (HKLM-x32\...\{90A80D89-A0E4-33C1-B13D-B93CB3496867}.KB945140) (Version: 1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 6.0 Edición empresarial (Español) (HKLM-x32\...\Visual Studio 6.0 Edición empresarial (esp)) (Version:  - )
Microsoft Visual Studio Tools for Applications 2.0 Runtime (HKLM-x32\...\{299C0434-4F4E-341F-A916-4E07AEB35E79}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Minecraft1.7.10 (HKLM-x32\...\Minecraft1.7.10) (Version:  - )
Mp3tag v2.39 (HKLM-x32\...\Mp3tag) (Version: v2.39 - Florian Heidenreich)
MPC-HC 1.7.7 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.7 - MPC-HC Team)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Mumble 1.2.8 (HKLM-x32\...\{734E6684-582C-4940-9301-54A3E30F46CA}) (Version: 1.2.8 - Thorvald Natvig)
OCR Software by I.R.I.S. 13.0 (HKLM\...\HPOCR) (Version: 13.0 - HP)
ONE TOUCH Upgrade S 2.8.0 (HKLM-x32\...\{C9A7E6A6-110D-4DBC-A8E2-F634613B5A8C}_is1) (Version:  - TCL Communication Technology Holdings Limited)
PdaNet+ for Android 4.12 (HKLM-x32\...\PdaNet_is1) (Version:  - June Fabrics Technology Inc)
Planescape Torment (HKLM-x32\...\Planescape Torment_is1) (Version:  - GOG.com)
Plantronics® GameCom 780 Software for Dolby® Headphone (HKLM-x32\...\{EB3C9064-9140-4279-9E51-965119402151}) (Version: 3.10.0001 - Plantronics)
PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
PlayReady PC Runtime x86 (HKLM-x32\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation)
Prison Architect (HKLM-x32\...\Prison Architect_is1) (Version:  - )
Quick OS Installer v5.0 (HKLM-x32\...\Quick OS Installer v5.0) (Version:  - )
QuickTime (HKLM-x32\...\{216AB108-2AE1-4130-B3D5-20B2C4C80F8F}) (Version: 7.60.92.0 - Apple Inc.)
RaidCall (HKLM-x32\...\RaidCall) (Version: 7.3.6-1.0.12972.94 - raidcall.com)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.34.1130.2010 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6265 - Realtek Semiconductor Corp.)
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.32.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.32.0 - Renesas Electronics Corporation) Hidden
Revit Structure 2012 (Version: 11.03.09231 - Autodesk) Hidden
Revit Structure 2012 Language Pack - English (Version: 11.03.09231 - Autodesk) Hidden
RIFT (HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\...\RIFT) (Version:  - Trion Worlds, Inc.)
Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.5.2.13021_10 - Samsung Electronics Co., Ltd.)
Samsung Kies (x32 Version: 2.5.2.13021_10 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.22.0 - SAMSUNG Electronics Co., Ltd.)
Scan (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version:  - Microsoft) Hidden
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)
Sid Meiers Civilization Beyond Earth (HKLM-x32\...\U2lkTWVpZXJzQ2l2aWxpemF0aW9uQmV5b25kRWFydGg=_is1) (Version: 1 - )
Sid Meier's Civilization: Beyond Earth Rising Tide Addon (HKLM\...\U2lkTWVpZXJzQ2l2aWxpemF0aW9uQmV5b25kRWFydGg=_is1) (Version: 1 - )
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.5.0.9082 - Microsoft Corporation)
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
SmartWebPrinting (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden
SolutionCenter (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden
Status (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
sXe Injected (HKLM-x32\...\sXe Injected) (Version: 15.2.4.0 - Alejandro Cortés)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.0.12.0 - Synaptics Incorporated)
System Requirements Lab (HKLM-x32\...\{0C976EC5-842F-4313-B2AB-EDDBCCD3A222}) (Version: 4.5.1.0 - Husdawg, LLC)
System Requirements Lab CYRI (HKLM-x32\...\{F3FCB08B-E752-444D-86A0-0634A4F3B23D}) (Version: 6.0.8.0 - Husdawg, LLC)
System Requirements Lab Detection (HKLM-x32\...\{A0745AAC-4BFA-4B6C-99FD-C8AEF54B5B78}) (Version: 6.1.6.0 - Husdawg, LLC)
TeamSpeak 3 Client (HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\...\TeamSpeak 3 Client) (Version: 3.0.17 - TeamSpeak Systems GmbH)
Terrafirma (HKLM-x32\...\{C462702B-BFDA-494F-9B2A-821470CAD19C}) (Version: 2.1.0.0 - Sean Kasun)
The KMPlayer (remove only) (HKLM-x32\...\The KMPlayer) (Version: 3.6.0.85 - KMP Media co., Ltd)
To the Moon (HKLM-x32\...\To the Moon) (Version: 1.0 - Freebird Games)
Toolbox (x32 Version: 130.0.648.000 - Hewlett-Packard) Hidden
Toshiba App Place (HKLM-x32\...\{ED3CBA78-488F-4E8C-B33F-8E3BF4DDB4D2}) (Version: 1.0.6.3 - Toshiba)
TOSHIBA Application Installer (HKLM-x32\...\{970472D0-F5F9-4158-A6E3-1AE49EFEF2D3}) (Version: 9.0.1.1 - TOSHIBA)
TOSHIBA Assist (HKLM-x32\...\{C2A276E3-154E-44DC-AAF1-FFDD7FD30E35}) (Version: 4.01.00 - TOSHIBA CORPORATION)
Toshiba Book Place (HKLM-x32\...\{A14962A7-2B7D-456E-BFCD-F54E3A88D41F}) (Version: 2.2.7530 - Nombre de su organización)
TOSHIBA Bulletin Board (HKLM-x32\...\InstallShield_{229C190B-7690-40B7-8680-42530179F3E9}) (Version: 2.0.10.64 - TOSHIBA Corporation)
TOSHIBA Disc Creator (HKLM\...\{5DA0E02F-970B-424B-BF41-513A5018E4C0}) (Version: 2.1.0.4 for x64 - TOSHIBA Corporation)
TOSHIBA eco Utility (HKLM-x32\...\InstallShield_{B3FF1CD9-B2F0-4D71-BB55-5F580401C48E}) (Version: 1.2.20.64 - TOSHIBA Corporation)
TOSHIBA Face Recognition (HKLM-x32\...\InstallShield_{F67FA545-D8E5-4209-86B1-AEE045D1003F}) (Version: 3.1.3.64 - TOSHIBA Corporation)
TOSHIBA Flash Cards Support Utility (HKLM-x32\...\InstallShield_{620BBA5E-F848-4D56-8BDA-584E44584C5E}) (Version: 1.63.1.3C - TOSHIBA CORPORATION)
TOSHIBA Hardware Setup (HKLM-x32\...\InstallShield_{5279374D-87FE-4879-9385-F17278EBB9D3}) (Version: 1.63.0.32C - TOSHIBA CORPORATION)
TOSHIBA HDD Protection (HKLM\...\{94A90C69-71C1-470A-88F5-AA47ECC96B40}) (Version: 2.2.0.8 - TOSHIBA Corporation)
TOSHIBA HDD/SSD Alert (HKLM-x32\...\InstallShield_{D4322448-B6AF-4316-B859-D8A0E84DCB38}) (Version: 3.1.64.6 - TOSHIBA Corporation)
Toshiba Laptop Checkup (HKLM-x32\...\NortonPCCheckup) (Version: 2.0.6.22 - Symantec Corporation)
TOSHIBA Media Controller (HKLM-x32\...\{C7A4F26F-F9B0-41B2-8659-99181108CDE3}) (Version: 1.0.85.4 - TOSHIBA CORPORATION)
TOSHIBA Media Controller Plug-in (HKLM-x32\...\{F26FDF57-483E-42C8-A9C9-EEE1EDB256E0}) (Version: 1.0.5.13 - TOSHIBA CORPORATION)
Toshiba Online Backup (HKLM-x32\...\{C57BCDE1-7CB9-467D-B3BA-7E119916CDC1}) (Version: 2.0.0.25 - Toshiba)
TOSHIBA PC Health Monitor (HKLM\...\{9DECD0F9-D3E8-48B0-A390-1CF09F54E3A4}) (Version: 1.7.3.64 - TOSHIBA Corporation)
TOSHIBA Quality Application (HKLM-x32\...\{E69992ED-A7F6-406C-9280-1C156417BC49}) (Version: 1.0.3 - TOSHIBA)
TOSHIBA Recovery Media Creator (HKLM\...\{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}) (Version: 2.1.0.5 for x64 - TOSHIBA Corporation)
TOSHIBA ReelTime (HKLM-x32\...\InstallShield_{24811C12-F4A9-4D0F-8494-A7B8FE46123C}) (Version: 1.7.16.64 - TOSHIBA Corporation)
TOSHIBA Service Station (HKLM-x32\...\{AC6569FA-6919-442A-8552-073BE69E247A}) (Version: 2.1.45 - TOSHIBA)
TOSHIBA Sleep Utility (HKLM-x32\...\{654F7484-88C5-46DC-AB32-C66BCB0E2102}) (Version: 1.4.1.6 - TOSHIBA Corporation)
TOSHIBA Supervisor Password (HKLM-x32\...\InstallShield_{51B4E156-14A5-4904-9AE4-B1AA2A0E46BE}) (Version: 1.63.51.2C - TOSHIBA CORPORATION)
TOSHIBA Value Added Package (HKLM-x32\...\InstallShield_{066CFFF8-12BF-4390-A673-75F95EFF188E}) (Version: 1.3.23.64 - TOSHIBA Corporation)
TOSHIBA VIDEO PLAYER (HKLM-x32\...\{6C5F3BDC-0A1B-4436-A696-5939629D5C31}) (Version: 4.00.5.07-A - TOSHIBA Corporation)
TOSHIBA Web Camera Application (HKLM-x32\...\InstallShield_{6F3C8901-EBD3-470D-87F8-AC210F6E5E02}) (Version: 1.1.5.7 - TOSHIBA Corporation)
ToshibaRegistration (HKLM-x32\...\{5AF550B4-BB67-4E7E-82F1-2C4300279050}) (Version: 1.0.4 - Toshiba)
TrayApp (x32 Version: 130.0.376.000 - Hewlett-Packard) Hidden
Utility Common Driver (x32 Version: 1.0.52.1C - TOSHIBA) Hidden
Vegas Pro 11.0 (HKLM-x32\...\{09771440-269F-11E1-89B1-F04DA23A5C58}) (Version: 11.0.510 - Sony)
Ventrilo Client (HKLM-x32\...\{789289CA-F73A-4A16-A331-54D498CE069F}) (Version: 3.0.8 - Flagship Industries, Inc.)
Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{6DA2B636-698A-3294-BF4A-B5E11B238CDD}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{8CCEA24C-51AE-3B71-9092-7D0C44DDA2DF}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{C3A57BB3-9AA6-3F6F-9395-6C062BDD5FC4}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{F6F09DD8-F39B-3A16-ADB9-C9E6B56903F9}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{04B34E21-5BEE-3D2B-8D3D-E3E80D253F64}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{14866AAD-1F23-39AC-A62B-7091ED1ADE64}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{4B90093A-5D9C-3956-8ABB-95848BE6EFAD}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{B42E259C-E4D4-37F1-A1B2-EB9C4FC5A04D}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
WebEx (HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\...\ActiveTouchMeetingClient) (Version:  - Cisco WebEx LLC)
WebReg (x32 Version: 130.0.132.017 - Hewlett-Packard) Hidden
WinCDEmu (HKLM-x32\...\WinCDEmu) (Version: 4.0 - Sysprogs)
Windows Driver Package - Google, Inc. (WinUSB) AndroidUsbDeviceClass  (12/06/2010 4.0.0000.00000) (HKLM\...\76F6B4A696B8C9A7ACFF01D4E1D6EF2D974C3E67) (Version: 12/06/2010 4.0.0000.00000 - Google, Inc.)
Windows Driver Package - MediaTek Inc. (usbser) Ports  (09/01/2011 2.0.1136.0) (HKLM\...\32DC281B7E359EA3D16ECC7D98609F6A592B981D) (Version: 09/01/2011 2.0.1136.0 - MediaTek Inc.)
Windows Driver Package - MediaTek Inc. Net  (07/14/2011 1.1129.00) (HKLM\...\8BC3CF920AF63C7AEF78B82D1C60D94704FB95CD) (Version: 07/14/2011 1.1129.00 - MediaTek Inc.)
Windows Driver Package - Microsoft (WUDFRd) WPD  (02/22/2006 5.2.5326.4762) (HKLM\...\B77DDB8A5697AAF5DA4E4859E53C301B877DD206) (Version: 02/22/2006 5.2.5326.4762 - Microsoft)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3502.0922 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
WinRAR 4.01 (64-bit) (HKLM\...\WinRAR archiver) (Version: 4.01.0 - win.rar GmbH)
 
==================== Custom CLSID (Whitelisted): ==========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
CustomCLSID: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000_Classes\CLSID\{083C82AE-568E-45dd-A92C-01422CA45760}\InprocServer32 -> C:\Program Files\Autodesk\Revit Structure 2012\Program\APIContext.dll => No File
CustomCLSID: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\jcvielma\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\jcvielma\AppData\Local\Google\Update\1.3.23.9\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000_Classes\CLSID\{6D7AE628-FF41-4CD3-91DD-34825BB1A251}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2012 - English\acad.exe /Automation => No File
CustomCLSID: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\jcvielma\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000_Classes\CLSID\{B77E471C-FBF3-4CB5-880F-D7528AD4B349}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2012 - English\acad.exe /Automation => No File
CustomCLSID: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000_Classes\CLSID\{C92FB640-AD4D-498A-9979-A51A2540C977}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2012 - English\acad.exe /Automation => No File
CustomCLSID: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\jcvielma\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000_Classes\CLSID\{D70E31AD-2614-49F2-B0FC-ACA781D81F3E}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2012 - English\acad.exe => No File
CustomCLSID: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2012 - English\acadficn.dll => No File
CustomCLSID: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\jcvielma\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll => No File
 
==================== Scheduled Tasks (Whitelisted) =============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
Task: {0547A3A3-549D-4875-A54E-0849694C3499} - System32\Tasks\Symantec\Norton Error Processor 18.7.2.3 => C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\SymErr.exe
Task: {080574B0-6EEC-48CE-9769-F5844BE34C2C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {0C003953-AD2A-47F2-83F7-06A7EAF9EAF5} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation)
Task: {101038CA-147C-43B8-8F59-10251FCFBE21} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => c:\Program Files\Microsoft Device Center\itype.exe [2012-06-26] (Microsoft Corporation)
Task: {115DDDB5-D492-46AD-B0B9-8B2136B81FB4} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation)
Task: {3E347D25-08CC-4277-A094-0CD4B2B1AE11} - System32\Tasks\Remediation\AntimalwareMigrationTask => C:\Program Files\Common Files\AV\Norton Internet Security\Upgrade.exe [2015-08-06] (Symantec Corporation)
Task: {40A11EDA-4EA5-4B00-A106-6DCE193C035D} - System32\Tasks\WINshell Event Logging => C:\Users\jcvielma\AppData\Local\Temp\Dscp1.exe <==== ATTENTION
Task: {428E1C1E-8271-40A4-A342-C365F24EFE8A} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1080308731-2573736826-3272458361-1000UA => C:\Users\jcvielma\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-19] (Dropbox, Inc.)
Task: {58F4E9C9-2D30-4498-96BA-1287C698EB4B} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
Task: {6BEB87FF-749D-4460-983E-505BE53DF5F9} - System32\Tasks\{ADD031BB-9EAD-4A0C-BB89-2D6E967BE691} => pcalua.exe -a C:\Users\jcvielma\Desktop\Autodesk_Robot_Structural_Analysis_Professional_2012_Multilingual_Win_32-64bit.exe -d C:\Users\jcvielma\Desktop
Task: {925186D3-6858-4CC1-8179-27D755C30D3E} - System32\Tasks\Symantec\Norton Error Analyzer 18.7.2.3 => C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\SymErr.exe
Task: {92FDED0C-35FC-4911-B804-E5324D3B6FCF} - System32\Tasks\WINshell Event Notification => C:\Users\jcvielma\AppData\Local\Temp\SBCint2.exe <==== ATTENTION
Task: {9CD74AEB-C398-4DB3-B485-082E90B6E5D1} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1080308731-2573736826-3272458361-1000Core => C:\Users\jcvielma\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-19] (Dropbox, Inc.)
Task: {B0397A3F-243A-4A2A-BD0A-A7B0714ADBD7} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {D20F1A08-0002-4147-803A-ADE9EFC249F2} - System32\Tasks\Microsoft_Hardware_Launch_devicecenter_exe => c:\Program Files\Microsoft Device Center\devicecenter.exe [2012-06-26] (Microsoft)
Task: {E2F573D4-C41E-4D64-82F8-E52D19F0ACFC} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-03-13] (Piriform Ltd)
Task: {F5832AD8-BE95-442C-84CF-128EC4AF452F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {F8B3D7EC-10CA-4DF6-8A4B-2B47450D5B25} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => c:\Program Files\Microsoft Device Center\ipoint.exe [2012-06-26] (Microsoft Corporation)
 
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
 
Task: C:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-1080308731-2573736826-3272458361-1000Core.job => C:\Users\jcvielma\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-1080308731-2573736826-3272458361-1000UA.job => C:\Users\jcvielma\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 
==================== Shortcuts =============================
 
(The entries could be listed to be restored or removed.)
 
ShortcutWithArgument: C:\Users\jcvielma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://nav.brotlab.net?uid={a488cd19a49d439997197f5077097076}&r=eg
ShortcutWithArgument: C:\Users\jcvielma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://nav.brotlab.net?uid={a488cd19a49d439997197f5077097076}&r=eg
ShortcutWithArgument: C:\Users\jcvielma\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://nav.brotlab.net?uid={a488cd19a49d439997197f5077097076}&r=eg
ShortcutWithArgument: C:\Users\jcvielma\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://nav.brotlab.net?uid={a488cd19a49d439997197f5077097076}&r=eg
ShortcutWithArgument: C:\Users\jcvielma\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://nav.brotlab.net?uid={a488cd19a49d439997197f5077097076}&r=eg
 
==================== Loaded Modules (Whitelisted) ==============
 
2015-11-17 18:21 - 2015-11-17 18:21 - 03387320 _____ () C:\ProgramData\System32\SafeGuard64.dll
2010-12-07 15:02 - 2010-12-07 15:02 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\Libeay32.dll
2011-10-26 12:42 - 2011-02-17 19:13 - 00136704 _____ () C:\windows\System32\zlhp2600.dll
2011-02-02 14:08 - 2011-02-02 14:08 - 00018656 _____ () C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2015-09-24 08:39 - 2015-12-10 10:56 - 00193456 _____ () C:\Program Files (x86)\SkypeUpdateEx\SkypeUpdateEx.exe
2015-11-05 04:51 - 2015-12-08 10:24 - 07142328 _____ () C:\Users\jcvielma\AppData\Roaming\XBox\XBLive.exe
2010-12-07 15:02 - 2010-12-07 15:02 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\LIBEAY32.dll
2011-01-27 10:41 - 2011-01-27 10:41 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2015-02-26 13:02 - 2013-04-22 10:46 - 01054320 _____ () C:\Program Files (x86)\PdaNet for Android\PdaNetPC.exe
2012-02-20 21:29 - 2012-02-20 21:29 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2012-02-20 21:28 - 2012-02-20 21:28 - 01242472 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2015-11-17 18:21 - 2015-11-17 18:21 - 02601400 _____ () C:\ProgramData\System32\SafeGuard32.dll
2015-12-10 10:01 - 2015-12-08 11:12 - 00126896 _____ () C:\Program Files (x86)\SkypeUpdateEx\SkypeUpdate.dll
2015-10-27 06:10 - 2015-11-30 10:08 - 00256440 _____ () C:\Users\jcvielma\AppData\Roaming\XBox\Xbox.Live.dll
2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2015-12-16 15:16 - 2015-12-10 23:24 - 01583432 _____ () C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.106\libglesv2.dll
2015-12-16 15:16 - 2015-12-10 23:24 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.106\libegl.dll
2015-12-24 17:17 - 2015-12-24 07:46 - 16792256 _____ () C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\PepperFlash\20.0.0.267\pepflashplayer.dll
 
==================== Alternate Data Streams (Whitelisted) =========
 
(If an entry is included in the fixlist, only the ADS will be removed.)
 
AlternateDataStreams: C:\Users\jcvielma\Desktop\semestre II:com.dropbox.attributes
 
==================== Safe Mode (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
 
==================== EXE Association (Whitelisted) ===============
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
 
 
==================== Internet Explorer trusted/restricted ===============
 
(If an entry is included in the fixlist, it will be removed from the registry.)
 
 
==================== Hosts content: ===============================
 
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 
2012-08-16 12:36 - 2012-08-16 12:36 - 00000852 ____A C:\windows\system32\Drivers\etc\hosts
 
127.0.0.1 activate.adobe.com
 
==================== Other Areas ============================
 
(Currently there is no automatic fix for this section.)
 
HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\jcvielma\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.0.1 - 208.67.222.222
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Windows Firewall is enabled.
 
==================== MSCONFIG/TASK MANAGER disabled items ==
 
(Currently there is no automatic fix for this section.)
 
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk => C:\windows\pss\HP Digital Imaging Monitor.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^jcvielma^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Quick OS Installer v5.0.lnk => C:\windows\pss\Quick OS Installer v5.0.lnk.Startup
MSCONFIG\startupreg: 00TCrdMain => %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe
MSCONFIG\startupreg: Acrobat Assistant 8.0 => "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe"
MSCONFIG\startupreg: Adobe Acrobat Speed Launcher => "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe"
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
MSCONFIG\startupreg: Akamai NetSession Interface => "C:\Users\jcvielma\AppData\Local\Akamai\netsession_win.exe"
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: BCSSync => "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Users\jcvielma\Desktop\New folder (2)\Daemon.Tools.v.4.41.Portable\Daemon Tools Portable\DTLite.exe" -autorun
MSCONFIG\startupreg: DAEMON Tools Pro Agent => "C:\Program Files (x86)\Portable\DAEMON Tools Pro Advanced v5.2.0.0348\DTAgent.exe" -autorun
MSCONFIG\startupreg: dcrunwvfev => wscript.exe //B "C:\Users\jcvielma\AppData\Local\Temp\dcrunwvfev..vbs"
MSCONFIG\startupreg: EPSON_UD_START => "C:\Program Files (x86)\EPSON Projector\EPSON USB Display V1.4\EMP_UD.exe" -UDCONNECT
MSCONFIG\startupreg: GamecomSound => C:\Program Files\Plantronics\GameCom780\GameCom780.exe
MSCONFIG\startupreg: Google Update => "C:\Users\jcvielma\AppData\Local\Google\Update\GoogleUpdate.exe" /c
MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
MSCONFIG\startupreg: HSON => %ProgramFiles%\TOSHIBA\TBS\HSON.exe
MSCONFIG\startupreg: HWSetup => C:\Program Files\TOSHIBA\Utilities\HWSetup.exe hwSetUP
MSCONFIG\startupreg: IntelliPoint => "c:\Program Files\Microsoft Device Center\ipoint.exe"
MSCONFIG\startupreg: IntelliType Pro => "c:\Program Files\Microsoft Device Center\itype.exe"
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: KeNotify => C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe
MSCONFIG\startupreg: KiesAirMessage => C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup
MSCONFIG\startupreg: KiesPreload => C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload
MSCONFIG\startupreg: KiesTrayAgent => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
MSCONFIG\startupreg: NortonOnlineBackupReminder => "C:\Program Files (x86)\Toshiba\Toshiba Online Backup\Activation\TOBuActivation.exe" UNATTENDED
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: RIMBBLaunchAgent.exe => C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe
MSCONFIG\startupreg: SmoothView => %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe
MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\Steam.exe" -silent
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: SVPWUTIL => C:\Program Files (x86)\TOSHIBA\Utilities\SVPWUTIL.exe SVPwUTIL
MSCONFIG\startupreg: SynTPEnh => %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
MSCONFIG\startupreg: Teco => "%ProgramFiles%\TOSHIBA\TECO\Teco.exe" /r
MSCONFIG\startupreg: ThpSrv => C:\windows\system32\thpsrv /logon
MSCONFIG\startupreg: ToshibaAppPlace => "C:\Program Files (x86)\Toshiba\Toshiba App Place\ToshibaAppPlace.exe"
MSCONFIG\startupreg: ToshibaServiceStation => "C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe" /hide:60
MSCONFIG\startupreg: TosNC => %ProgramFiles%\Toshiba\BulletinBoard\TosNcCore.exe
MSCONFIG\startupreg: TosReelTimeMonitor => %ProgramFiles%\TOSHIBA\ReelTime\TosReelTimeMonitor.exe
MSCONFIG\startupreg: TosSENotify => C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe
MSCONFIG\startupreg: TosWaitSrv => %ProgramFiles%\TOSHIBA\TPHM\TosWaitSrv.exe
MSCONFIG\startupreg: TPwrMain => %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE
MSCONFIG\startupreg: TSleepSrv => %ProgramFiles(x86)%\TOSHIBA\TOSHIBA Sleep Utility\TSleepSrv.exe
MSCONFIG\startupreg: TWebCamera => "C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe" autorun
 
==================== FirewallRules (Whitelisted) ===============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
FirewallRules: [{DB593A6B-FC72-4281-B398-C200D7322EF2}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{5627231E-46BE-44D7-96BD-18709AB9AE18}] => (Allow) LPort=2869
FirewallRules: [{167AA444-58BE-4A46-8505-DF480768A899}] => (Allow) LPort=1900
FirewallRules: [{344CD3B2-601F-460C-8812-12EF13E2C85E}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{0F30AB74-059B-429D-B225-6F2448A7BDE9}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
FirewallRules: [{9EB361BA-9203-404B-8620-13334F4CFC31}] => (Allow) C:\Program Files (x86)\Intel Corporation\Intel Wireless Display\WiDiApp.exe
FirewallRules: [TCP Query User{FF57190C-1164-42F9-B7B8-12C050E6F403}C:\users\jcvielma\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\jcvielma\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{E69C9610-7605-4E08-86EB-F413037E9A21}C:\users\jcvielma\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\jcvielma\appdata\local\akamai\netsession_win.exe
FirewallRules: [TCP Query User{8E527AE4-264F-4833-B2B6-E38234A1142B}C:\users\jcvielma\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\jcvielma\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{BE6457FA-105A-49E3-8F8A-51427962DA30}C:\users\jcvielma\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\jcvielma\appdata\local\akamai\netsession_win.exe
FirewallRules: [TCP Query User{3D9FE449-ED25-4A63-9BD6-A72D64E7D9A3}C:\program files (x86)\java\jre6\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre6\bin\javaw.exe
FirewallRules: [UDP Query User{0D080FCA-C1FB-4373-9AAA-860E8293772D}C:\program files (x86)\java\jre6\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre6\bin\javaw.exe
FirewallRules: [TCP Query User{F694C9F6-5CC5-470E-B069-B26275E71F31}C:\windows\syswow64\java.exe] => (Allow) C:\windows\syswow64\java.exe
FirewallRules: [UDP Query User{C2B7857B-9054-4479-844E-D6A4DBD6A338}C:\windows\syswow64\java.exe] => (Allow) C:\windows\syswow64\java.exe
FirewallRules: [{16D9E866-89DA-40A0-A350-359462331E1F}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
FirewallRules: [{60FA704F-F291-41E1-86F4-4FC4E88A2634}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{FB9ABB77-8A9B-4653-BC74-9217C6B6D373}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{E20C1253-DBF1-405D-9D10-D209E16CFE7E}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{DA16F645-B4F8-40BA-9499-67187EF5D7D1}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{084A5D4F-270A-4168-993B-8FFB2EEBF4C9}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
FirewallRules: [{ADF1A2B3-DF6B-4977-A258-35B5184BA98C}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
FirewallRules: [{40C07950-DEA9-41F1-ADA9-755F34C78083}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxm08.exe
FirewallRules: [{9FA214C4-C1E1-4FFE-B270-9F6E13493265}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposfx08.exe
FirewallRules: [{98DC209D-96CC-4257-B3E8-9FB0DF26357F}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposid01.exe
FirewallRules: [{82F91A3A-B9C7-4A43-81DC-F09C664EC422}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe
FirewallRules: [{2A0323C5-A636-4116-B9A6-88FA0E2CF8C5}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe
FirewallRules: [{E5D091E3-F27E-4FA8-974B-ECEFD1186CFA}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpzwiz01.exe
FirewallRules: [{8FEA7337-9A1A-41D0-81A3-A6605A805210}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpoews01.exe
FirewallRules: [{DC91113E-1CAB-4FD9-A8B0-C5DA0F6E50EF}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe
FirewallRules: [{F42D6EF0-E4AA-4172-A38C-B44141D78BD1}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxs08.exe
FirewallRules: [{FB88D54B-3756-4410-901C-99C7873FAE6A}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqfxt08.exe
FirewallRules: [{CD357F75-5921-4574-848D-02E12E26CBDD}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgtupl.exe
FirewallRules: [{BB610DD2-2A77-4EE5-8A14-B70BF8303B78}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
FirewallRules: [{B00575D6-4BDE-4B7C-9166-BE4A2D908773}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgm.exe
FirewallRules: [{8DC0652A-26CF-4B8C-A6A2-16AAA813C332}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgh.exe
FirewallRules: [{E6610926-6538-4A00-9756-CC3E583B0D64}] => (Allow) C:\Program Files (x86)\HP\hp software update\hpwucli.exe
FirewallRules: [{606A6972-4D2B-4E4C-AB9F-24CAA274744B}] => (Allow) C:\Program Files (x86)\HP\digital imaging\smart web printing\smartwebprintexe.exe
FirewallRules: [{DE71F21B-246C-4754-9F38-17A2CDB7EE83}] => (Allow) C:\Program Files (x86)\iTunes\iTunes.exe
FirewallRules: [TCP Query User{25C5A92E-FD54-4261-B9DB-C0ED4BCD3786}C:\windows\syswow64\javaw.exe] => (Block) C:\windows\syswow64\javaw.exe
FirewallRules: [UDP Query User{934D58B8-0335-4BEB-8686-1A821D621183}C:\windows\syswow64\javaw.exe] => (Block) C:\windows\syswow64\javaw.exe
FirewallRules: [TCP Query User{7E7BAA4E-FB8C-4427-AA9B-1D57BDE6FEC0}C:\users\jcvielma\downloads\utorrent.exe] => (Allow) C:\users\jcvielma\downloads\utorrent.exe
FirewallRules: [UDP Query User{94BEBFAA-3C3F-4965-A12E-B158556A57BA}C:\users\jcvielma\downloads\utorrent.exe] => (Allow) C:\users\jcvielma\downloads\utorrent.exe
FirewallRules: [{B5E70E8D-5AC8-4853-ADCB-89B8969CA96B}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{B723F0F4-C2DF-43D8-81E4-149E792B1E70}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [TCP Query User{75640885-259D-4F0F-A82B-FB8F6034F10D}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{FBD5385F-51A0-4451-B41E-E4580B18DAB2}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [TCP Query User{7B969689-C4F7-4808-8F69-E053BCD2FB9B}C:\users\jcvielma\downloads\utorrent.exe] => (Block) C:\users\jcvielma\downloads\utorrent.exe
FirewallRules: [UDP Query User{5B52D4D3-7382-4B94-A6B9-74CDB87F5708}C:\users\jcvielma\downloads\utorrent.exe] => (Block) C:\users\jcvielma\downloads\utorrent.exe
FirewallRules: [{3EDE4C83-2361-4EEF-A116-CFEB8DA754FB}] => (Allow) C:\Program Files (x86)\Ventrilo\Ventrilo.exe
FirewallRules: [{F856CBD8-6992-4AFA-99B3-2B71D09F63B5}] => (Allow) C:\Program Files (x86)\Ventrilo\Ventrilo.exe
FirewallRules: [{ADBB9D6F-9EA5-43A0-81E2-F174E13B135A}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{E41FC52E-65E4-487F-9A31-6955CCCBB3FB}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{F05A6DDC-52A7-416A-B167-20EE2B0CF3BE}] => (Allow) LPort=4481
FirewallRules: [{8E59ECB7-9F41-4F00-A0EB-864CF97522F8}] => (Allow) LPort=4481
FirewallRules: [{968B81C6-9C7A-4536-85F5-25E75BB9CDF3}] => (Allow) LPort=4482
FirewallRules: [{D6C03AD3-6DCA-4447-ACF9-492C1DC91433}] => (Allow) LPort=4482
FirewallRules: [{479C2D31-F057-45D7-BCF3-8EA3AB4361B6}] => (Allow) C:\Program Files (x86)\Research In Motion\BlackBerry Desktop\Rim.Desktop.exe
FirewallRules: [{C1D28DEB-1B38-497F-A086-8BF8948FCCB9}] => (Allow) C:\Program Files (x86)\Research In Motion\BlackBerry Desktop\Rim.Desktop.exe
FirewallRules: [TCP Query User{09C1D70F-4FD5-4B7E-9369-C9D0B7C27298}C:\program files (x86)\cuevana storm\cuevana storm.exe] => (Allow) C:\program files (x86)\cuevana storm\cuevana storm.exe
FirewallRules: [UDP Query User{19013303-3CD4-4326-952C-7324DB38B615}C:\program files (x86)\cuevana storm\cuevana storm.exe] => (Allow) C:\program files (x86)\cuevana storm\cuevana storm.exe
FirewallRules: [{4E4F124C-EF6F-4B03-B0DF-6341723B8D29}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{75DB97B9-3AAF-4E1B-AD93-0CF7816EB9DF}C:\program files (x86)\cuevana storm\cuevana storm.exe] => (Allow) C:\program files (x86)\cuevana storm\cuevana storm.exe
FirewallRules: [UDP Query User{AE02FEDE-5780-41F3-A725-60D7F533E49D}C:\program files (x86)\cuevana storm\cuevana storm.exe] => (Allow) C:\program files (x86)\cuevana storm\cuevana storm.exe
FirewallRules: [{30A053A2-1721-4D24-8598-29E0924E9B30}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{1146B9B3-CEFE-4937-80E9-5562DB262C9B}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{794739B6-0E50-4594-A884-31CE7023D500}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [TCP Query User{B1BBE1D3-8060-4B72-8DA1-4E179D04AF4D}C:\program files (x86)\libreoffice 4\program\soffice.bin] => (Allow) C:\program files (x86)\libreoffice 4\program\soffice.bin
FirewallRules: [UDP Query User{64574412-3EFA-4786-826D-D3029795F307}C:\program files (x86)\libreoffice 4\program\soffice.bin] => (Allow) C:\program files (x86)\libreoffice 4\program\soffice.bin
FirewallRules: [TCP Query User{57A91034-15E9-4784-9947-1D2DDA217015}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{76BDE749-1112-4C9C-BA07-5E22067BE756}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [{0E1E31CE-DF8D-481F-A219-48BC6D360913}] => (Allow) C:\Program Files (x86)\DolbyAxon\Axon.exe
FirewallRules: [{47A7DF5C-1E23-4618-B23D-372C43047CD8}] => (Allow) C:\Program Files (x86)\DolbyAxon\Axon.exe
FirewallRules: [TCP Query User{3769D4BF-ED3F-48CA-A43A-72C73F711213}C:\users\jcvielma\desktop\survivors\survivers_beta_3.exe] => (Allow) C:\users\jcvielma\desktop\survivors\survivers_beta_3.exe
FirewallRules: [UDP Query User{437458A5-153D-4E7F-A502-D7EAFAB7BD61}C:\users\jcvielma\desktop\survivors\survivers_beta_3.exe] => (Allow) C:\users\jcvielma\desktop\survivors\survivers_beta_3.exe
FirewallRules: [{AF3FA491-0764-4F13-AAD8-C092876F12A4}] => (Allow) C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{BEC2C7FA-0039-4704-A83D-20C9DE6E09A4}] => (Allow) C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{1C3183CB-D447-405A-9D40-D9367ABDD82B}] => (Allow) C:\Users\jcvielma\Downloads\uTorrent.exe
FirewallRules: [{C2AE1FF2-BD63-48F3-9B5A-D771D6992D76}] => (Allow) C:\Users\jcvielma\Downloads\uTorrent.exe
FirewallRules: [TCP Query User{9C31AD2E-9316-4C9D-BB22-975388B167F9}C:\users\jcvielma\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\jcvielma\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{107AD921-5417-4F9A-ABD6-15934F89B916}C:\users\jcvielma\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\jcvielma\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [{DBCAF668-4EBB-4065-83E3-C304C5F9601C}] => (Allow) C:\Users\jcvielma\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{B1AE468B-41C2-460B-93A6-F75EBC20BFA4}] => (Allow) C:\Users\jcvielma\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [TCP Query User{6DFE88E2-6124-4B36-B6DC-CE4E16B831EF}C:\program files (x86)\age of mythology extended edition\aomx.exe] => (Block) C:\program files (x86)\age of mythology extended edition\aomx.exe
FirewallRules: [UDP Query User{1D1B51CB-68F6-4B03-B8C8-20B01CBD211F}C:\program files (x86)\age of mythology extended edition\aomx.exe] => (Block) C:\program files (x86)\age of mythology extended edition\aomx.exe
FirewallRules: [TCP Query User{166BD864-56AD-4542-A80F-ABB5DBF1B857}C:\Program Files (x86)\MATLAB\R2008a\bin\win32\MATLAB.exe] => (Block) C:\Program Files (x86)\MATLAB\R2008a\bin\win32\MATLAB.exe
FirewallRules: [UDP Query User{8F2BF7ED-B87B-4EBA-92AD-04994379D91D}C:\Program Files (x86)\MATLAB\R2008a\bin\win32\MATLAB.exe] => (Block) C:\Program Files (x86)\MATLAB\R2008a\bin\win32\MATLAB.exe
FirewallRules: [TCP Query User{83C1A7EB-1F96-493B-B848-2A0B0E268AD6}C:\program files\terraria.v1.3.0.1\terraria.exe] => (Allow) C:\program files\terraria.v1.3.0.1\terraria.exe
FirewallRules: [UDP Query User{C5D70187-8E48-4AC5-B2A1-2E31733C121C}C:\program files\terraria.v1.3.0.1\terraria.exe] => (Allow) C:\program files\terraria.v1.3.0.1\terraria.exe
FirewallRules: [{90D4A6E6-7C50-4C14-A986-FE163A3637F1}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{E16B2FC2-A0A9-46BC-B444-C93D0BAA670B}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{D65791CC-1A73-4329-8E2D-3FF4DCB30F1B}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [{619E2111-DC43-49F5-A53E-D3D307BF7A0C}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [TCP Query User{FB719E1A-3018-42BE-8132-9186B85B88A6}C:\program files (x86)\microsoft visual studio\common\tools\vs-ent98\vanalyzr\varpc.exe] => (Allow) C:\program files (x86)\microsoft visual studio\common\tools\vs-ent98\vanalyzr\varpc.exe
FirewallRules: [UDP Query User{6B2BCBDD-FB11-41DE-B893-2A13147B2AB6}C:\program files (x86)\microsoft visual studio\common\tools\vs-ent98\vanalyzr\varpc.exe] => (Allow) C:\program files (x86)\microsoft visual studio\common\tools\vs-ent98\vanalyzr\varpc.exe
FirewallRules: [{9207F7CB-21F1-4D45-B98E-21D11EDE0DDA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic Duels\MagicDuels.exe
FirewallRules: [{F6496104-6BFE-46A3-9C18-E9D49DA29796}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic Duels\MagicDuels.exe
FirewallRules: [TCP Query User{A8EAB89A-080E-4A25-BB67-E36D75DA5149}C:\program files\java\jre1.8.0_25\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{2C5D4C97-FA25-4B52-B896-7B7B9E0E04EA}C:\program files\java\jre1.8.0_25\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_25\bin\javaw.exe
FirewallRules: [{562AEDF3-829D-4414-9313-913E7E80B5C5}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe
FirewallRules: [{29D40B23-5276-486D-901F-20EE01E317B8}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe
FirewallRules: [{CA3DD689-DF58-4ECB-9C04-AB24E703839E}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
FirewallRules: [{ED6ADEFE-FFC6-4196-9C60-62904F1754DF}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
FirewallRules: [{29F962B8-2315-4593-85A7-B2A5CB9DBF71}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe
FirewallRules: [{44496BFD-116D-4210-9C40-DF8A371F251C}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe
FirewallRules: [{63261FBA-F56E-40E7-BF31-CE921FBEB848}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
FirewallRules: [{B4AD1024-DB07-4E6A-A88C-1D3F4D2051AA}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
FirewallRules: [{F7926C01-FAC6-4A37-8EE5-C1D3B6699EE2}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
==================== Restore Points =========================
 
25-12-2015 15:25:21 Windows Update
27-12-2015 15:03:46 avast! antivirus system restore point
27-12-2015 15:54:48 avast! antivirus system restore point
27-12-2015 16:05:17 avast! antivirus system restore point
 
==================== Faulty Device Manager Devices =============
 
Name: regi
Description: regi
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: regi
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
 
 
==================== Event log errors: =========================
 
Application errors:
==================
Error: (12/28/2015 10:13:14 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Failed to create restore point (Process = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe" -Embedding; Description = Configured Microsoft Office Professional Plus 2010; Error = 0x8007043c).
 
Error: (12/28/2015 09:49:46 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: SkypeUpdateEx.exe, version: 0.0.0.0, time stamp: 0x5668e9c7
Faulting module name: SafeGuard32.dll_unloaded, version: 0.0.0.0, time stamp: 0x564afeca
Exception code: 0xc0000005
Fault offset: 0x6eb2e6a2
Faulting process id: 0x954
Faulting application start time: 0xSkypeUpdateEx.exe0
Faulting application path: SkypeUpdateEx.exe1
Faulting module path: SkypeUpdateEx.exe2
Report Id: SkypeUpdateEx.exe3
 
Error: (12/28/2015 12:57:00 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program IEXPLORE.EXE version 11.0.9600.18123 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
 
Process ID: 374
 
Start Time: 01d1413054bb2593
 
Termination Time: 9
 
Application Path: C:\Program Files\Internet Explorer\IEXPLORE.EXE
 
Report Id: 9c3ab200-ad23-11e5-8a4b-b870f44c5e26
 
Error: (12/28/2015 12:42:04 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: VipreRescueScanner.exe, version: 7.0.7.8, time stamp: 0x524a234f
Faulting module name: SafeGuard32.dll_unloaded, version: 0.0.0.0, time stamp: 0x564afeca
Exception code: 0xc0000005
Fault offset: 0x6e3ee6a2
Faulting process id: 0x418
Faulting application start time: 0xVipreRescueScanner.exe0
Faulting application path: VipreRescueScanner.exe1
Faulting module path: VipreRescueScanner.exe2
Report Id: VipreRescueScanner.exe3
 
Error: (12/27/2015 10:57:45 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80004005
 
Error: (12/27/2015 08:42:42 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: WerFault.exe, version: 6.1.7600.16385, time stamp: 0x4a5bc607
Faulting module name: SafeGuard64.dll_unloaded, version: 0.0.0.0, time stamp: 0x564afeb1
Exception code: 0xc0000005
Fault offset: 0x000007fef9322b2b
Faulting process id: 0x17bc
Faulting application start time: 0xWerFault.exe0
Faulting application path: WerFault.exe1
Faulting module path: WerFault.exe2
Report Id: WerFault.exe3
 
Error: (12/27/2015 08:41:18 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: taskhost.exe, version: 6.1.7601.18010, time stamp: 0x50aee9f3
Faulting module name: SafeGuard64.dll_unloaded, version: 0.0.0.0, time stamp: 0x564afeb1
Exception code: 0xc0000005
Fault offset: 0x000007fef9322b2b
Faulting process id: 0x14f4
Faulting application start time: 0xtaskhost.exe0
Faulting application path: taskhost.exe1
Faulting module path: taskhost.exe2
Report Id: taskhost.exe3
 
Error: (12/27/2015 07:02:23 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program Explorer.EXE version 6.1.7601.17567 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
 
Process ID: 664
 
Start Time: 01d140f55e13700c
 
Termination Time: 521
 
Application Path: C:\windows\Explorer.EXE
 
Report Id: 0f8c861d-acf2-11e5-8a4b-b870f44c5e26
 
Error: (12/27/2015 07:00:41 PM) (Source: Windows Backup) (EventID: 4103) (User: )
Description: The backup did not complete because of an error writing to the backup location D:\. The error is: The backup location cannot be found or is not valid. Review your backup settings and check the backup location. (0x81000006).
 
Error: (12/27/2015 06:38:35 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: sdiagnhost.exe, version: 6.1.7600.16385, time stamp: 0x4a5bc3d4
Faulting module name: SafeGuard64.dll_unloaded, version: 0.0.0.0, time stamp: 0x564afeb1
Exception code: 0xc0000005
Fault offset: 0x000007fef9322b2b
Faulting process id: 0x55c
Faulting application start time: 0xsdiagnhost.exe0
Faulting application path: sdiagnhost.exe1
Faulting module path: sdiagnhost.exe2
Report Id: sdiagnhost.exe3
 
 
System errors:
=============
Error: (12/28/2015 11:14:28 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The regi service failed to start due to the following error: 
%%2
 
Error: (12/28/2015 11:14:26 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Common Client Job Manager Service service failed to start due to the following error: 
%%2
 
Error: (12/28/2015 10:40:13 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: 
%%1068
 
Error: (12/28/2015 10:39:55 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: 
%%1068
 
Error: (12/28/2015 10:39:55 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: 
%%1068
 
Error: (12/28/2015 10:39:55 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: 
%%1068
 
Error: (12/28/2015 10:39:55 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: 
%%1068
 
Error: (12/28/2015 10:39:55 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: 
%%1068
 
Error: (12/28/2015 10:39:55 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: 
%%1068
 
Error: (12/28/2015 10:39:54 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: 
%%1068
 
 
CodeIntegrity:
===================================
  Date: 2015-09-26 14:14:01.212
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\cryptnet.dll because the set of per-page image hashes could not be found on the system.
 
  Date: 2015-09-26 14:14:01.012
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\cryptnet.dll because the set of per-page image hashes could not be found on the system.
 
  Date: 2015-09-26 14:14:00.731
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\certsentry.dll because the set of per-page image hashes could not be found on the system.
 
  Date: 2015-09-26 14:14:00.468
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\gpapi.dll because the set of per-page image hashes could not be found on the system.
 
  Date: 2015-09-26 14:14:00.208
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\gpapi.dll because the set of per-page image hashes could not be found on the system.
 
  Date: 2015-01-16 18:23:28.972
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\cryptnet.dll because the set of per-page image hashes could not be found on the system.
 
  Date: 2015-01-16 18:23:28.812
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\cryptnet.dll because the set of per-page image hashes could not be found on the system.
 
  Date: 2015-01-16 18:23:28.657
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\certsentry.dll because the set of per-page image hashes could not be found on the system.
 
  Date: 2015-01-16 18:23:28.463
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\gpapi.dll because the set of per-page image hashes could not be found on the system.
 
  Date: 2015-01-16 18:23:28.230
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\gpapi.dll because the set of per-page image hashes could not be found on the system.
 
 
==================== Memory info =========================== 
 
Processor: Intel® Core™ i3-2310M CPU @ 2.10GHz
Percentage of memory in use: 58%
Total physical RAM: 4002.69 MB
Available physical RAM: 1658.62 MB
Total Virtual: 8003.59 MB
Available Virtual: 5489.2 MB
 
==================== Drives ================================
 
Drive c: (TI106051W0J) (Fixed) (Total:451.3 GB) (Free:237.85 GB) NTFS ==>[system with boot components (obtained from drive)]
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 465.8 GB) (Disk ID: D82D6D2D)
Partition 1: (Active) - (Size=1.5 GB) - (Type=27)
Partition 2: (Not Active) - (Size=451.3 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=13 GB) - (Type=17)
 
==================== End of Addition.txt ============================
 
thanks for your time
 

  • 0

Advertisements


#2
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
After this run could you try an AV web site and let me know the result

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:
 

CreateRestorePoint:
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
ShellIconOverlayIdentifiers: [ExplorerEx] -> {E056AFDD-03E9-4D73-8D33-8FCCBCA73438} => No File
ShellIconOverlayIdentifiers: [GDriveSharedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => No File
ShellIconOverlayIdentifiers: [SugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll No File
ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll No File
ShellIconOverlayIdentifiers: [SugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll No File
ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll No File
Winsock: Catalog5 10 C:\ProgramData\System32\SafeGuard32.dll No File
Winsock: Catalog5-x64 10 C:\ProgramData\System32\SafeGuard64.dll [3387320 2015-11-17] ()
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://nav.brotlab.net?uid={a488cd19a49d439997197f5077097076}&r=eg
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://nav.brotlab.net?uid={a488cd19a49d439997197f5077097076}&r=eg
HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://nav.brotlab.net?uid={a488cd19a49d439997197f5077097076}&r=eg
HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://nav.brotlab.net?uid={a488cd19a49d439997197f5077097076}&r=eg
HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\Software\Microsoft\Internet Explorer\Main,Window Title = Visita www.landerextremo.s5.com
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll No File
Toolbar: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
CHR Extension: (Windows Media Player Extension for HTML5) - C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Default\Extensions\hokdglbhghcebcopdbanieangmcamaak [2012-11-09] [UpdateUrl: hxxp://www.interoperabilitybridges.com/ChromeWMP/wmpChromeupdates.xml] <==== ATTENTION
R2 SkypeUpdateEx; C:\Program Files (x86)\SkypeUpdateEx\SkypeUpdateEx.exe [193456 2015-12-10] ()
R2 XBox; C:\Users\jcvielma\AppData\Roaming\XBox\XBLive.exe [7142328 2015-12-08] ()
S2 PCCUJobMgr; "C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.6.22\ccSvcHst.exe" /s "PCCUJobMgr" /m "C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.6.22\diMaster.dll" /prefetch:1
2015-11-30 23:31 - 2015-11-30 23:31 - 00015464 _____ C:\windows\DelYac64.sys
2015-12-28 11:14 - 2015-09-24 09:56 - 00000000 ____D C:\Program Files (x86)\SkypeUpdateEx
Task: {3E347D25-08CC-4277-A094-0CD4B2B1AE11} - System32\Tasks\Remediation\AntimalwareMigrationTask => C:\Program Files\Common Files\AV\Norton Internet Security\Upgrade.exe [2015-08-06] (Symantec Corporation)
Task: {40A11EDA-4EA5-4B00-A106-6DCE193C035D} - System32\Tasks\WINshell Event Logging => C:\Users\jcvielma\AppData\Local\Temp\Dscp1.exe <==== ATTENTION
Task: {925186D3-6858-4CC1-8179-27D755C30D3E} - System32\Tasks\Symantec\Norton Error Analyzer 18.7.2.3 => C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\SymErr.exe
Task: {92FDED0C-35FC-4911-B804-E5324D3B6FCF} - System32\Tasks\WINshell Event Notification => C:\Users\jcvielma\AppData\Local\Temp\SBCint2.exe <==== ATTENTION
ShortcutWithArgument: C:\Users\jcvielma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://nav.brotlab.net?uid={a488cd19a49d439997197f5077097076}&r=eg
ShortcutWithArgument: C:\Users\jcvielma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://nav.brotlab.net?uid={a488cd19a49d439997197f5077097076}&r=eg
ShortcutWithArgument: C:\Users\jcvielma\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://nav.brotlab.net?uid={a488cd19a49d439997197f5077097076}&r=eg
ShortcutWithArgument: C:\Users\jcvielma\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://nav.brotlab.net?uid={a488cd19a49d439997197f5077097076}&r=eg
ShortcutWithArgument: C:\Users\jcvielma\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://nav.brotlab.net?uid={a488cd19a49d439997197f5077097076}&r=eg
C:\Users\jcvielma\AppData\Roaming\XBox
Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
RemoveProxy:
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: ipconfig /flushdns
CMD: netsh winsock reset catalog
CMD: netsh int ip reset c:\resetlog.txt
CMD: ipconfig /release
CMD: ipconfig /renew
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
EmptyTemp:
CMD: bitsadmin /reset /allusers


Save this as fixlist.txt, in the same location as FRST.exe
FRSTfix.JPG
Run FRST and press Fix
On completion a log will be generated please post that
  • 0

#3
mavol6

mavol6

    New Member

  • Topic Starter
  • Member
  • Pip
  • 4 posts

now i can enter the websites and use malwarebytes normally, is there any other step i have to follow?.

 

here is the log

 

Fix result of Farbar Recovery Scan Tool (x64) Version:28-12-2015
Ran by jcvielma (2015-12-28 14:04:56) Run:1
Running from C:\Users\jcvielma\Desktop
Loaded Profiles: jcvielma (Available Profiles: jcvielma)
Boot Mode: Normal
==============================================
 
fixlist content:
*****************
CreateRestorePoint:
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
ShellIconOverlayIdentifiers: [ExplorerEx] -> {E056AFDD-03E9-4D73-8D33-8FCCBCA73438} => No File
ShellIconOverlayIdentifiers: [GDriveSharedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => No File
ShellIconOverlayIdentifiers: [SugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll No File
ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll No File
ShellIconOverlayIdentifiers: [SugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll No File
ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll No File
Winsock: Catalog5 10 C:\ProgramData\System32\SafeGuard32.dll No File
Winsock: Catalog5-x64 10 C:\ProgramData\System32\SafeGuard64.dll [3387320 2015-11-17] ()
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://nav.brotlab.net?uid={a488cd19a49d439997197f5077097076}&r=eg
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://nav.brotlab.net?uid={a488cd19a49d439997197f5077097076}&r=eg
HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://nav.brotlab.net?uid={a488cd19a49d439997197f5077097076}&r=eg
HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://nav.brotlab.net?uid={a488cd19a49d439997197f5077097076}&r=eg
HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\Software\Microsoft\Internet Explorer\Main,Window Title = Visita www.landerextremo.s5.com
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll No File
Toolbar: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
CHR Extension: (Windows Media Player Extension for HTML5) - C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Default\Extensions\hokdglbhghcebcopdbanieangmcamaak [2012-11-09] [UpdateUrl: hxxp://www.interoperabilitybridges.com/ChromeWMP/wmpChromeupdates.xml] <==== ATTENTION
R2 SkypeUpdateEx; C:\Program Files (x86)\SkypeUpdateEx\SkypeUpdateEx.exe [193456 2015-12-10] ()
R2 XBox; C:\Users\jcvielma\AppData\Roaming\XBox\XBLive.exe [7142328 2015-12-08] ()
S2 PCCUJobMgr; "C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.6.22\ccSvcHst.exe" /s "PCCUJobMgr" /m "C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.6.22\diMaster.dll" /prefetch:1
2015-11-30 23:31 - 2015-11-30 23:31 - 00015464 _____ C:\windows\DelYac64.sys
2015-12-28 11:14 - 2015-09-24 09:56 - 00000000 ____D C:\Program Files (x86)\SkypeUpdateEx
Task: {3E347D25-08CC-4277-A094-0CD4B2B1AE11} - System32\Tasks\Remediation\AntimalwareMigrationTask => C:\Program Files\Common Files\AV\Norton Internet Security\Upgrade.exe [2015-08-06] (Symantec Corporation)
Task: {40A11EDA-4EA5-4B00-A106-6DCE193C035D} - System32\Tasks\WINshell Event Logging => C:\Users\jcvielma\AppData\Local\Temp\Dscp1.exe <==== ATTENTION
Task: {925186D3-6858-4CC1-8179-27D755C30D3E} - System32\Tasks\Symantec\Norton Error Analyzer 18.7.2.3 => C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\SymErr.exe
Task: {92FDED0C-35FC-4911-B804-E5324D3B6FCF} - System32\Tasks\WINshell Event Notification => C:\Users\jcvielma\AppData\Local\Temp\SBCint2.exe <==== ATTENTION
ShortcutWithArgument: C:\Users\jcvielma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://nav.brotlab.net?uid={a488cd19a49d439997197f5077097076}&r=eg
ShortcutWithArgument: C:\Users\jcvielma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://nav.brotlab.net?uid={a488cd19a49d439997197f5077097076}&r=eg
ShortcutWithArgument: C:\Users\jcvielma\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://nav.brotlab.net?uid={a488cd19a49d439997197f5077097076}&r=eg
ShortcutWithArgument: C:\Users\jcvielma\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://nav.brotlab.net?uid={a488cd19a49d439997197f5077097076}&r=eg
ShortcutWithArgument: C:\Users\jcvielma\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://nav.brotlab.net?uid={a488cd19a49d439997197f5077097076}&r=eg
C:\Users\jcvielma\AppData\Roaming\XBox
Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
RemoveProxy:
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: ipconfig /flushdns
CMD: netsh winsock reset catalog
CMD: netsh int ip reset c:\resetlog.txt
CMD: ipconfig /release
CMD: ipconfig /renew
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
EmptyTemp:
CMD: bitsadmin /reset /allusers
*****************
 
Restore point was successfully created.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00avast" => key removed successfully
HKCR\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => key not found. 
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ExplorerEx" => key removed successfully
HKCR\CLSID\{E056AFDD-03E9-4D73-8D33-8FCCBCA73438} => key not found. 
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\GDriveSharedOverlay" => key removed successfully
HKCR\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => key not found. 
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\SugarSyncBackedUp" => key removed successfully
"HKCR\CLSID\{0C4A258A-3F3B-4FFF-80A7-9B3BEC139472}" => key removed successfully
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\SugarSyncPending" => key removed successfully
"HKCR\CLSID\{62CCD8E3-9C21-41E1-B55E-1E26DFC68511}" => key removed successfully
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\SugarSyncRoot" => key removed successfully
"HKCR\CLSID\{A759AFF6-5851-457D-A540-F4ECED148351}" => key removed successfully
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\SugarSyncShared" => key removed successfully
"HKCR\CLSID\{1574C9EF-7D58-488F-B358-8B78C1538F51}" => key removed successfully
"HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000010" => key removed successfully
"HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000010" => key removed successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully
HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\Software\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully
HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully
HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\Software\Microsoft\Internet Explorer\Main\\Window Title => value removed successfully
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} => value removed successfully
"HKCR\CLSID\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}" => key removed successfully
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => value removed successfully
HKCR\CLSID\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => key not found. 
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{47833539-D0C5-4125-9FA8-0819E2EAAC93} => value removed successfully
"HKCR\Wow6432Node\CLSID\{47833539-D0C5-4125-9FA8-0819E2EAAC93}" => key removed successfully
HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => value removed successfully
HKCR\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => key not found. 
C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Default\Extensions\hokdglbhghcebcopdbanieangmcamaak <==== ATTENTION => not found
SkypeUpdateEx => Service stopped successfully.
SkypeUpdateEx => service removed successfully
XBox => Service stopped successfully.
XBox => service removed successfully
PCCUJobMgr => service removed successfully
C:\windows\DelYac64.sys => moved successfully
C:\Program Files (x86)\SkypeUpdateEx => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{3E347D25-08CC-4277-A094-0CD4B2B1AE11}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3E347D25-08CC-4277-A094-0CD4B2B1AE11}" => key removed successfully
C:\windows\System32\Tasks\Remediation\AntimalwareMigrationTask => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Remediation\AntimalwareMigrationTask" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{40A11EDA-4EA5-4B00-A106-6DCE193C035D}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{40A11EDA-4EA5-4B00-A106-6DCE193C035D}" => key removed successfully
C:\windows\System32\Tasks\WINshell Event Logging => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WINshell Event Logging" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{925186D3-6858-4CC1-8179-27D755C30D3E}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{925186D3-6858-4CC1-8179-27D755C30D3E}" => key removed successfully
C:\windows\System32\Tasks\Symantec\Norton Error Analyzer 18.7.2.3 => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Symantec\Norton Error Analyzer 18.7.2.3" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{92FDED0C-35FC-4911-B804-E5324D3B6FCF}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{92FDED0C-35FC-4911-B804-E5324D3B6FCF}" => key removed successfully
C:\windows\System32\Tasks\WINshell Event Notification => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WINshell Event Notification" => key removed successfully
C:\Users\jcvielma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk => Shortcut argument removed successfully.
C:\Users\jcvielma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk => Shortcut argument restored successfully
C:\Users\jcvielma\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk => Shortcut argument removed successfully.
C:\Users\jcvielma\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk => Shortcut argument removed successfully.
C:\Users\jcvielma\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\Google Chrome.lnk => Shortcut argument removed successfully.
C:\Users\jcvielma\AppData\Roaming\XBox => moved successfully
 
========= reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f =========
 
The operation completed successfully.
 
 
 
========= End of Reg: =========
 
 
========= reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f =========
 
The operation completed successfully.
 
 
 
========= End of Reg: =========
 
 
========= RemoveProxy: =========
 
HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value removed successfully
HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value removed successfully
HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value removed successfully
HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value removed successfully
 
 
========= End of RemoveProxy: =========
 
 
=========  netsh advfirewall reset =========
 
Initialization Function InitHelperDll in NSHHTTP.DLL failed to start with error code 11003
Ok.
 
 
========= End of CMD: =========
 
 
=========  netsh advfirewall set allprofiles state ON =========
 
Initialization Function InitHelperDll in NSHHTTP.DLL failed to start with error code 11003
Ok.
 
 
========= End of CMD: =========
 
 
=========  ipconfig /flushdns =========
 
 
Windows IP Configuration
 
Successfully flushed the DNS Resolver Cache.
 
========= End of CMD: =========
 
 
=========  netsh winsock reset catalog =========
 
Initialization Function InitHelperDll in NSHHTTP.DLL failed to start with error code 11003
 
Sucessfully reset the Winsock Catalog.
You must restart the computer in order to complete the reset.
 
 
========= End of CMD: =========
 
 
=========  netsh int ip reset c:\resetlog.txt =========
 
Initialization Function InitHelperDll in NSHHTTP.DLL failed to start with error code 11003
Reseting Global, OK!
Reseting Interface, OK!
Reseting Unicast Address, OK!
Reseting Route, OK!
Restart the computer to complete this action.
 
 
========= End of CMD: =========
 
 
=========  ipconfig /release =========
 
 
Windows IP Configuration
 
No operation can be performed on Local Area Connection 3 while it has its media disconnected.
No operation can be performed on Wireless Network Connection 3 while it has its media disconnected.
No operation can be performed on Wireless Network Connection 2 while it has its media disconnected.
 
Ethernet adapter Local Area Connection 3:
 
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : 
 
Wireless LAN adapter Wireless Network Connection 3:
 
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : 
 
Wireless LAN adapter Wireless Network Connection 2:
 
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : 
 
Ethernet adapter Local Area Connection:
 
   Connection-specific DNS Suffix  . : 
   Link-local IPv6 Address . . . . . : fe80::840:dd08:a094:fafa%11
   Default Gateway . . . . . . . . . : 
 
Wireless LAN adapter Wireless Network Connection:
 
   Connection-specific DNS Suffix  . : 
   Link-local IPv6 Address . . . . . : fe80::b868:6342:c05a:b47c%10
   Default Gateway . . . . . . . . . : 
 
Ethernet adapter Hamachi:
 
   Connection-specific DNS Suffix  . : 
   IPv6 Address. . . . . . . . . . . : 2620:9b::19bb:4a3c
   Link-local IPv6 Address . . . . . : fe80::7c83:effd:ccc7:a84f%157
   Default Gateway . . . . . . . . . : 2620:9b::1900:1
                                       25.0.0.1
 
Tunnel adapter isatap.{5FE78F2C-C7F8-493F-A3B7-61E1A06244D9}:
 
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : 
 
Tunnel adapter Reusable ISATAP Interface {606E1B1C-16CF-4099-ABD9-1194E372DF7B}:
 
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : 
 
Tunnel adapter isatap.{D3E7F3A2-905B-468D-A652-10412DE6A0D6}:
 
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : 
 
Tunnel adapter isatap.{2F8D8665-ADBB-444B-A771-4026908B577D}:
 
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : 
 
Tunnel adapter isatap.{7AA7BC47-E692-4EA9-8A62-B108E1BB8086}:
 
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : 
 
Tunnel adapter isatap.{6C8D580F-65F3-4979-935C-7FA89842EB49}:
 
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : 
 
Tunnel adapter Local Area Connection* 154:
 
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : 
 
========= End of CMD: =========
 
 
=========  ipconfig /renew =========
 
 
Windows IP Configuration
 
No operation can be performed on Local Area Connection 3 while it has its media disconnected.
No operation can be performed on Wireless Network Connection 3 while it has its media disconnected.
No operation can be performed on Wireless Network Connection 2 while it has its media disconnected.
 
Ethernet adapter Local Area Connection 3:
 
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : 
 
Wireless LAN adapter Wireless Network Connection 3:
 
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : 
 
Wireless LAN adapter Wireless Network Connection 2:
 
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : 
 
Ethernet adapter Local Area Connection:
 
   Connection-specific DNS Suffix  . : 
   Link-local IPv6 Address . . . . . : fe80::840:dd08:a094:fafa%11
   IPv4 Address. . . . . . . . . . . : 192.168.0.101
   Subnet Mask . . . . . . . . . . . : 0.0.0.0
   Default Gateway . . . . . . . . . : 192.168.0.1
 
Wireless LAN adapter Wireless Network Connection:
 
   Connection-specific DNS Suffix  . : 
   Link-local IPv6 Address . . . . . : fe80::b868:6342:c05a:b47c%10
   IPv4 Address. . . . . . . . . . . : 192.168.0.105
   Subnet Mask . . . . . . . . . . . : 0.0.0.0
   Default Gateway . . . . . . . . . : 192.168.0.1
 
Ethernet adapter Hamachi:
 
   Connection-specific DNS Suffix  . : 
   IPv6 Address. . . . . . . . . . . : 2620:9b::19bb:4a3c
   Link-local IPv6 Address . . . . . : fe80::7c83:effd:ccc7:a84f%157
   IPv4 Address. . . . . . . . . . . : 25.187.74.60
   Subnet Mask . . . . . . . . . . . : 0.0.0.0
   Default Gateway . . . . . . . . . : 2620:9b::1900:1
                                       25.0.0.1
 
Tunnel adapter isatap.{5FE78F2C-C7F8-493F-A3B7-61E1A06244D9}:
 
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : 
 
Tunnel adapter Reusable ISATAP Interface {606E1B1C-16CF-4099-ABD9-1194E372DF7B}:
 
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : 
 
Tunnel adapter isatap.{D3E7F3A2-905B-468D-A652-10412DE6A0D6}:
 
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : 
 
Tunnel adapter isatap.{2F8D8665-ADBB-444B-A771-4026908B577D}:
 
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : 
 
Tunnel adapter isatap.{6C8D580F-65F3-4979-935C-7FA89842EB49}:
 
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : 
 
Tunnel adapter Local Area Connection* 154:
 
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : 
 
========= End of CMD: =========
 
 
=========  netsh int ipv4 reset =========
 
Initialization Function InitHelperDll in NSHHTTP.DLL failed to start with error code 11003
Reseting Interface, OK!
Restart the computer to complete this action.
 
 
========= End of CMD: =========
 
 
=========  netsh int ipv6 reset =========
 
Initialization Function InitHelperDll in NSHHTTP.DLL failed to start with error code 11003
Reseting Interface, OK!
Reseting Unicast Address, OK!
Reseting Route, OK!
Restart the computer to complete this action.
 
 
========= End of CMD: =========
 
 
=========  bitsadmin /reset /allusers =========
 
 
BITSADMIN version 3.0 [ 7.5.7601 ]
BITS administration utility.
© Copyright 2000-2006 Microsoft Corp.
 
BITSAdmin is deprecated and is not guaranteed to be available in future versions of Windows.
Administrative tools for the BITS service are now provided by BITS PowerShell cmdlets.
 
Unable to cancel {0022A671-C0CA-43B2-A8D5-20210642B612}.
Unable to cancel {E1C8D5F7-D52F-413B-A540-D54160CD3090}.
Unable to cancel {BF4CFADA-685A-48D4-ADA9-384B3AABF3CA}.
Unable to cancel {F82F2B6F-25DA-410B-9C67-CC0812385128}.
Unable to cancel {19FD5ACE-92FD-4ABD-9BC4-6EF8556D03BD}.
Unable to cancel {9AF877AF-F0B7-4087-9B26-83464848CF1E}.
Unable to cancel {13197F3F-5A9F-46B0-B6C8-01E0D05EA071}.
0 out of 7 jobs canceled.
 
========= End of CMD: =========
 
EmptyTemp: => 285.6 MB temporary data Removed.
 
 
The system needed a reboot.
 
==== End of Fixlog 14:06:12 ====

  • 0

#4
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Aye if you run this small programme and let me know how MBAM is behaving


Please download AdwCleaner by Xplode onto your desktop.
  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click on Scan.
  • After the scan is complete click on "Clean"
  • Confirm each time with Ok.
  • Your computer will be rebooted automatically. A text file will open after the restart.
  • Please post the content of that logfile with your next answer.
  • You can find the logfile at C:\AdwCleaner[Cx].txt as well.

  • 0

#5
mavol6

mavol6

    New Member

  • Topic Starter
  • Member
  • Pip
  • 4 posts

i ran that program yesterday before making this thread, i ran it now and it scanned nothing.

 

here is the log from yesterday.

 

# AdwCleaner v5.026 - Logfile created 27/12/2015 at 17:32:59
# Updated 21/12/2015 by Xplode
# Database : 2015-12-23.1 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (x64)
# Username : jcvielma - JCVIELMA-LAPTOP
# Running from : C:\Users\jcvielma\Desktop\AdwCleaner.exe
# Option : Cleaning
 
***** [ Services ] *****
 
 
***** [ Folders ] *****
 
[-] Folder Deleted : C:\Program Files (x86)\Yahoo!\Companion
[-] Folder Deleted : C:\Program Files (x86)\myfree codec
[-] Folder Deleted : C:\ProgramData\Yahoo! Companion
[-] Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\myfree codec
[-] Folder Deleted : C:\Users\jcvielma\AppData\Local\FileViewPro
[-] Folder Deleted : C:\Users\jcvielma\AppData\Local\Innovative Solutions
[-] Folder Deleted : C:\Users\jcvielma\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cmaiofennmphjldldcpphcechfnnohja
[-] Folder Deleted : C:\Users\jcvielma\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\aaaalipaokhkccgmgkdglfinfnfhflko
[-] Folder Deleted : C:\Users\jcvielma\AppData\Roaming\pccustubinstaller
[-] Folder Deleted : C:\Users\jcvielma\AppData\Roaming\ntsvc
[-] Folder Deleted : C:\Users\jcvielma\AppData\Roaming\Yahoo!\Companion
[-] Folder Deleted : C:\windows\SysWOW64\config\systemprofile\AppData\Roaming\ntsvc
 
***** [ Files ] *****
 
[-] File Deleted : C:\Users\jcvielma\AppData\Local\Comodo\Dragon\User Data\Default\Local Storage\chrome-extension_cmaiofennmphjldldcpphcechfnnohja_0.localstorage
[-] File Deleted : C:\Users\jcvielma\AppData\Local\Comodo\Dragon\User Data\Default\Local Storage\chrome-extension_aaaalipaokhkccgmgkdglfinfnfhflko_0.localstorage
 
***** [ DLLs ] *****
 
 
***** [ Shortcuts ] *****
 
 
***** [ Scheduled tasks ] *****
 
 
***** [ Registry ] *****
 
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
[-] Key Deleted : HKLM\SOFTWARE\Classes\escort.escortIEPane
[-] Key Deleted : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\escort.escrtBtn.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\esrv.escrtSrvc
[-] Key Deleted : HKLM\SOFTWARE\Classes\esrv.escrtSrvc.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\facemoodsApp.appCore
[-] Key Deleted : HKLM\SOFTWARE\Classes\facemoodsApp.appCore.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
[-] Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\YMERemote.DLL
[-] Key Deleted : HKLM\SOFTWARE\Classes\YBrowserToolbar.YBrowserToolbar.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\YBrowserToolbar.YBrowserToolbar
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{5B1881D1-D9C7-46DF-B041-1E593282C7D0}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{AD25754E-D76C-42B3-A335-2F81478B722F}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A5B99E41-E157-4209-8AAC-DB003A816079}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AD20D01C-C939-4DD2-8C55-56935A48987E}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DDE2C74F-58CC-4D71-8CE1-09DEBB8CFB78}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E95EAD3F-18C6-4304-9DC6-BD6FD8E11D37}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{81017EA9-9AA8-4A6A-9734-7AF40E7D593F}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5C3B5DAA-0AFF-4808-90FB-0F2F2D760E36}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{542FA950-C57A-4E17-B3E1-D935DFE15DEE}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{5B035F86-41B5-40F1-AAAD-3D219F30244E}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6365AC7B-9920-4D8B-AF5D-3BDFEAC340A8}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6A934270-717F-4BC3-BA59-BC9BED47A8D2}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{74C012C4-00FB-4F04-9AFB-4AD5449D2018}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{78888F8B-D5E4-43CE-89F5-C8C18223AF64}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{79B13431-CCAC-4097-8889-D0289E5E924F}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8B8558F6-DC26-4F39-8417-34B8934AA459}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8C8D5C57-3CAD-4CF9-BCAD-F873678DA883}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{981334CB-7B8B-431F-B86D-67B7426B125B}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E393F82-2644-4AB6-B994-1AD39D6C59EE}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A3A2A5C0-1306-4D1A-A093-9CECA4230002}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A9379648-F6EB-4F65-A624-1C10411A15D0}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C1C2FC43-F042-4F17-AEDB-C5ABF3B42E4B}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C8D424EF-CB21-49A0-8659-476FBAB0F8E8}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F16AB1DB-15C0-4456-A29E-4DF24FB9E3D2}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F7EC6286-297C-4981-9DCC-FD7F57BC24C9}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8233093C-178B-484B-979E-3C6B5B147DBC}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{09C554C3-109B-483C-A06B-F14172F1A947}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{12A5F606-B1EC-474C-83ED-95E99FD8058E}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{AD25754E-D76C-42B3-A335-2F81478B722F}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{B722ED8B-0B38-408E-BB89-260C73BCF3D4}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FFDF9EF3-3C3A-4F05-9A6E-5D3B778EC567}
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{EF99BD32-C1FB-11D2-892F-0090271D4F88}]
[-] Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{EF99BD32-C1FB-11D2-892F-0090271D4F88}]
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{E056AFDD-03E9-4D73-8D33-8FCCBCA73438}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{542FA950-C57A-4E17-B3E1-D935DFE15DEE}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{5B035F86-41B5-40F1-AAAD-3D219F30244E}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{6365AC7B-9920-4D8B-AF5D-3BDFEAC340A8}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{6A934270-717F-4BC3-BA59-BC9BED47A8D2}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{74C012C4-00FB-4F04-9AFB-4AD5449D2018}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{78888F8B-D5E4-43CE-89F5-C8C18223AF64}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{79B13431-CCAC-4097-8889-D0289E5E924F}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{8B8558F6-DC26-4F39-8417-34B8934AA459}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{8C8D5C57-3CAD-4CF9-BCAD-F873678DA883}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{981334CB-7B8B-431F-B86D-67B7426B125B}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9E393F82-2644-4AB6-B994-1AD39D6C59EE}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{A3A2A5C0-1306-4D1A-A093-9CECA4230002}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{A9379648-F6EB-4F65-A624-1C10411A15D0}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C1C2FC43-F042-4F17-AEDB-C5ABF3B42E4B}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C8D424EF-CB21-49A0-8659-476FBAB0F8E8}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{F16AB1DB-15C0-4456-A29E-4DF24FB9E3D2}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{F7EC6286-297C-4981-9DCC-FD7F57BC24C9}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{8233093C-178B-484B-979E-3C6B5B147DBC}
[-] Key Deleted : HKCU\Software\Conduit
[-] Key Deleted : HKCU\Software\Myfree Codec
[-] Key Deleted : HKCU\Software\Softonic
[-] Key Deleted : HKCU\Software\YahooPartnerToolbar
[-] Key Deleted : HKCU\Software\Yahoo\Companion
[-] Key Deleted : HKCU\Software\Yahoo\YFriendsBar
[-] Key Deleted : HKCU\Software\AppDataLow\Software\Yahoo\Companion
[-] Key Deleted : HKLM\SOFTWARE\Conduit
[-] Key Deleted : HKLM\SOFTWARE\Myfree Codec
[-] Key Deleted : HKLM\SOFTWARE\PIP
[-] Key Deleted : HKLM\SOFTWARE\searchult
[-] Key Deleted : HKLM\SOFTWARE\Yahoo\Companion
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! Toolbar
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! Companion
[-] Data Restored : HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command []
 
***** [ Web browsers ] *****
 
[-] [C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : facemoods.com
[-] [C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : logmein-hamachi.softonic.com
[-] [C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : ihflimipbcaljfnojhhknppphnnciiif
[-] [C:\Users\jcvielma\AppData\Local\Comodo\Dragon\User Data\Default\Web Data] [Search Provider] Deleted : ask.com
 
*************************
 
:: "Tracing" keys removed
:: Winsock settings cleared
 
########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [11250 bytes] ##########

  • 0

#6
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts

Any further problems before I tidy up ?


  • 0

#7
mavol6

mavol6

    New Member

  • Topic Starter
  • Member
  • Pip
  • 4 posts

everything works correctly now, thanks!.


  • 0

#8
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Subject to no further problems :)

I will remove my tools now and give some recommendations, but, I would like you to run for 24 hours or so and come back if you have any problems

Now the best part of the day ----- Your log now appears clean :thumbsup:

A good workman always cleans up after himself so..The following will implement some cleanup procedures as well as reset System Restore points:

Remove tools

Download and run Delfix
Select the options as shown
delfix.JPG


: Keep Java Updated :

WARNING: Java is the #1 exploited program at this time. The Department of Homeland Security recommends that computer users disable Java
See this article

I would recommend that you completely uninstall Java unless you need it to run an important software.
In that instance I would recommend that you disable Java in your browsers until you need it for that software and then enable it. (See How to diasble Java in your web browser and How to unplug Java from the browser)

If you do need to keep Java then download JavaRa
Run the programme and select Remove Java Runtime. Uninstall all versions of Java present
Once done then run it again and select Update Java runtime > Download and install Latest version
javara.JPG


Now that you are clean, to help protect your computer in the future I recommend that you get the following free programmes:

CryptoPrevent install this programme to lock down and prevent crypto ransome ware

CryptoPrevent.JPG

Malwarebytes

Update and run weekly to keep your system clean

Unchecky

Click on the link above to be taken to Unchecky.com
click the very large Download button.
click Save
Click Open folder
Right click on the Unchecky_setup and choose to Run as Administrator
Once open click the Install button.
Then click on Finish
Unchecky is now installed and will help you keep unwanted check boxes unchecked, this is a fire and forget programme ;)

It is critical to have both a firewall and anti virus to protect your system and to keep them updated.

To learn more about how to protect yourself while on the internet read this little guide Best security practices Keep safe :wave:
  • 0

#9
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help. :)

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.


  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP