[DarkDaemon]

Hello I believe my computer has been infected because every time I try to play a game it will flash not responding for less then half a second then it will respond and this process just happens over and over thus making it imposable to play any games.

 

 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:10-01-2015 01

Ran by Draco_000 (administrator) on DANIELSCOTT (12-01-2016 23:01:04)

Running from C:\Users\Draco_000\Downloads

Loaded Profiles: Draco_000 (Available Profiles: Draco_000 & Administrator)

Platform: Windows 8.1 (X64) Language: English (United States)

Internet Explorer Version 11 (Default browser: IE)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

 

==================== Processes (Whitelisted) =================

 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

 

(Softex Inc.) C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe

(AMD) C:\Windows\System32\atiesrxx.exe

(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RTKAUDIOSERVICE64.EXE

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\Dragon Notes\Core\DACore.exe

(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe

(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe

(McAfee, Inc.) C:\Windows\System32\mfevtps.exe

(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe

(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe

(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe

(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe

(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe

() C:\Program Files\Hewlett-Packard\SimplePass\opvapp.exe

(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

(Hewlett-Packard) C:\Program Files\Hewlett-Packard\SimplePass\HPSmplPass.exe

(Hewlett-Packard) C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBroker.exe

(Hewlett-Packard) C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBrokerDsktop.exe

(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerSt.exe

(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe

(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe

(McAfee, Inc.) C:\Program Files\mcafee\msc\McAPExe.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(Microsoft Corporation) C:\Windows\WinStore\WSHost.exe

(McAfee, Inc.) C:\Program Files\Common Files\mcafee\AMCore\mcshield.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe

(Microsoft Corporation) C:\Windows\System32\Taskmgr.exe

(Microsoft Corporation) C:\Users\Draco_000\AppData\Local\Microsoft\Windows\INetCache\IE\IUJCCAEO\GetWindows10-MSN.exe

(Microsoft Corporation) C:\$Windows.~GWX\Sources\MediaCreationTool.exe

(Microsoft Corporation) C:\$Windows.~WS\Sources\SetupHost.exe

(Microsoft Corporation) C:\Windows\System32\WWAHost.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe

(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.174\opera_crashreporter.exe

(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe

(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe

(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe

(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe

(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe

(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe

(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe

(Opera Software) C:\Program Files (x86)\Opera\31.0.1889.174\opera.exe

(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.16384_none_fa1dc1539b4180d8\TiWorker.exe

 

 

==================== Registry (Whitelisted) ===========================

 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

 

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7202520 2013-08-19] (Realtek Semiconductor)

HKLM\...\Run: [SimplePass] => C:\Program Files\Hewlett-Packard\SimplePass\HPSmplPass.exe [2755640 2013-09-26] (Hewlett-Packard)

HKLM\...\Run: [OPBHOBroker] => C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBroker.exe [155704 2013-09-26] (Hewlett-Packard)

HKLM\...\Run: [OPBHOBrokerDesktop] => C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBrokerDsktop.exe [155704 2013-09-26] (Hewlett-Packard)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2771184 2013-07-26] (Synaptics Incorporated)

HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-09-25] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [AccelerometerSysTrayApplet] => C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerST.exe [77088 2013-07-24] (Hewlett-Packard Company)

HKLM-x32\...\Run: [YouCam Service] => C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [267224 2013-09-01] (CyberLink Corp.)

HKLM-x32\...\Run: [mcpltui_exe] => C:\Program Files\McAfee.com\Agent\mcagent.exe [537512 2013-07-24] (McAfee, Inc.)

HKLM-x32\...\Run: [HPMessageService] => C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe [1045304 2013-10-08] (Hewlett-Packard Development Company, L.P.)

 

==================== Internet (Whitelisted) ====================

 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

 

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{E8F8635E-A5C2-4D87-AB95-148F387740EB}: [DhcpNameServer] 192.168.1.1

 

Internet Explorer:

==================

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.msn.com/HPNOT14/1

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.msn.com/HPNOT14/1

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.msn.com/HPNOT14/1

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.msn.com/HPNOT14/1

HKU\S-1-5-21-2815306386-3278405214-1815853014-1005\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.msn.com/HPNOT14/1

HKU\S-1-5-21-2815306386-3278405214-1815853014-1005\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.msn.com/HPNOT14/1

BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28] (Hewlett-Packard)

BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28] (Hewlett-Packard)

Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll [2013-07-24] (McAfee, Inc.)

Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll [2013-07-24] (McAfee, Inc.)

 

FireFox:

========

FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2013-07-24] ()

FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\windows\SysWOW64\Adobe\Director\np32dsw_1204144.dll [2013-09-05] (Adobe Systems, Inc.)

FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2013-07-24] ()

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-06] (Microsoft Corporation)

FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2012-10-12] ()

FF HKLM-x32\...\Thunderbird\Extensions: [[email protected]] - C:\Program Files\McAfee\MSK

FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2016-01-12] [not signed]

 

==================== Services (Whitelisted) ========================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

S2 0049151452655831mcinstcleanup; C:\WINDOWS\TEMP\004915~1.EXE [834664 2013-07-13] (McAfee, Inc.)

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2013-09-25] (Advanced Micro Devices, Inc.) [File not signed]

S2 Cachedrv server; C:\Program Files\Hewlett-Packard\SimplePass\cachesrvr.exe [109568 2013-09-26] () [File not signed]

R2 CyberLink PowerDVD 12 Media Server Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe [77576 2013-09-05] (CyberLink)

R2 CyberLink PowerDVD 12 Media Server Service; C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe [298760 2013-09-05] (CyberLink)

R2 DACoreService; C:\Program Files (x86)\Nuance\Dragon Notes\Core\DACore.exe [411024 2013-02-01] (Nuance Communications, Inc.)

R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-09-25] (McAfee, Inc.)

R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [92160 2013-08-29] (Hewlett-Packard Company) [File not signed]

R2 HPWMISVC; C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe [1039160 2013-10-08] (Hewlett-Packard Development Company, L.P.)

R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [175464 2013-07-24] (McAfee, Inc.)

S3 McAWFwk; c:\Program Files\Common Files\mcafee\ActWiz\McAWFwk.exe [334608 2013-07-24] (McAfee, Inc.)

R2 mcbootdelaystartsvc; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [328928 2013-09-25] (McAfee, Inc.)

R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-09-25] (McAfee, Inc.)

R2 McNaiAnn; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [328928 2013-09-25] (McAfee, Inc.)

S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [602944 2013-07-05] (McAfee, Inc.)

R2 McOobeSv2; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [328928 2013-09-25] (McAfee, Inc.)

R2 mcpltsvc; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [328928 2013-09-25] (McAfee, Inc.)

R2 McProxy; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [328928 2013-09-25] (McAfee, Inc.)

R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1017016 2013-09-20] (McAfee, Inc.)

R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219272 2013-08-07] (McAfee, Inc.)

R2 mfevtp; C:\Windows\system32\mfevtps.exe [182752 2013-08-07] (McAfee, Inc.)

R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-09-25] (McAfee, Inc.)

R2 omniserv; C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe [87552 2013-09-26] (Softex Inc.) [File not signed]

R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [246488 2013-06-18] (Realtek Semiconductor)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)

 

===================== Drivers (Whitelisted) ==========================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB6.sys [138240 2013-06-23] (Advanced Micro Devices)

R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70112 2013-08-07] (McAfee, Inc.)

R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [91712 2013-03-05] (CyberLink)

S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)

S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197264 2012-05-28] (McAfee, Inc.)

R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [179664 2013-08-07] (McAfee, Inc.)

R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [310224 2013-08-07] (McAfee, Inc.)

S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [69264 2013-08-07] (McAfee, Inc.)

R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [519064 2013-08-07] (McAfee, Inc.)

R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [776168 2013-08-07] (McAfee, Inc.)

R3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [390552 2013-09-20] (McAfee, Inc.)

S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [95984 2013-09-20] (McAfee, Inc.)

R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [343568 2013-08-07] (McAfee, Inc.)

R3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [290008 2013-07-05] (Realtek Semiconductor Corp.)

R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [2945240 2013-09-12] (Realtek Semiconductor Corporation                           )

S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [30448 2013-07-26] (Synaptics Incorporated)

S3 SmbDrvI; C:\Windows\System32\drivers\Smb_driver_Intel.sys [34544 2013-07-26] (Synaptics Incorporated)

S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [34760 2013-08-22] (Microsoft Corporation)

S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [265056 2013-08-22] (Microsoft Corporation)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)

R3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [20800 2013-07-22] (Hewlett-Packard Development Company, L.P.)

 

==================== NetSvcs (Whitelisted) ===================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

 

==================== One Month Created files and folders ========

 

(If an entry is included in the fixlist, the file/folder will be moved.)

 

2016-01-13 01:18 - 2016-01-13 01:19 - 00000000 ____D C:\Windows.old

2016-01-13 01:13 - 2016-01-13 01:13 - 00262144 _____ C:\WINDOWS\system32\config\userdiff

2016-01-13 00:49 - 2016-01-13 00:49 - 00000000 ____D C:\$WINDOWS.~BT

2016-01-12 23:01 - 2016-01-12 23:01 - 00015040 _____ C:\Users\Draco_000\Downloads\FRST.txt

2016-01-12 23:00 - 2016-01-12 23:01 - 00000000 ____D C:\FRST

2016-01-12 23:00 - 2016-01-12 23:00 - 02370560 _____ (Farbar) C:\Users\Draco_000\Desktop\FRST64.exe

2016-01-12 22:54 - 2016-01-12 22:54 - 00004038 _____ C:\WINDOWS\System32\Tasks\HPGenoobeReminder

2016-01-12 22:51 - 2016-01-12 22:52 - 00000000 ____D C:\Program Files (x86)\Opera

2016-01-12 22:51 - 2016-01-12 22:51 - 00003834 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1452657104

2016-01-12 22:51 - 2016-01-12 22:51 - 00001158 _____ C:\Users\Public\Desktop\Opera.lnk

2016-01-12 22:51 - 2016-01-12 22:51 - 00001158 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk

2016-01-12 22:51 - 2016-01-12 22:51 - 00000000 ____D C:\Users\Draco_000\AppData\Roaming\Opera Software

2016-01-12 22:51 - 2016-01-12 22:51 - 00000000 ____D C:\Users\Draco_000\AppData\Local\Opera Software

2016-01-12 22:50 - 2016-01-12 22:50 - 34168632 _____ (Opera Software) C:\Users\Draco_000\Downloads\Opera.exe

2016-01-12 22:42 - 2016-01-12 22:42 - 00000000 ___HD C:\$Windows.~WS

2016-01-12 22:42 - 2016-01-12 22:42 - 00000000 ___HD C:\$Windows.~GWX

2016-01-12 22:40 - 2016-01-12 22:40 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2815306386-3278405214-1815853014-1005

2016-01-12 22:37 - 2016-01-12 22:37 - 00000000 ____D C:\Users\Draco_000\AppData\Roaming\Macromedia

2016-01-12 22:34 - 2016-01-12 22:54 - 00000000 ____D C:\Users\Draco_000\AppData\Roaming\Hewlett-Packard

2016-01-12 22:34 - 2016-01-12 22:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee

2016-01-12 22:33 - 2016-01-12 22:33 - 00000000 ____D C:\Users\Draco_000\AppData\Roaming\hpqlog

2016-01-12 22:33 - 2016-01-12 22:33 - 00000000 ____D C:\Users\Draco_000\AppData\Local\Hewlett-Packard

2016-01-12 22:33 - 2016-01-12 22:33 - 00000000 ____D C:\ProgramData\Synaptics

2016-01-12 22:32 - 2016-01-12 22:32 - 00000000 ____D C:\Users\Draco_000\AppData\Roaming\Synaptics

2016-01-12 22:31 - 2016-01-12 22:31 - 00000000 ____D C:\Users\Draco_000\AppData\Local\Power2Go8

2016-01-12 22:31 - 2016-01-12 22:31 - 00000000 ____D C:\Users\Draco_000\AppData\Local\AMD

2016-01-12 22:30 - 2016-01-12 22:30 - 00000000 ____D C:\Users\Draco_000\AppData\Roaming\ATI

2016-01-12 22:30 - 2016-01-12 22:30 - 00000000 ____D C:\Users\Draco_000\AppData\Local\CyberLink

2016-01-12 22:30 - 2016-01-12 22:30 - 00000000 ____D C:\Users\Draco_000\AppData\Local\ATI

2016-01-12 22:29 - 2016-01-12 22:29 - 00008832 _____ C:\Users\Draco_000\Desktop\Removed Apps.html

2016-01-12 22:29 - 2016-01-12 22:29 - 00000000 ____D C:\WINDOWS\System32\Tasks\WPD

2016-01-12 22:28 - 2016-01-12 22:28 - 00001453 _____ C:\Users\Draco_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2016-01-12 22:28 - 2016-01-12 22:28 - 00000020 ___SH C:\Users\Draco_000\ntuser.ini

2016-01-12 22:28 - 2016-01-12 22:28 - 00000000 ____D C:\Users\Draco_000\AppData\Roaming\Adobe

2016-01-12 22:28 - 2016-01-12 22:28 - 00000000 ____D C:\Users\Draco_000\AppData\Local\VirtualStore

2016-01-12 22:26 - 2016-01-12 22:26 - 00001025 _____ C:\Users\Administrator\AppData\Local\Application.xml

2016-01-12 22:24 - 2016-01-12 22:28 - 00000000 ____D C:\Users\Draco_000

2016-01-12 22:24 - 2016-01-12 22:25 - 00028578 _____ C:\WINDOWS\diagwrn.xml

2016-01-12 22:24 - 2016-01-12 22:25 - 00028578 _____ C:\WINDOWS\diagerr.xml

2016-01-12 22:24 - 2016-01-12 22:25 - 00000000 ___HD C:\Users\Draco_000\Documents\hp.system.package.metadata

2016-01-12 22:24 - 2016-01-12 22:24 - 00000000 _SHDL C:\Users\Draco_000\My Documents

2016-01-12 22:24 - 2016-01-12 22:24 - 00000000 _SHDL C:\Users\Draco_000\Documents\My Videos

2016-01-12 22:24 - 2016-01-12 22:24 - 00000000 _SHDL C:\Users\Draco_000\Documents\My Pictures

2016-01-12 22:24 - 2016-01-12 22:24 - 00000000 _SHDL C:\Users\Draco_000\Documents\My Music

2016-01-12 22:21 - 2016-01-12 22:21 - 00002316 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2815306386-3278405214-1815853014-500

2016-01-12 21:46 - 2016-01-13 00:48 - 00000000 ___HD C:\$SysReset

2016-01-12 21:05 - 2016-01-12 21:05 - 00000000 _____ C:\Users\Draco_000\Desktop\New Text Document.txt

2016-01-12 20:44 - 2016-01-12 20:44 - 00000000 ____H C:\Users\Draco_000\Documents\Default.rdp

2016-01-12 08:31 - 2016-01-12 08:31 - 1446677389 _____ C:\Users\Draco_000\Desktop\Everrything.zip

2016-01-12 06:31 - 2016-01-12 06:35 - 00000000 ____D C:\Users\Draco_000\Desktop\New folder (2)

2016-01-11 21:59 - 2016-01-11 22:01 - 143876368 _____ (Microsoft Corporation) C:\Users\Draco_000\Downloads\msert.exe

2016-01-11 02:34 - 2016-01-11 02:34 - 00158785 _____ C:\Users\Draco_000\Desktop\New Map.cgx

2016-01-11 01:18 - 2016-01-12 06:28 - 00000000 ____D C:\Webzen

2016-01-11 00:58 - 2016-01-11 00:59 - 10500008 _____ C:\Users\Draco_000\Downloads\DragomonHunterProgressive_5.97.exe

2016-01-11 00:57 - 2016-01-11 00:57 - 05999568 _____ C:\Users\Draco_000\Downloads\ELOA_Downloader.exe

2016-01-11 00:44 - 2016-01-11 21:30 - 00000000 ____D C:\MyGames

2016-01-11 00:40 - 2016-01-11 00:40 - 04644808 _____ (MY.COM B.V.) C:\Users\Draco_000\Downloads\SkyforgeLoader_84219cbbbdb242d3dd1783706f545f04__en.exe

2016-01-10 19:54 - 2016-01-10 19:49 - 51483284 _____ C:\Users\Draco_000\Desktop\cityographer-nojava-setup.zip

2016-01-10 19:54 - 2016-01-10 19:49 - 118075480 _____ C:\Users\Draco_000\Desktop\interior-maps.zip

2016-01-06 19:10 - 2016-01-06 19:10 - 04734232 _____ () C:\Users\Draco_000\Desktop\TechnicLauncher.exe

2016-01-02 13:34 - 2016-01-07 22:23 - 00000251 _____ C:\Users\Draco_000\Desktop\Achivemnet.txt

2015-12-30 18:11 - 2015-12-30 18:11 - 00000000 ____D C:\sh4ldr

2015-12-28 13:09 - 2015-12-28 13:09 - 105753479 _____ C:\Users\Draco_000\Downloads\D20 - Star Wars - Arms And Equipment Guide.pdf

2015-12-28 10:48 - 2015-12-28 10:49 - 74314574 _____ C:\Users\Draco_000\Downloads\Star-Wars-D20-Revised-Core-Rulebook.pdf

2015-12-21 20:46 - 2016-01-09 01:49 - 00000000 ____D C:\AMD

 

==================== One Month Modified files and folders ========

 

(If an entry is included in the fixlist, the file/folder will be moved.)

 

2016-01-13 01:19 - 2013-08-22 10:36 - 00262144 _____ C:\WINDOWS\system32\config\BCD-Template

2016-01-12 23:00 - 2013-08-22 08:36 - 00000000 ____D C:\Windows

2016-01-12 22:42 - 2013-08-26 01:57 - 00000000 ___DC C:\WINDOWS\Panther

2016-01-12 22:41 - 2013-08-22 10:36 - 00000000 ____D C:\WINDOWS\AppReadiness

2016-01-12 22:36 - 2014-12-25 11:46 - 00000000 ___RD C:\Users\Draco_000\SkyDrive

2016-01-12 22:34 - 2014-09-15 12:10 - 00001867 _____ C:\Users\Public\Desktop\McAfee LiveSafe - Internet Security.lnk

2016-01-12 22:34 - 2013-10-26 03:37 - 00000000 ____D C:\ProgramData\Hewlett-Packard

2016-01-12 22:33 - 2014-09-15 12:08 - 00000000 ____D C:\ProgramData\McAfee

2016-01-12 22:32 - 2013-08-22 08:25 - 00262144 ___SH C:\WINDOWS\system32\config\ELAM

2016-01-12 22:31 - 2014-12-25 11:45 - 00000000 ____D C:\Users\Draco_000\Documents\Youcam

2016-01-12 22:30 - 2013-08-26 01:09 - 00956412 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2016-01-12 22:30 - 2013-08-22 08:36 - 00000000 ____D C:\WINDOWS\Inf

2016-01-12 22:28 - 2014-12-25 11:43 - 00000000 ____D C:\Users\Draco_000\AppData\Local\Packages

2016-01-12 22:28 - 2014-09-15 11:51 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Music, Photos and Videos

2016-01-12 22:28 - 2013-10-26 03:47 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support

2016-01-12 22:28 - 2013-10-26 03:44 - 00000000 ___RD C:\Program Files (x86)\Online Services

2016-01-12 22:28 - 2013-10-26 03:38 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Communication and Chat

2016-01-12 22:28 - 2013-10-26 03:37 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Security and Protection

2016-01-12 22:28 - 2013-10-26 03:35 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Productivity and Tools

2016-01-12 22:28 - 2013-08-31 21:03 - 00000000 ___HD C:\SYSTEM.SAV

2016-01-12 22:28 - 2013-08-22 10:36 - 00000000 ____D C:\WINDOWS\rescache

2016-01-12 22:25 - 2013-08-22 10:36 - 00000000 __RHD C:\Users\Public\Libraries

2016-01-12 22:24 - 2013-08-22 09:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT

2016-01-12 22:23 - 2013-08-26 01:04 - 00000000 ____D C:\Users\Administrator

2016-01-12 22:23 - 2013-08-22 09:44 - 00348936 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2016-01-12 22:22 - 2013-08-31 22:49 - 00000000 ____D C:\SWSetup

2016-01-12 22:22 - 2013-08-22 08:25 - 00524288 ___SH C:\WINDOWS\system32\config\BBI

2016-01-12 06:30 - 2015-08-03 18:57 - 00000000 ____D C:\Games

2016-01-12 05:24 - 2013-08-22 10:36 - 00000000 ___HD C:\Program Files\WindowsApps

2016-01-06 20:03 - 2015-10-24 14:12 - 00000000 ____D C:\AdwCleaner

2016-01-06 16:55 - 2014-12-31 21:55 - 00000000 __RDO C:\Users\Draco_000\OneDrive

2016-01-06 16:12 - 2015-02-16 22:26 - 00433664 ___SH C:\Users\Draco_000\Desktop\Thumbs.db

2016-01-02 15:55 - 2014-12-29 01:30 - 01533440 ___SH C:\Users\Draco_000\Downloads\Thumbs.db

2015-12-30 18:55 - 2015-02-21 12:41 - 00000000 ____D C:\Users\Draco_000\jagexcache

2015-12-21 21:12 - 2015-05-30 15:04 - 00000000 ____D C:\WarThunder

2015-12-21 20:32 - 2015-01-31 15:17 - 00000000 ____D C:\Users\Draco_000\Documents\My Games

 

==================== Bamital & volsnap =================

 

(There is no automatic fix for files that do not pass verification.)

 

C:\WINDOWS\system32\winlogon.exe => File is digitally signed

C:\WINDOWS\system32\wininit.exe => File is digitally signed

C:\WINDOWS\explorer.exe => File is digitally signed

C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed

C:\WINDOWS\system32\svchost.exe => File is digitally signed

C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed

C:\WINDOWS\system32\services.exe => File is digitally signed

C:\WINDOWS\system32\User32.dll => File is digitally signed

C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed

C:\WINDOWS\system32\userinit.exe => File is digitally signed

C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed

C:\WINDOWS\system32\rpcss.dll => File is digitally signed

C:\WINDOWS\system32\dnsapi.dll => File is digitally signed

C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed

C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

 

 

LastRegBack: 2013-08-26 01:01

 

==================== End of FRST.txt ============================

 

Additional scan result of Farbar Recovery Scan Tool (x64) Version:10-01-2015 01

Ran by Draco_000 (2016-01-12 23:02:09)

Running from C:\Users\Draco_000\Downloads

Windows 8.1 (X64) (2016-01-13 03:27:27)

Boot Mode: Normal

==========================================================

 

 

==================== Accounts: =============================

 

Administrator (S-1-5-21-2815306386-3278405214-1815853014-500 - Administrator - Disabled) => C:\Users\Administrator

Draco_000 (S-1-5-21-2815306386-3278405214-1815853014-1005 - Administrator - Enabled) => C:\Users\Draco_000

Guest (S-1-5-21-2815306386-3278405214-1815853014-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-2815306386-3278405214-1815853014-1004 - Limited - Enabled)

 

==================== Security Center ========================

 

(If an entry is included in the fixlist, it will be removed.)

 

AV: McAfee Anti-Virus and Anti-Spyware (Enabled - Out of date) {ADA629C7-7F48-5689-624A-3B76997E0892}

AV: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: McAfee Anti-Virus and Anti-Spyware (Enabled - Out of date) {16C7C823-5972-5907-58FA-0004E2F9422F}

AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

FW: McAfee Firewall (Enabled) {959DA8E2-3527-57D1-4915-924367AD4FE9}

 

==================== Installed Programs ======================

 

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

 

4 Elements II (x32 Version: 2.2.0.98 - WildTangent) Hidden

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)

Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.4.144 - Adobe Systems, Inc.)

Airport Mania (x32 Version: 2.2.0.95 - WildTangent) Hidden

AMD Catalyst Install Manager (HKLM\...\{5BB304EB-8E5B-0F2D-66FA-6603D9BB3232}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)

Azkend 2: The World Beneath (x32 Version: 2.2.0.98 - WildTangent) Hidden

Bejeweled 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden

Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)

Bounce Symphony (x32 Version: 2.2.0.97 - WildTangent) Hidden

Build-a-lot (x32 Version: 2.2.0.98 - WildTangent) Hidden

Cradle Of Egypt Collector's Edition (x32 Version: 2.2.0.110 - WildTangent) Hidden

Cradle of Rome 2 (x32 Version: 2.2.0.98 - WildTangent) Hidden

Curse at Twilight (x32 Version: 3.0.2.32 - WildTangent) Hidden

CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.5.6902 - CyberLink Corp.)

CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}) (Version: 10.0.5.3303 - CyberLink Corp.)

Cyberlink PhotoDirector (HKLM-x32\...\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.3.4503 - CyberLink Corp.)

CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.5.3228 - CyberLink Corp.)

CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.5.3304 - CyberLink Corp.)

CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.2.3305 - CyberLink Corp.)

CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 5.0.2.3302 - CyberLink Corp.)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

Delicious: Emily's Childhood Memories Premium Edition (x32 Version: 3.0.2.32 - WildTangent) Hidden

DisableMSDefender (Version: 1.0.0 - Hewlett-Packard Company) Hidden

Dragon Notes en-US (HKLM-x32\...\{C438C1D0-A46C-4BFA-AFCD-11261DE9CCE0}) (Version: 01.00.100.011 - Nuance Communications Inc.)

Energy Star (HKLM-x32\...\{FC0ADA4D-8FA5-4452-8AFF-F0A0BAC97EF7}) (Version: 1.0.9 - Hewlett-Packard Company)

Farm Frenzy (x32 Version: 2.2.0.98 - WildTangent) Hidden

Fishdom 3: Collector's Edition (x32 Version: 3.0.2.38 - WildTangent) Hidden

Governor of Poker 2 Premium Edition (x32 Version: 2.2.0.110 - WildTangent) Hidden

Hewlett-Packard ACLM.NET v1.2.2.3 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden

House of 1000 Doors: Family Secrets (x32 Version: 2.2.0.98 - WildTangent) Hidden

HP 3D DriveGuard (HKLM-x32\...\{07F6DC37-0857-4B68-A675-4E35989E85E3}) (Version: 6.0.15.1 - Hewlett-Packard Company)

HP Connected Music (Meridian - installer) (HKLM-x32\...\StartHPConnectedMusic) (Version: 1.0 - Meridian Audio Ltd)

HP CoolSense (HKLM-x32\...\{394B14EA-B072-4440-9510-87797CB12371}) (Version: 2.20.21 - Hewlett-Packard Company)

HP Documentation (HKLM-x32\...\{8DD31D24-52CC-4DF7-AD21-E088EB48D902}) (Version: 1.1.0.0 - Hewlett-Packard)

HP Registration Service (HKLM\...\{D1E8F2D7-7794-4245-B286-87ED86C1893C}) (Version: 1.2.7127.4628 - Hewlett-Packard)

HP SimplePass (HKLM-x32\...\InstallShield_{314FAD12-F785-4471-BCE8-AB506642B9A1}) (Version: 8.00.54 - Hewlett-Packard)

HP Support Assistant (HKLM-x32\...\{3AF15EEA-8EDF-4393-BB6C-CF8A9986486A}) (Version: 7.3.35.20 - Hewlett-Packard Company)

HP System Event Utility (HKLM-x32\...\{C78E8F51-3EAD-4F0C-83F0-EF371075E0B4}) (Version: 1.0.10 - Hewlett-Packard Company)

HP Utility Center (HKLM\...\{7A75E042-0D30-43C2-BD2A-684F4BE38FF7}) (Version: 2.3.1 - Hewlett-Packard Company)

HP Wireless Button Driver (HKLM-x32\...\{30B2D1D8-0A07-4B71-9553-0710C5D31E35}) (Version: 1.1.2.1 - Hewlett-Packard Company)

Inst5675 (Version: 8.00.54 - Softex Inc.) Hidden

Inst5676 (Version: 8.00.54 - Softex Inc.) Hidden

Jewel Match 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden

John Deere Drive Green (x32 Version: 2.2.0.95 - WildTangent) Hidden

King Oddball (x32 Version: 3.0.2.48 - WildTangent) Hidden

Luxor Evolved (x32 Version: 2.2.0.98 - WildTangent) Hidden

Mahjongg Dimensions Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden

McAfee LiveSafe - Internet Security (HKLM-x32\...\MSC) (Version: 12.8.414 - McAfee, Inc.)

Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)

Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Mystery P.I. - Curious Case of Counterfeit Cove (x32 Version: 2.2.0.98 - WildTangent) Hidden

OEM Application Profile (HKLM-x32\...\{70D5F822-F4C4-33D9-7EEC-2A4AF4EA7BDC}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.)

Opera Stable 31.0.1889.174 (HKLM-x32\...\Opera 31.0.1889.174) (Version: 31.0.1889.174 - Opera Software)

Peggle Nights (x32 Version: 2.2.0.98 - WildTangent) Hidden

Penguins! (x32 Version: 2.2.0.98 - WildTangent) Hidden

Pinger (HKLM-x32\...\Pinger 1.4.0.1) (Version: 1.4.0.1 - Pinger Inc.)

Pinger (x32 Version: 1.4.0.1 - Pinger Inc.) Hidden

Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden

Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden

Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.29068 - Realtek Semiconductor Corp.)

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.20.815.2013 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7023 - Realtek Semiconductor Corp.)

REALTEK Wireless LAN Driver (HKLM-x32\...\{A5107464-AA9B-4177-8129-5FF2F42DD322}) (Version: 1.00.12.0906 - REALTEK Semiconductor Corp.)

Roads of Rome 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden

swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 17.0.6.2 - Synaptics Incorporated)

Tales of Lagoona (x32 Version: 2.2.0.110 - WildTangent) Hidden

Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden

Vacation Quest™ - Australia (x32 Version: 3.0.2.32 - WildTangent) Hidden

WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.4.0 - WildTangent)

WildTangent Games App (HP Games) (x32 Version: 4.0.10.15 - WildTangent) Hidden

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)

Youda Jewel Shop (x32 Version: 3.0.2.32 - WildTangent) Hidden

 

==================== Custom CLSID (Whitelisted): ==========================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

 

==================== Scheduled Tasks (Whitelisted) =============

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

Task: {0D6802D5-E0AA-4C0D-9CB0-A0A50C7DE2F2} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2012-11-29] (Hewlett-Packard Company)

Task: {0E79369F-9BEB-490B-83BC-C053A62E1E63} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Opt-in For HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF_Utils.exe [2013-08-29] (Hewlett-Packard Company)

Task: {2028FADE-B839-4A4E-A0E2-14012DAC72E7} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-08-29] (Hewlett-Packard Company)

Task: {2B5FD798-41F0-4D4D-98E9-A8901828814F} - System32\Tasks\CLVDLauncher => C:\Program Files (x86)\CyberLink\Power2Go8\CLVDLauncher.exe [2013-03-12] (CyberLink Corp.)

Task: {4DFCB4D3-F1D1-49E7-8E3C-A019A93A0F48} - System32\Tasks\CLMLSvc_P2G8 => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [2013-08-05] (CyberLink)

Task: {56043076-0077-4B67-9B1D-238A600451B4} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2013-08-09] (Hewlett-Packard)

Task: {5827C3A1-FD50-4142-9425-B6949EFB4D0B} - System32\Tasks\Microsoft\Windows\SetupSQMTask => C:\WINDOWS\SYSTEM32\OOBE\SETUPSQM.EXE [2013-08-22] (Microsoft Corporation)

Task: {651E7D87-D745-4C17-BF21-0294E5D2A7F2} - System32\Tasks\HPGenoobeReminder => C:\Program Files (x86)\Hewlett-Packard\HP Registration Service\HP GenOOBE\HPGenOOBE.exe [2013-10-05] ()

Task: {69FAB57C-A209-42F3-8F68-63F933963A33} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2013-08-09] (Hewlett-Packard)

Task: {74D05C9D-577E-419B-A0E6-B3AA5719E489} - System32\Tasks\Opera scheduled Autoupdate 1452657104 => C:\Program Files (x86)\Opera\launcher.exe [2015-08-17] (Opera Software)

Task: {BA48FCCD-F364-42BF-B684-E7B4DCC4D3D1} - System32\Tasks\Microsoft\Windows\UPnP\UPnPHostConfig => config upnphost start= auto

Task: {C6632012-B8E5-4752-B143-4A7AFD2436D2} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-08-29] (Hewlett-Packard Company)

Task: {D3F947D7-0503-4313-A614-952F22AC5E3B} - System32\Tasks\Synaptics TouchPad Enhancements => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2013-07-26] (Synaptics Incorporated)

Task: {E8FF0F92-FD2A-4351-AB9B-102A1E4539BA} - System32\Tasks\Hewlett-Packard\HP CoolSense\HP CoolSense Start at Logon => C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe [2013-09-10] (Hewlett-Packard Development Company, L.P.)

 

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

 

 

==================== Shortcuts =============================

 

(The entries could be listed to be restored or removed.)

 

==================== Loaded Modules (Whitelisted) ==============

 

2013-09-26 13:28 - 2013-09-26 13:28 - 02540544 _____ () C:\Program Files\Hewlett-Packard\SimplePass\autheng.dll

2013-09-26 13:25 - 2013-09-26 13:25 - 00021504 _____ () C:\Program Files\Hewlett-Packard\SimplePass\cryptodll.dll

2013-09-26 13:25 - 2013-09-26 13:25 - 00035328 _____ () C:\Program Files\Hewlett-Packard\SimplePass\ssplogon.dll

2013-09-26 13:25 - 2013-09-26 13:25 - 00055296 _____ () C:\Program Files\Hewlett-Packard\SimplePass\RandomPass.dll

2013-09-26 13:39 - 2013-09-26 13:39 - 00306064 _____ () C:\Program Files\Hewlett-Packard\SimplePass\mstrpwd.dll

2013-09-26 13:39 - 2013-09-26 13:39 - 01298832 _____ () C:\Program Files\Hewlett-Packard\SimplePass\GraphicalPwd.dll

2013-09-25 08:48 - 2013-09-25 08:48 - 00127488 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll

2013-09-26 13:34 - 2013-09-26 13:34 - 00064000 _____ () C:\Program Files\Hewlett-Packard\SimplePass\opvapp.exe

2013-09-25 08:48 - 2013-09-25 08:48 - 00102400 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll

 

==================== Alternate Data Streams (Whitelisted) =========

 

(If an entry is included in the fixlist, only the ADS will be removed.)

 

 

==================== Safe Mode (Whitelisted) ===================

 

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""=""

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"

 

==================== EXE Association (Whitelisted) ===============

 

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

 

 

==================== Internet Explorer trusted/restricted ===============

 

(If an entry is included in the fixlist, it will be removed from the registry.)

 

 

==================== Hosts content: ===============================

 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

 

2013-08-22 08:25 - 2013-08-22 08:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts

 

 

==================== Other Areas ============================

 

(Currently there is no automatic fix for this section.)

 

HKU\S-1-5-21-2815306386-3278405214-1815853014-1005\Control Panel\Desktop\\Wallpaper -> C:\Users\Draco_000\Pictures\clouds_wings_fire_buildings_gia_artist_anime_anime_boys_orange_eyes_cities_black_hair_1600x1200_Wallpaper_1280x800_www.wallpaperswa.com.jpg

DNS Servers: 192.168.1.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall is enabled.

 

==================== MSCONFIG/TASK MANAGER disabled items ==

 

(Currently there is no automatic fix for this section.)

 

 

==================== FirewallRules (Whitelisted) ===============

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139

FirewallRules: [{9E5EBAEF-1BEE-449F-B0F2-70CB64690C44}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

FirewallRules: [{D90319A8-ADF7-4136-BF96-C5537408FA7F}] => (Allow) LPort=2869

FirewallRules: [{ADA1330C-92D0-44B6-95CB-1DD3A46DF270}] => (Allow) LPort=1900

FirewallRules: [{C8481D9B-759D-4D62-9E61-0A79F87B117E}] => (Allow) C:\Program Files (x86)\HPConnectedMusic\HPConnectedMusic.exe

FirewallRules: [{A1F3EE08-B6D6-40C2-B589-9E08817F532D}] => (Allow) C:\Program Files (x86)\HPConnectedMusic\HPConnectedMusic.exe

FirewallRules: [{9B2243F9-8892-4312-A573-A96AA2D79DCD}] => (Allow) %LocalAppData%\HPConnectedMusic\Application\HPConnectedMusic.exe

FirewallRules: [{9162A523-B6B6-4576-B676-CB34419C4FFA}] => (Allow) %LocalAppData%\HPConnectedMusic\Application\HPConnectedMusic.exe

FirewallRules: [{35845A75-616F-4210-828F-4A5E5CAB8963}] => (Allow) %LocalAppData%\HPConnectedMusic\Application\spotify_helper.exe

FirewallRules: [{B66DCA58-3B56-4546-871E-9567899E2AB6}] => (Allow) %LocalAppData%\HPConnectedMusic\Application\spotify_helper.exe

FirewallRules: [{F12375DD-CB89-4B9F-AE3C-8B10D432FB26}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{E2C73D4B-75DE-45BA-AD42-EDE818212BC6}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{422F953C-B27E-49F4-B0F9-679C0E8B69D7}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{0B4886CF-6B49-43D0-9D4B-071B488EEBBF}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{58A71048-A754-4C03-A25B-6E6B83040795}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12.exe

FirewallRules: [{D5E17DA1-A876-4285-B3E0-0152EB6584C0}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMR\PowerDVD12DMREngine.exe

FirewallRules: [{EC6704BF-E91E-4A97-9B8C-B27EF18DA2A6}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe

FirewallRules: [{C5F022EC-C566-4218-86DA-3E7A92EF5A7E}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12Agent.exe

FirewallRules: [{E5B7801C-745A-4AAA-A9F1-C903E5405D1A}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12ML.exe

FirewallRules: [{C4A955A1-D2E5-47C1-A296-6CA3A4492760}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Movie\PowerDVD.exe

FirewallRules: [{626E12EB-D2A1-4682-BC7B-DECDC5008E17}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe

FirewallRules: [{87515580-468D-42B7-B8D0-58303244FD48}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe

FirewallRules: [{CD5ED78B-FC89-4596-BBCE-0530E9F88BAA}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDirector10\PDR10.EXE

FirewallRules: [{117EC171-F1DF-4C07-813F-241D51B5CAE4}] => (Allow) C:\Users\Draco_000\Desktop\New folder (2)\My Games\AeriaGames\DragomonHunter-US\Game.bin

FirewallRules: [{C94C3F1A-D9EC-4D7D-8B56-64743C9CBBC0}] => (Allow) C:\Users\Draco_000\Desktop\New folder (2)\My Games\AeriaGames\DragomonHunter-US\Game.bin

 

==================== Restore Points =========================

 

 

==================== Faulty Device Manager Devices =============

 

 

==================== Event log errors: =========================

 

Application errors:

==================

Error: (01/12/2016 10:54:25 PM) (Source: HP Registration Service) (EventID: 0) (User: )

Description: The system cannot find the file specified. (Exception from HRESULT: 0x80070002)     at TaskScheduler.ITaskFolder.DeleteTask(String Name, Int32 flags)

   at HPMetrics.ScheduleTask.DeleteTask(String TaskName)

 

 

System errors:

=============

Error: (01/12/2016 10:31:39 PM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)

Description: {209500FC-6B45-4693-8871-6296C4843751}

 

Error: (01/12/2016 10:21:44 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: The IP Helper service terminated with the following error: 

%%1058

 

Error: (09/15/2014 12:41:07 PM) (Source: DCOM) (EventID: 10010) (User: )

Description: {20966775-18A4-4299-B8E3-772C336B52A7}

 

Error: (09/15/2014 12:41:03 PM) (Source: DCOM) (EventID: 10010) (User: )

Description: {9E175B6D-F52A-11D8-B9A5-505054503030}

 

Error: (09/15/2014 12:40:33 PM) (Source: DCOM) (EventID: 10010) (User: )

Description: {9E175B6D-F52A-11D8-B9A5-505054503030}

 

Error: (09/15/2014 12:39:07 PM) (Source: DCOM) (EventID: 10010) (User: )

Description: {20966775-18A4-4299-B8E3-772C336B52A7}

 

Error: (09/15/2014 12:38:33 PM) (Source: DCOM) (EventID: 10010) (User: )

Description: {9E175B6D-F52A-11D8-B9A5-505054503030}

 

Error: (09/15/2014 12:36:32 PM) (Source: DCOM) (EventID: 10010) (User: )

Description: {9E175B6D-F52A-11D8-B9A5-505054503030}

 

 

==================== Memory info =========================== 

 

Processor: AMD A10-5745M APU with Radeon™ HD Graphics 

Percentage of memory in use: 30%

Total physical RAM: 11462.25 MB

Available physical RAM: 7947.3 MB

Total Virtual: 13894.25 MB

Available Virtual: 9792.75 MB

 

==================== Drives ================================

 

Drive c: (Windows) (Fixed) (Total:716.3 GB) (Free:310.77 GB) NTFS

Drive d: (RECOVERY) (Fixed) (Total:19.13 GB) (Free:1.82 GB) NTFS ==>[system with boot components (obtained from drive)]

Drive i: (Personal) (Fixed) (Total:195.31 GB) (Free:195.19 GB) NTFS

 

==================== MBR & Partition Table ==================

 

========================================================

Disk: 0 (Size: 931.5 GB) (Disk ID: A45035E9)

 

Partition: GPT.

 

==================== End of Addition.txt ============================

 

 

[Advertisements]

So anyone have an idea of what could be wrong and if so how to fix it.

[DarkDaemon]

So anyone have an idea of what could be wrong and if so how to fix it.