Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

black screen windows 7 [Solved]


  • This topic is locked This topic is locked

#1
pcme

pcme

    Member

  • Member
  • PipPip
  • 32 posts

hello please help me

my pc doesn't go after login

stay with black screen even on safe mode

windows 7 ultimate

it does have a bar with windows host script

thanks


  • 0

Advertisements


#2
pcme

pcme

    Member

  • Topic Starter
  • Member
  • PipPip
  • 32 posts

i run the farbar recovery scan tool

here is the log

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:05-03-2016 01
Ran by SYSTEM on MININT-ONIV4LN (02-04-2016 17:15:51)
Running from g:\
Platform: Windows 7 Ultimate Service Pack 1 (X86) Language: English (United States)
Internet Explorer Version 11
Boot Mode: Recovery
Default: ControlSet002
ATTENTION!:=====> If the system is bootable FRST must be run from normal or Safe mode to create a complete log.
 
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/
 
==================== Registry (Whitelisted) ===========================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2072928 2014-10-31] (Wondershare)
HKLM\...\Run: [DelaypluginInstall] => C:\ProgramData\Wondershare\Video Converter Ultimate\DelayPluginI.exe [1960336 2014-11-07] ()
HKLM\...\Run: [Windows Mobile Device Center] => C:\Windows\WindowsMobile\wmdc.exe [648072 2007-05-31] (Microsoft Corporation)
HKLM\...\Run: [Fitbit Connect] => C:\Program Files\Fitbit Connect\Fitbit Connect.exe [4567720 2015-10-28] (Fitbit, Inc.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [596528 2015-12-22] (Oracle Corporation)
HKLM\...\RunOnce: [Malwarebytes Anti-Malware (cleanup)] => C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\mbamdor.exe [55264 2016-03-10] (Malwarebytes)
HKLM\...\RunOnce: [*WerKernelReporting] => C:\Windows\SYSTEM32\WerFault.exe [360448 2009-07-13] (Microsoft Corporation)
HKLM\...\Winlogon: [Userinit] wscript,
HKU\ADMIN'\...\Run: [LDM] => C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [36864 2015-03-11] (Logitech)
HKU\ADMIN'\...\Run: [Fitbit Connect] => C:\Program Files\Fitbit Connect\Fitbit Connect.exe [4567720 2015-10-28] (Fitbit, Inc.)
HKU\ADMIN'\...\Run: [Pritc] => C:\Users\ADMIN'\AppData\Local\Temp\is-06EDJ.tmp\print.exe <===== ATTENTION
HKU\ADMIN'\...\Run: [Snail Translator] => C:\Windows\Snail Translator\Snail Translator\Snail Translator.exe [454656 2016-03-23] ()
HKU\ADMIN'\...\Policies\system: [LogonHoursAction] 2
HKU\ADMIN'\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\ADMIN'\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\ADMIN'\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\scrnsave.scr [10240 2009-07-13] (Microsoft Corporation)
HKU\Bryan\...\Run: [swg] => C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2013-03-02] (Google Inc.)
HKU\Bryan\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIIBE.EXE [249440 2012-02-29] (SEIKO EPSON CORPORATION)
HKU\Bryan\...\Run: ["E:\Program Files\Steam\steam.exe" -silent] => "E:\Program Files\Steam\steam.exe" -silent
HKU\Bryan\...\Run: [ooVoo.exe] => C:\Program Files\ooVoo\oovoo.exe /minimized
HKU\Bryan\...\Run: [LDM] => C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [36864 2015-03-11] (Logitech)
HKU\Bryan\...\Policies\system: [LogonHoursAction] 2
HKU\Bryan\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\Exist\...\Run: [LDM] => C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [36864 2015-03-11] (Logitech)
HKU\Exist\...\Policies\system: [LogonHoursAction] 2
HKU\Exist\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\jackie\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIIBE.EXE [249440 2012-02-29] (SEIKO EPSON CORPORATION)
HKU\Walter\...\Run: [swg] => C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2013-03-02] (Google Inc.)
HKU\Walter\...\Policies\system: [LogonHoursAction] 2
HKU\Walter\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
BootExecute: autocheck autochk *  BootDefrag.exe
GroupPolicyScripts: Restriction <======= ATTENTION
 
==================== Services (Whitelisted) ========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
S4 ACDaemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
S4 AxAutoMntSrv; C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft Development Team)
S4 AxiomAudioDevMon; C:\Program Files\M-Audio\Axiom\AudioDevMon.exe [1636872 2010-03-11] (M-Audio)
S2 BackupService; C:\Users\ADMIN'\AppData\Roaming\HP SimpleSave Application\uUACTokenSvc.exe [83512 2010-07-01] (ArcSoft, Inc.)
S3 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2013-11-28] (www.BitComet.com)
S4 BstHdAndroidSvc; C:\Program Files\BlueStacks\HD-Service.exe [409304 2014-10-08] (BlueStack Systems, Inc.)
S4 BstHdLogRotatorSvc; C:\Program Files\BlueStacks\HD-LogRotatorService.exe [388824 2014-10-08] (BlueStack Systems, Inc.)
S2 BstHdUpdaterSvc; C:\Program Files\BlueStacks\HD-UpdaterService.exe [782040 2014-10-08] (BlueStack Systems, Inc.)
S2 chromoting; C:\Program Files\Google\Chrome Remote Desktop\49.0.2623.40\remoting_host.exe [69016 2016-02-05] (Google Inc.)
S4 EpsonBidirectionalService; C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe [94208 2006-12-19] (SEIKO EPSON CORPORATION)
S4 EpsonCustomerParticipation; C:\Program Files\EPSON\EpsonCustomerParticipation\EPCP.exe [539744 2012-05-10] (SEIKO EPSON CORPORATION)
S2 EpsonScanSvc; C:\Windows\system32\EscSvc.exe [122000 2011-12-11] (Seiko Epson Corporation)
S4 EPSON_PM_RPCV4_04; C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RP7.EXE [142432 2012-02-21] (SEIKO EPSON CORPORATION)
S4 Fitbit; C:\Program Files\Fitbit\fitbit.exe [773152 2012-06-22] (Fitbit, Inc.)
S2 Fitbit Connect; C:\Program Files\Fitbit Connect\FitbitConnectService.exe [5906088 2015-10-28] (Fitbit, Inc.)
S3 GFI LanGuard Patch Agent; C:\Windows\Patches\PatchAgent.exe [427376 2014-11-15] ()
S4 Hauppauge WinTV Extender; C:\Program Files\WinTV\Extend\wintvextender.exe [67584 2014-11-15] (Hauppauge Computer Works, Inc)
S4 HauppaugeTVServer; C:\Program Files\WinTV\TVServer\hauppaugetvserver.exe [602624 2014-11-15] (Hauppauge Computer Works)
S2 HFGService; C:\Windows\System32\HFGService.dll [413696 2009-12-21] (CSR, plc)
S2 ioloSystemService; C:\Program Files\iolo\Common\Lib\ioloServiceManager.exe [1168960 2013-12-03] (iolo technologies, LLC)
S4 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [769432 2012-07-13] (Nero AG)
S4 PDAgent; C:\Program Files\Raxco\PerfectDisk\PDAgent.exe [1415032 2013-08-04] (Raxco Software, Inc.)
S4 PDEngine; C:\Program Files\Common Files\Raxco\Shared\PDEngine.exe [2166648 2013-08-04] (Raxco Software, Inc.)
S2 proXPN VPN; C:\Program Files\proXPN\bin\proXPNService.exe [102264 2015-06-11] ()
S4 StarWindServiceAE; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [370688 2009-12-23] (StarWind Software)
S2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [6889232 2015-12-14] (TeamViewer GmbH)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-26] (Microsoft Corporation)
S2 FFPCAutoSave; J:\PCAutoSaveSv.exe [X]
 
===================== Drivers (Whitelisted) ==========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
S3 Afc; C:\Windows\System32\drivers\Afc.sys [18688 2006-11-10] (Arcsoft, Inc.)
S3 ampa; C:\Windows\system32\ampa.sys [12728 2011-12-26] ()
S3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [176856 2016-01-28] (Broadcom Corporation.)
S0 BootDefragDriver; C:\Windows\System32\drivers\BootDefragDriver.sys [16064 2014-06-30] (Glarysoft Ltd)
S2 BstHdDrv; C:\Program Files\BlueStacks\HD-Hypervisor-x86.sys [112344 2014-10-08] (BlueStack Systems)
S3 BthAudioHF; C:\Windows\System32\DRIVERS\BthAudioHF.sys [43008 2009-12-21] (CSR, plc)
S3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [22528 2009-08-13] (CSR, plc)
S3 clwvd6; C:\Windows\System32\DRIVERS\clwvd6.sys [35560 2013-10-28] (CyberLink Corporation)
S3 cpuz137; C:\Program Files\CPUID\PC Wizard 2013\pcwiz_x32.sys [26856 2014-02-17] (CPUID)
S3 csr_a2dp; C:\Windows\System32\drivers\bthav.sys [61952 2009-12-21] (CSR, plc)
S2 DefragFS; C:\Windows\System32\Drivers\DefragFS.sys [104088 2013-08-04] (Raxco Software, Inc.)
S2 DLABMFSM; C:\Windows\System32\Drivers\DLABMFSM.SYS [37360 2007-07-23] (Roxio)
S2 DLABOIOM; C:\Windows\System32\Drivers\DLABOIOM.SYS [32848 2007-07-23] (Roxio)
S2 DLADResM; C:\Windows\System32\Drivers\DLADResM.SYS [9104 2007-07-23] (Roxio)
S2 DLAIFS_M; C:\Windows\System32\Drivers\DLAIFS_M.SYS [108752 2007-07-23] (Roxio)
S2 DLAOPIOM; C:\Windows\System32\Drivers\DLAOPIOM.SYS [27216 2007-07-23] (Roxio)
S2 DLAPoolM; C:\Windows\System32\Drivers\DLAPoolM.SYS [16304 2007-07-23] (Roxio)
S2 DLAUDFAM; C:\Windows\System32\Drivers\DLAUDFAM.SYS [93552 2007-07-23] (Roxio)
S2 DLAUDF_M; C:\Windows\System32\Drivers\DLAUDF_M.SYS [98448 2007-07-23] (Roxio)
S1 ElRawDisk; C:\Windows\system32\drivers\ElRawDsk.sys [26248 2013-12-03] (EldoS Corporation)
S0 giveio; C:\Windows\System32\giveio.sys [5248 1996-04-03] ()
S1 GUBootStartup; C:\Windows\System32\drivers\GUBootStartup.sys [17472 2015-07-18] (Glarysoft Ltd)
S3 hcw72ADFilter; C:\Windows\System32\DRIVERS\hcw72ADFilter.sys [28928 2010-01-11] (Hauppauge Computer Works, Inc.)
S3 hcw72ATV; C:\Windows\System32\DRIVERS\hcw72ATV.sys [1217920 2010-01-11] (Hauppauge Computer Works, Inc.)
S3 hcw72DTV; C:\Windows\System32\DRIVERS\hcw72DTV.sys [1220224 2010-01-11] (Hauppauge Computer Works, Inc.)
S3 ISODrive; C:\Users\ADMIN'\Desktop\UltraISO\drivers\ISODrive.sys [82320 2010-01-29] (EZB Systems, Inc.)
S3 ivusb; C:\Windows\System32\DRIVERS\ivusb.sys [25112 2010-07-29] (Initio Corporation)
S3 MADFULEGACYKEYBOARD; C:\Windows\System32\DRIVERS\MAudioLegacyKeyboard_DFU.sys [23304 2010-02-09] (M-Audio)
S3 ManyCam; C:\Windows\System32\DRIVERS\mcvidrv.sys [34432 2012-10-10] (ManyCam LLC)
S3 MAUSBLEGACYKEYBOARD; C:\Windows\System32\DRIVERS\MAudioLegacyKeyboard.sys [167304 2010-02-09] (M-Audio)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [170200 2016-03-27] (Malwarebytes)
S3 mcaudrv_simple; C:\Windows\System32\drivers\mcaudrv.sys [22656 2013-01-31] (ManyCam LLC)
S2 PDFSFilter; C:\Windows\System32\DRIVERS\PDFsFilter.sys [68464 2013-12-03] (Raxco Software, Inc.)
S0 speedfan; C:\Windows\System32\speedfan.sys [24184 2012-12-29] (Almico Software)
S0 sptd; C:\Windows\System32\Drivers\sptd.sys [466008 2013-03-20] (Duplex Secure Ltd.)
S3 SynTP_1; C:\Windows\System32\DRIVERS\SynTP_1.sys [355440 2013-02-14] (Synaptics Incorporated)
S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [35288 2015-02-05] (The OpenVPN Project)
S3 anvsnddrv; system32\drivers\anvsnddrv.sys [X]
S3 AtiDCM; \??\C:\AMD\Support\13-9-legacy_vista_win7_32_dd_ccc\Bin\atidcmxx.sys [X]
S3 btmaudio; system32\drivers\btmaud.sys [X]
S3 btmaux; system32\DRIVERS\btmaux.sys [X]
S3 btwampfl; \??\C:\Windows\system32\drivers\btwampfl.sys [X]
S3 btwaudio; system32\drivers\btwaudio.sys [X]
S3 btwavdt; system32\DRIVERS\btwavdt.sys [X]
S3 btwl2cap; system32\DRIVERS\btwl2cap.sys [X]
S3 btwrchid; system32\DRIVERS\btwrchid.sys [X]
S3 catchme; \??\C:\Users\ADMIN'\AppData\Local\Temp\catchme.sys [X]
S3 clwvd; system32\DRIVERS\clwvd.sys [X]
S3 keycrypt; system32\DRIVERS\KeyCrypt32.sys [X]
S3 mfeavfk01; \Device\mfeavfk01.sys [X]
S0 Partizan; system32\drivers\Partizan.sys [X]
S0 rqqahwf; System32\drivers\ntsw.sys [X]
S1 SBRE; \SystemRoot\system32\drivers\SBREDrv.sys [X]
S3 SMUpdd; \??\C:\Program Files\Common Files\Soobzo\GDUpdate\smw.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
 
==================== NetSvcs (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
 
==================== One Month Created files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2016-04-02 17:15 - 2016-04-02 17:15 - 00000000 ____D C:\FRST
2016-03-28 19:49 - 2016-03-28 19:49 - 00140488 _____ C:\Windows\Minidump\032816-29296-01.dmp
2016-03-27 21:26 - 2016-03-27 22:05 - 00002102 _____ C:\Users\ADMIN'\Desktop\Snail Translator.lnk
2016-03-27 21:26 - 2016-03-27 21:26 - 00000000 ____D C:\Windows\Snail Translator
2016-03-27 21:20 - 2016-03-27 22:05 - 00001958 _____ C:\Users\ADMIN'\Desktop\Gmail.lnk
2016-03-27 21:19 - 2016-03-27 21:19 - 00000000 ____D C:\Program Files\Common Files\Soobzo
2016-03-27 21:15 - 2016-03-27 22:04 - 00000000 ____D C:\Program Files\msrtn32
2016-03-27 21:14 - 2016-03-27 21:14 - 00000000 ____D C:\Program Files\basicData
2016-03-27 21:13 - 2016-03-27 22:04 - 00000000 ____D C:\Program Files\S5
2016-03-27 21:13 - 2016-03-27 21:13 - 00000000 ____D C:\Users\ADMIN'\AppData\Roaming\c
2016-03-27 21:04 - 2016-03-28 19:49 - 210154689 ____N C:\Windows\MEMORY.DMP
2016-03-27 20:52 - 2016-03-27 22:05 - 00001032 _____ C:\Users\Public\Desktop\KNCTR.lnk
2016-03-27 20:52 - 2016-03-27 21:12 - 00000000 ____D C:\Users\ADMIN'\AppData\Local\app
2016-03-27 20:52 - 2016-03-27 20:52 - 00000000 ____D C:\Program Files\Itibiti Soft Phone
2016-03-27 20:50 - 2016-03-30 14:41 - 00000000 ____D C:\Program Files\ContentPush
2016-03-27 20:50 - 2016-03-27 22:05 - 00000000 ____D C:\Users\ADMIN'\AppData\Roaming\Store
2016-03-27 20:50 - 2016-03-27 20:50 - 06000640 _____ C:\Program Files\GUTC958.tmp
2016-03-27 20:50 - 2016-03-27 20:50 - 00631808 _____ C:\Windows\clb.dat
2016-03-27 20:50 - 2016-03-27 20:50 - 00000000 ____D C:\Program Files\GUMC919.tmp
2016-03-27 20:49 - 2016-03-27 21:25 - 00000000 ____D C:\Users\ADMIN'\AppData\Local\Setup Wizard
2016-03-27 20:41 - 2016-03-27 20:41 - 00000192 _____ C:\Windows\wininit.ini
2016-03-26 20:58 - 2016-03-26 20:58 - 00026485 _____ C:\Users\ADMIN'\Desktop\the-revenant-2015-dvdscr-xvid-ac3-etrg-english-74863.zip
2016-03-26 20:58 - 2015-12-26 08:32 - 00068720 _____ C:\Users\ADMIN'\Desktop\The.Revenant.2015.DVDScr.XviD.AC3-ETRG.srt
2016-03-21 11:29 - 2016-03-21 11:29 - 00000000 ____D C:\Users\Bryan\AppData\Roaming\Apple Computer
2016-03-21 11:29 - 2016-03-21 11:29 - 00000000 ____D C:\Users\Bryan\AppData\Local\Apple Computer
2016-03-21 11:28 - 2016-03-21 11:28 - 50545909 _____ C:\Users\Bryan\Downloads\Hotline Bling.flp
2016-03-18 15:38 - 2016-03-18 15:38 - 00000000 ____D C:\Users\Exist\AppData\Local\Paint.NET
2016-03-15 20:24 - 2016-03-15 20:24 - 00068259 _____ C:\Users\Bryan\Downloads\Untitled document.pdf
2016-03-15 19:58 - 2016-03-15 19:58 - 00000000 ____D C:\Users\Bryan\AppData\Roaming\Macromedia
2016-03-15 19:58 - 2016-03-15 19:58 - 00000000 ____D C:\Users\Bryan\AppData\Roaming\Adobe
2016-03-15 19:09 - 2016-03-15 19:09 - 00000000 ____D C:\Users\Bryan\AppData\Local\GWX
2016-03-14 19:39 - 2016-03-14 19:40 - 00000000 ____D C:\Windows\rescache
2016-03-14 18:34 - 2016-03-14 18:34 - 00000000 ____D C:\Users\Walter\AppData\LocalLow\Adobe
2016-03-14 18:34 - 2016-03-14 18:34 - 00000000 ____D C:\Users\Walter\AppData\Local\CEF
2016-03-14 18:34 - 2016-03-14 18:34 - 00000000 ____D C:\Users\Walter\AppData\Local\Adobe
2016-03-14 18:31 - 2016-03-14 18:31 - 00000000 ____D C:\Users\Walter\AppData\Roaming\Apple Computer
2016-03-14 18:31 - 2016-03-14 18:31 - 00000000 ____D C:\Users\Walter\AppData\Local\Apple Computer
2016-03-14 18:22 - 2016-03-14 18:59 - 00000000 ____D C:\Users\Walter\Desktop\1
2016-03-14 17:58 - 2016-03-14 17:58 - 00000000 ____D C:\Program Files\New folder
2016-03-14 17:51 - 2016-03-14 17:51 - 00000000 ____D C:\Users\Walter\AppData\Roaming\iolo
2016-03-14 17:46 - 2016-03-14 17:46 - 00000000 ____D C:\Users\Walter\AppData\Roaming\WinRAR
2016-03-14 17:45 - 2016-03-14 18:34 - 00000000 ____D C:\Users\Walter\AppData\Roaming\Adobe
2016-03-14 17:45 - 2016-03-14 17:55 - 00000000 ____D C:\Users\Walter\AppData\Local\CrashDumps
2016-03-14 17:38 - 2016-03-14 17:38 - 00000000 ____D C:\Users\Walter\AppData\Roaming\Sun
2016-03-14 17:38 - 2016-03-14 17:38 - 00000000 ____D C:\Users\Walter\AppData\LocalLow\Sun
2016-03-14 17:38 - 2016-03-14 17:38 - 00000000 ____D C:\Users\Walter\.oracle_jre_usage
2016-03-14 17:33 - 2016-03-14 18:16 - 00163712 _____ C:\Users\Walter\AppData\Local\GDIPFONTCACHEV1.DAT
2016-03-14 17:33 - 2016-03-14 17:33 - 00000000 ____D C:\Users\Walter\AppData\Local\Wondershare
2016-03-14 17:32 - 2016-03-14 17:34 - 00000000 ____D C:\Users\Walter\AppData\Local\Google
2016-03-14 17:32 - 2016-03-14 17:32 - 00000632 __RSH C:\Users\Walter\ntuser.pol
2016-03-10 16:59 - 2016-03-10 17:00 - 278483620 _____ C:\Users\Exist\Downloads\[99Sounds] Project Exodus.rar
2016-03-09 17:02 - 2016-02-09 01:50 - 00021504 _____ (Microsoft Corporation) C:\Windows\System32\seclogon.dll
2016-03-09 17:02 - 2016-02-04 09:46 - 02387456 _____ (Microsoft Corporation) C:\Windows\System32\win32k.sys
2016-03-09 17:01 - 2016-02-11 10:44 - 03994560 _____ (Microsoft Corporation) C:\Windows\System32\ntkrnlpa.exe
2016-03-09 17:01 - 2016-02-11 10:44 - 03938240 _____ (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2016-03-09 17:01 - 2016-02-11 10:44 - 00138176 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ksecpkg.sys
2016-03-09 17:01 - 2016-02-11 10:44 - 00067520 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ksecdd.sys
2016-03-09 17:01 - 2016-02-11 10:41 - 01310232 _____ (Microsoft Corporation) C:\Windows\System32\ntdll.dll
2016-03-09 17:01 - 2016-02-11 10:38 - 00171520 _____ (Microsoft Corporation) C:\Windows\System32\wdigest.dll
2016-03-09 17:01 - 2016-02-11 10:38 - 00065536 _____ (Microsoft Corporation) C:\Windows\System32\TSpkg.dll
2016-03-09 17:01 - 2016-02-11 10:37 - 00654336 _____ (Microsoft Corporation) C:\Windows\System32\rpcrt4.dll
2016-03-09 17:01 - 2016-02-11 10:37 - 00400896 _____ (Microsoft Corporation) C:\Windows\System32\srcore.dll
2016-03-09 17:01 - 2016-02-11 10:37 - 00251392 _____ (Microsoft Corporation) C:\Windows\System32\schannel.dll
2016-03-09 17:01 - 2016-02-11 10:37 - 00099840 _____ (Microsoft Corporation) C:\Windows\System32\sspicli.dll
2016-03-09 17:01 - 2016-02-11 10:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\System32\srclient.dll
2016-03-09 17:01 - 2016-02-11 10:37 - 00022016 _____ (Microsoft Corporation) C:\Windows\System32\secur32.dll
2016-03-09 17:01 - 2016-02-11 10:35 - 00259584 _____ (Microsoft Corporation) C:\Windows\System32\msv1_0.dll
2016-03-09 17:01 - 2016-02-11 10:35 - 00223232 _____ (Microsoft Corporation) C:\Windows\System32\ncrypt.dll
2016-03-09 17:01 - 2016-02-11 10:35 - 00060416 _____ (Microsoft Corporation) C:\Windows\System32\msobjs.dll
2016-03-09 17:01 - 2016-02-11 10:34 - 00146432 _____ (Microsoft Corporation) C:\Windows\System32\msaudite.dll
2016-03-09 17:01 - 2016-02-11 10:33 - 01060864 _____ (Microsoft Corporation) C:\Windows\System32\lsasrv.dll
2016-03-09 17:01 - 2016-02-11 10:33 - 00553472 _____ (Microsoft Corporation) C:\Windows\System32\kerberos.dll
2016-03-09 17:01 - 2016-02-11 10:31 - 00038912 _____ (Microsoft Corporation) C:\Windows\System32\csrsrv.dll
2016-03-09 17:01 - 2016-02-11 10:31 - 00017408 _____ (Microsoft Corporation) C:\Windows\System32\credssp.dll
2016-03-09 17:01 - 2016-02-11 10:30 - 00686080 _____ (Microsoft Corporation) C:\Windows\System32\adtschema.dll
2016-03-09 17:01 - 2016-02-11 10:30 - 00642560 _____ (Microsoft Corporation) C:\Windows\System32\advapi32.dll
2016-03-09 17:01 - 2016-02-11 10:30 - 00006656 _____ (Microsoft Corporation) C:\Windows\System32\apisetschema.dll
2016-03-09 17:01 - 2016-02-11 09:43 - 00050176 _____ (Microsoft Corporation) C:\Windows\System32\auditpol.exe
2016-03-09 17:01 - 2016-02-11 09:37 - 00262656 _____ (Microsoft Corporation) C:\Windows\System32\rstrui.exe
2016-03-09 17:01 - 2016-02-11 09:32 - 00225792 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb10.sys
2016-03-09 17:01 - 2016-02-11 09:32 - 00124416 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb.sys
2016-03-09 17:01 - 2016-02-11 09:32 - 00098304 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb20.sys
2016-03-09 17:01 - 2016-02-11 09:31 - 00036352 _____ (Microsoft Corporation) C:\Windows\System32\cryptbase.dll
2016-03-09 17:01 - 2016-02-11 09:30 - 00069632 _____ (Microsoft Corporation) C:\Windows\System32\smss.exe
2016-03-09 17:01 - 2016-02-11 09:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\System32\lsass.exe
2016-03-09 17:01 - 2016-02-11 09:30 - 00015872 _____ (Microsoft Corporation) C:\Windows\System32\sspisrv.dll
2016-03-09 17:00 - 2016-02-08 22:10 - 00341200 _____ (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2016-03-09 17:00 - 2016-02-08 13:05 - 20352512 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2016-03-09 17:00 - 2016-02-08 12:51 - 02724864 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2016-03-09 17:00 - 2016-02-08 12:51 - 00004096 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollectorres.dll
2016-03-09 17:00 - 2016-02-08 12:39 - 00496640 _____ (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2016-03-09 17:00 - 2016-02-08 12:39 - 00062464 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2016-03-09 17:00 - 2016-02-08 12:38 - 00341504 _____ (Microsoft Corporation) C:\Windows\System32\html.iec
2016-03-09 17:00 - 2016-02-08 12:38 - 00047616 _____ (Microsoft Corporation) C:\Windows\System32\ieetwproxystub.dll
2016-03-09 17:00 - 2016-02-08 12:37 - 00064000 _____ (Microsoft Corporation) C:\Windows\System32\MshtmlDac.dll
2016-03-09 17:00 - 2016-02-08 12:34 - 02280448 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2016-03-09 17:00 - 2016-02-08 12:32 - 00047104 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2016-03-09 17:00 - 2016-02-08 12:31 - 00030720 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2016-03-09 17:00 - 2016-02-08 12:30 - 00476160 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll
2016-03-09 17:00 - 2016-02-08 12:28 - 00663552 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll
2016-03-09 17:00 - 2016-02-08 12:28 - 00620032 _____ (Microsoft Corporation) C:\Windows\System32\jscript9diag.dll
2016-03-09 17:00 - 2016-02-08 12:28 - 00115712 _____ (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2016-03-09 17:00 - 2016-02-08 12:28 - 00102912 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollector.exe
2016-03-09 17:00 - 2016-02-08 12:23 - 00667648 _____ (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2016-03-09 17:00 - 2016-02-08 12:20 - 00416256 _____ (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2016-03-09 17:00 - 2016-02-08 12:16 - 00060416 _____ (Microsoft Corporation) C:\Windows\System32\JavaScriptCollectionAgent.dll
2016-03-09 17:00 - 2016-02-08 12:15 - 00091136 _____ (Microsoft Corporation) C:\Windows\System32\inseng.dll
2016-03-09 17:00 - 2016-02-08 12:13 - 00168960 _____ (Microsoft Corporation) C:\Windows\System32\msrating.dll
2016-03-09 17:00 - 2016-02-08 12:12 - 00076288 _____ (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2016-03-09 17:00 - 2016-02-08 12:11 - 00279040 _____ (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2016-03-09 17:00 - 2016-02-08 12:10 - 04611072 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2016-03-09 17:00 - 2016-02-08 12:10 - 00130048 _____ (Microsoft Corporation) C:\Windows\System32\occache.dll
2016-03-09 17:00 - 2016-02-08 12:03 - 00230400 _____ (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2016-03-09 17:00 - 2016-02-08 12:02 - 13012480 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2016-03-09 17:00 - 2016-02-08 12:02 - 00687104 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2016-03-09 17:00 - 2016-02-08 12:02 - 00684032 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2016-03-09 17:00 - 2016-02-08 12:01 - 02050560 _____ (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2016-03-09 17:00 - 2016-02-08 12:01 - 01155072 _____ (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2016-03-09 17:00 - 2016-02-08 11:43 - 02121216 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2016-03-09 17:00 - 2016-02-08 11:39 - 01311744 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2016-03-09 17:00 - 2016-02-08 11:38 - 00710144 _____ (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2016-03-08 16:01 - 2016-03-23 20:17 - 00000000 ____D C:\Users\Exist\AppData\Local\CrashDumps
2016-03-08 12:43 - 2016-02-19 10:50 - 00034240 _____ (Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
2016-03-08 12:43 - 2016-02-19 10:41 - 00958464 _____ (Microsoft Corporation) C:\Windows\System32\aeinv.dll
2016-03-08 12:43 - 2016-02-19 06:07 - 01206784 _____ (Microsoft Corporation) C:\Windows\System32\appraiser.dll
2016-03-08 12:43 - 2016-02-12 10:39 - 02956288 _____ (Microsoft Corporation) C:\Windows\System32\wucltux.dll
2016-03-08 12:43 - 2016-02-12 10:39 - 00174080 _____ (Microsoft Corporation) C:\Windows\System32\wuwebv.dll
2016-03-08 12:43 - 2016-02-12 10:26 - 00073728 _____ (Microsoft Corporation) C:\Windows\System32\WinSetupUI.dll
2016-03-08 12:43 - 2016-02-12 10:07 - 02062848 _____ (Microsoft Corporation) C:\Windows\System32\wuaueng.dll
2016-03-08 12:43 - 2016-02-12 10:06 - 00573440 _____ (Microsoft Corporation) C:\Windows\System32\wuapi.dll
2016-03-08 12:43 - 2016-02-12 10:05 - 00136192 _____ (Microsoft Corporation) C:\Windows\System32\wuauclt.exe
2016-03-08 12:43 - 2016-02-12 10:05 - 00093696 _____ (Microsoft Corporation) C:\Windows\System32\wudriver.dll
2016-03-08 12:43 - 2016-02-12 10:05 - 00035840 _____ (Microsoft Corporation) C:\Windows\System32\wups2.dll
2016-03-08 12:43 - 2016-02-12 10:05 - 00035328 _____ (Microsoft Corporation) C:\Windows\System32\wuapp.exe
2016-03-08 12:43 - 2016-02-12 10:05 - 00030208 _____ (Microsoft Corporation) C:\Windows\System32\wups.dll
2016-03-08 12:43 - 2016-02-12 10:05 - 00011776 _____ (Microsoft Corporation) C:\Windows\System32\wu.upgrade.ps.dll
2016-03-08 12:43 - 2016-02-11 06:07 - 00552960 _____ (Microsoft Corporation) C:\Windows\System32\generaltel.dll
2016-03-08 12:43 - 2016-02-09 01:51 - 12625408 _____ (Microsoft Corporation) C:\Windows\System32\wmploc.DLL
2016-03-08 12:43 - 2016-02-09 01:51 - 11411456 _____ (Microsoft Corporation) C:\Windows\System32\wmp.dll
2016-03-08 12:43 - 2016-02-09 01:13 - 00008192 _____ (Microsoft Corporation) C:\Windows\System32\spwmp.dll
2016-03-08 12:43 - 2016-02-09 01:13 - 00004096 _____ (Microsoft Corporation) C:\Windows\System32\msdxm.ocx
2016-03-08 12:43 - 2016-02-09 01:13 - 00004096 _____ (Microsoft Corporation) C:\Windows\System32\dxmasf.dll
2016-03-08 12:43 - 2016-02-05 10:44 - 00070656 _____ (Microsoft Corporation) C:\Windows\System32\fontsub.dll
2016-03-08 12:43 - 2016-02-05 10:44 - 00026112 _____ (Microsoft Corporation) C:\Windows\System32\lpk.dll
2016-03-08 12:43 - 2016-02-05 10:42 - 00010240 _____ (Microsoft Corporation) C:\Windows\System32\dciman32.dll
2016-03-08 12:43 - 2016-02-05 09:43 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\System32\atmfd.dll
2016-03-08 12:43 - 2016-02-05 09:43 - 00034304 _____ (Adobe Systems) C:\Windows\System32\atmlib.dll
2016-03-08 12:43 - 2016-02-05 06:07 - 00591872 _____ (Microsoft Corporation) C:\Windows\System32\invagent.dll
2016-03-08 12:43 - 2016-02-05 06:07 - 00424960 _____ (Microsoft Corporation) C:\Windows\System32\devinv.dll
2016-03-08 12:43 - 2016-02-05 06:07 - 00065536 _____ (Microsoft Corporation) C:\Windows\System32\acmigration.dll
2016-03-08 12:43 - 2016-02-04 10:41 - 00296448 _____ (Microsoft Corporation) C:\Windows\System32\mfds.dll
2016-03-08 12:43 - 2016-02-03 10:49 - 00572416 _____ (Microsoft Corporation) C:\Windows\System32\oleaut32.dll
2016-03-08 12:43 - 2016-02-03 10:49 - 00090624 _____ (Microsoft Corporation) C:\Windows\System32\olepro32.dll
2016-03-08 12:43 - 2016-02-03 10:43 - 00067584 _____ (Microsoft Corporation) C:\Windows\System32\asycfilt.dll
2016-03-08 12:43 - 2016-02-03 09:59 - 00076288 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\USBSTOR.SYS
2016-03-08 12:43 - 2016-01-11 10:54 - 01212352 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ntfs.sys
2016-03-08 12:43 - 2015-11-19 06:06 - 00922432 _____ (Microsoft Corporation) C:\Windows\System32\ucrtbase.dll
2016-03-08 12:43 - 2015-11-19 06:06 - 00066400 _____ (Microsoft Corporation) C:\Windows\System32\api-ms-win-crt-private-l1-1-0.dll
2016-03-08 12:43 - 2015-11-19 06:06 - 00022368 _____ (Microsoft Corporation) C:\Windows\System32\api-ms-win-crt-math-l1-1-0.dll
2016-03-08 12:43 - 2015-11-19 06:06 - 00019808 _____ (Microsoft Corporation) C:\Windows\System32\api-ms-win-crt-multibyte-l1-1-0.dll
2016-03-08 12:43 - 2015-11-19 06:06 - 00017760 _____ (Microsoft Corporation) C:\Windows\System32\api-ms-win-crt-string-l1-1-0.dll
2016-03-08 12:43 - 2015-11-19 06:06 - 00017760 _____ (Microsoft Corporation) C:\Windows\System32\api-ms-win-crt-stdio-l1-1-0.dll
2016-03-08 12:43 - 2015-11-19 06:06 - 00016224 _____ (Microsoft Corporation) C:\Windows\System32\api-ms-win-crt-runtime-l1-1-0.dll
2016-03-08 12:43 - 2015-11-19 06:06 - 00015712 _____ (Microsoft Corporation) C:\Windows\System32\api-ms-win-crt-convert-l1-1-0.dll
2016-03-08 12:43 - 2015-11-19 06:06 - 00014176 _____ (Microsoft Corporation) C:\Windows\System32\api-ms-win-crt-time-l1-1-0.dll
2016-03-08 12:43 - 2015-11-19 06:06 - 00014176 _____ (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-localization-l1-2-0.dll
2016-03-08 12:43 - 2015-11-19 06:06 - 00013664 _____ (Microsoft Corporation) C:\Windows\System32\api-ms-win-crt-filesystem-l1-1-0.dll
2016-03-08 12:43 - 2015-11-19 06:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\System32\api-ms-win-crt-process-l1-1-0.dll
2016-03-08 12:43 - 2015-11-19 06:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\System32\api-ms-win-crt-heap-l1-1-0.dll
2016-03-08 12:43 - 2015-11-19 06:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\System32\api-ms-win-crt-conio-l1-1-0.dll
2016-03-08 12:43 - 2015-11-19 06:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\System32\api-ms-win-crt-utility-l1-1-0.dll
2016-03-08 12:43 - 2015-11-19 06:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\System32\api-ms-win-crt-locale-l1-1-0.dll
2016-03-08 12:43 - 2015-11-19 06:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\System32\api-ms-win-crt-environment-l1-1-0.dll
2016-03-08 12:43 - 2015-11-19 06:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-synch-l1-2-0.dll
2016-03-08 12:43 - 2015-11-19 06:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-processthreads-l1-1-1.dll
2016-03-08 12:43 - 2015-11-19 06:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-xstate-l2-1-0.dll
2016-03-08 12:43 - 2015-11-19 06:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-timezone-l1-1-0.dll
2016-03-08 12:43 - 2015-11-19 06:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-file-l2-1-0.dll
2016-03-08 12:43 - 2015-11-19 06:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-file-l1-2-0.dll
 
==================== One Month Modified files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2016-04-02 16:08 - 2009-07-13 20:34 - 00026768 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-04-02 16:08 - 2009-07-13 20:34 - 00026768 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-04-02 16:07 - 2010-11-20 13:01 - 00689024 _____ C:\Windows\System32\PerfStringBackup.INI
2016-04-02 16:07 - 2009-07-13 18:37 - 00000000 ____D C:\Windows\inf
2016-04-02 14:18 - 2015-11-07 12:19 - 01150906 _____ C:\Windows\ntbtlog.txt
2016-03-31 18:06 - 2013-06-09 10:16 - 00000000 ____D C:\Users\ADMIN'\AppData\Roaming\DiskDefrag
2016-03-28 19:49 - 2013-06-17 14:17 - 00000000 ____D C:\Windows\Minidump
2016-03-27 22:07 - 2009-07-13 18:37 - 00000000 ____D C:\Windows\L2Schemas
2016-03-27 22:05 - 2016-01-28 19:12 - 00002000 _____ C:\Users\Public\Desktop\Google Slides.lnk
2016-03-27 22:05 - 2016-01-28 19:12 - 00001998 _____ C:\Users\Public\Desktop\Google Sheets.lnk
2016-03-27 22:05 - 2016-01-28 19:12 - 00001988 _____ C:\Users\Public\Desktop\Google Docs.lnk
2016-03-27 22:05 - 2016-01-05 20:13 - 00000917 _____ C:\Users\Public\Desktop\TeamViewer 11.lnk
2016-03-27 22:05 - 2015-10-28 20:26 - 00000969 _____ C:\Users\Public\Desktop\BitComet.lnk
2016-03-27 22:05 - 2015-10-10 18:38 - 00001036 _____ C:\Users\Public\Desktop\4Card Recovery.lnk
2016-03-27 22:05 - 2015-07-25 11:05 - 00001410 _____ C:\Users\Public\Desktop\Wondershare Video Converter Ultimate.lnk
2016-03-27 22:05 - 2015-07-25 11:05 - 00001388 _____ C:\Users\Public\Desktop\Wondershare Media Server.lnk
2016-03-27 22:05 - 2015-07-23 19:38 - 00001292 _____ C:\Users\Public\Desktop\WinX DVD Ripper Platinum.lnk
2016-03-27 22:05 - 2015-07-03 13:54 - 00001023 _____ C:\Users\ADMIN'\Desktop\proXPN.lnk
2016-03-27 22:05 - 2015-07-03 12:27 - 00002290 _____ C:\Users\ADMIN'\Desktop\Chrome App Launcher.lnk
2016-03-27 22:05 - 2015-07-03 10:18 - 00001815 _____ C:\Users\Public\Desktop\QuickTime Player.lnk
2016-03-27 22:05 - 2015-06-06 09:43 - 00001137 _____ C:\Users\ADMIN'\Desktop\System Checkup.lnk
2016-03-27 22:05 - 2015-05-10 17:47 - 00001248 _____ C:\Users\ADMIN'\Desktop\Adobe Photoshop CC 2014 (32 Bit).lnk
2016-03-27 22:05 - 2015-05-10 17:10 - 00001354 _____ C:\Users\Public\Desktop\Adobe Application Manager.lnk
2016-03-27 22:05 - 2015-05-03 17:22 - 00001122 _____ C:\Users\ADMIN'\Desktop\PC Wizard 2013.lnk
2016-03-27 22:05 - 2015-04-11 10:37 - 00002017 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk
2016-03-27 22:05 - 2015-03-11 21:52 - 00000418 _____ C:\Users\Public\Desktop\Logitech Harmony Remote Software 7.lnk
2016-03-27 22:05 - 2015-02-07 14:35 - 00002205 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-03-27 22:05 - 2015-01-19 15:26 - 00000969 _____ C:\Users\Public\Desktop\Cool Edit Pro 2.1.lnk
2016-03-27 22:05 - 2014-12-20 13:46 - 00001765 _____ C:\Users\Public\Desktop\Start BlueStacks.lnk
2016-03-27 22:05 - 2014-12-20 13:45 - 00001806 _____ C:\Users\Public\Desktop\Apps.lnk
2016-03-27 22:05 - 2014-12-06 20:30 - 00002028 _____ C:\Users\Public\Desktop\FoneLab.lnk
2016-03-27 22:05 - 2014-11-19 22:31 - 00001753 _____ C:\Users\Public\Desktop\iTunes.lnk
2016-03-27 22:05 - 2014-06-22 15:03 - 00002563 _____ C:\Users\Public\Desktop\MIDI-OX.lnk
2016-03-27 22:05 - 2014-05-17 13:15 - 00001990 _____ C:\Users\Public\Desktop\FL Studio 11.lnk
2016-03-27 22:05 - 2014-05-14 20:49 - 00001042 _____ C:\Users\Public\Desktop\Glary Utilities 5.lnk
2016-03-27 22:05 - 2014-05-03 12:49 - 00001064 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-03-27 22:05 - 2014-05-03 12:49 - 00001020 _____ C:\Users\Public\Desktop\Google Drive.lnk
2016-03-27 22:05 - 2014-05-03 12:47 - 00001068 _____ C:\Users\Public\Desktop\Picasa 3.lnk
2016-03-27 22:05 - 2014-05-03 12:41 - 00001131 _____ C:\Users\ADMIN'\Desktop\Auslogics DiskDefrag.lnk
2016-03-27 22:05 - 2014-05-03 11:59 - 00000606 _____ C:\Users\ADMIN'\Desktop\LiberKey.lnk
2016-03-27 22:05 - 2014-05-03 11:38 - 00002145 _____ C:\Users\ADMIN'\Desktop\System Mechanic.lnk
2016-03-27 22:05 - 2014-04-20 17:55 - 00000934 _____ C:\Users\Public\Desktop\EPSON Scan.lnk
2016-03-27 22:05 - 2014-03-08 11:03 - 00001211 _____ C:\Users\ADMIN'\Desktop\Product Key Explorer.lnk
2016-03-27 22:05 - 2014-02-15 13:00 - 00002105 _____ C:\Users\Public\Desktop\CyberLink YouCam 6.lnk
2016-03-27 22:05 - 2014-02-09 19:18 - 00002501 _____ C:\Users\Public\Desktop\TurboTax 2013.lnk
2016-03-27 22:05 - 2014-02-06 20:35 - 00000951 _____ C:\Users\Public\Desktop\Registry First Aid.lnk
2016-03-27 22:05 - 2014-02-02 10:22 - 00000677 _____ C:\Users\Public\Desktop\Keyboarding Pro™ 5 - Single.lnk
2016-03-27 22:05 - 2013-12-21 09:59 - 00001115 _____ C:\Users\Public\Desktop\Wise PC 1stAid.lnk
2016-03-27 22:05 - 2013-12-21 09:57 - 00001178 _____ C:\Users\Public\Desktop\Wise Data Recovery.lnk
2016-03-27 22:05 - 2013-12-09 22:00 - 00001321 _____ C:\Users\Public\Desktop\EASEUS Data Recovery Wizard Professional 5.5.1.lnk
2016-03-27 22:05 - 2013-11-04 20:55 - 00001028 _____ C:\Users\Public\Desktop\VLC media player.lnk
2016-03-27 22:05 - 2013-10-27 09:03 - 00001071 _____ C:\Users\ADMIN'\Desktop\Songr.lnk
2016-03-27 22:05 - 2013-10-26 18:37 - 00001176 _____ C:\Users\Public\Desktop\Paint.NET.lnk
2016-03-27 22:05 - 2013-10-20 08:31 - 00001131 _____ C:\Users\ADMIN'\Desktop\Auslogics BoostSpeed.lnk
2016-03-27 22:05 - 2013-09-21 11:01 - 00000969 _____ C:\Users\ADMIN'\Desktop\SpeedFan.lnk
2016-03-27 22:05 - 2013-09-08 09:00 - 00001149 _____ C:\Users\ADMIN'\Desktop\Nero Express.lnk
2016-03-27 22:05 - 2013-09-02 14:48 - 00000993 _____ C:\Users\ADMIN'\Desktop\WhoCrashed.lnk
2016-03-27 22:05 - 2013-08-25 09:43 - 00001688 _____ C:\Users\ADMIN'\Desktop\Google Drive.lnk
2016-03-27 22:05 - 2013-08-04 10:55 - 00002031 _____ C:\Users\Public\Desktop\PerfectDisk 12.5.lnk
2016-03-27 22:05 - 2013-07-28 10:10 - 00001212 _____ C:\Users\Public\Desktop\AOMEI Partition Assistant Pro Edition 5.2.lnk
2016-03-27 22:05 - 2013-07-13 12:51 - 00001582 _____ C:\Users\Public\Desktop\Logitech Webcam Software  .lnk
2016-03-27 22:05 - 2013-07-13 12:23 - 00002503 _____ C:\Users\Public\Desktop\Skype.lnk
2016-03-27 22:05 - 2013-07-06 08:23 - 00001065 _____ C:\Users\Public\Desktop\RapidTyping.lnk
2016-03-27 22:05 - 2013-07-04 11:48 - 00001226 _____ C:\Users\ADMIN'\Desktop\Revo Uninstaller.lnk
2016-03-27 22:05 - 2013-06-15 11:42 - 00001049 _____ C:\Users\Public\Desktop\WinTV 7.lnk
2016-03-27 22:05 - 2013-06-15 09:39 - 00001963 _____ C:\Users\Public\Desktop\TotalMedia 3.5.lnk
2016-03-27 22:05 - 2013-04-20 10:38 - 00002170 _____ C:\Users\Public\Desktop\Google Earth.lnk
2016-03-27 22:05 - 2013-04-16 20:07 - 00002785 _____ C:\Users\Public\Desktop\Nero Video 12.lnk
2016-03-27 22:05 - 2013-04-16 20:05 - 00002055 _____ C:\Users\Public\Desktop\Nero Kwik Media.lnk
2016-03-27 22:05 - 2013-04-16 20:03 - 00002857 _____ C:\Users\Public\Desktop\Nero 12.lnk
2016-03-27 22:05 - 2013-04-16 20:02 - 00002831 _____ C:\Users\Public\Desktop\Nero Burning ROM 12.lnk
2016-03-27 22:05 - 2013-04-13 14:26 - 00001292 _____ C:\Users\ADMIN'\Desktop\Auslogics Internet Optimizer.lnk
2016-03-27 22:05 - 2013-03-24 12:35 - 00001186 _____ C:\Users\Public\Desktop\EaseUS Data Recovery Wizard 5.8.5 .lnk
2016-03-27 22:05 - 2013-03-20 18:13 - 00001142 _____ C:\Users\Public\Desktop\Alcohol 120%.lnk
2016-03-27 22:05 - 2013-03-05 22:00 - 00001212 _____ C:\Users\ADMIN'\Desktop\Calculator.lnk
2016-03-27 22:05 - 2013-03-03 14:35 - 00001111 _____ C:\Users\Public\Desktop\Yahoo! Messenger.lnk
2016-03-27 22:05 - 2013-03-03 14:05 - 00001109 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-03-27 22:05 - 2013-03-02 16:08 - 00002182 _____ C:\Users\Public\Desktop\Roxio Creator Home.lnk
2016-03-27 22:05 - 2013-03-02 16:05 - 00001993 _____ C:\Users\Public\Desktop\CyberLink PowerDVD.lnk
2016-03-27 21:36 - 2014-07-12 09:56 - 00170200 _____ (Malwarebytes) C:\Windows\System32\Drivers\MBAMSwissArmy.sys
2016-03-27 21:29 - 2014-07-28 20:25 - 00000000 ____D C:\Users\ADMIN'\AppData\Local\CrashDumps
2016-03-27 21:28 - 2013-03-03 13:20 - 00000000 ____D C:\Users\ADMIN'\AppData\Roaming\BitComet
2016-03-27 21:07 - 2015-03-28 19:47 - 00000000 ____D C:\Program Files\McAfee
2016-03-27 21:07 - 2015-03-28 16:07 - 00000000 ____D C:\Program Files\Common Files\McAfee
2016-03-27 20:52 - 2015-03-28 19:51 - 00000000 ____D C:\Users\ADMIN'\AppData\LocalLow\SafeKey
2016-03-27 20:50 - 2013-03-02 16:48 - 00000000 ____D C:\Users\ADMIN'\AppData\Local\Google
2016-03-27 19:38 - 2009-07-13 18:37 - 00000000 ____D C:\Windows\system
2016-03-27 19:09 - 2014-05-03 12:49 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Malware
2016-03-27 19:02 - 2013-03-02 16:03 - 00000000 ____D C:\Users\ADMIN'\AppData\Local\Adobe
2016-03-26 23:32 - 2013-03-03 15:10 - 00000000 ____D C:\Users\ADMIN'\AppData\Roaming\vlc
2016-03-24 16:44 - 2014-06-13 15:35 - 00000000 ____D C:\Users\Exist\Desktop\flp's
2016-03-23 21:54 - 2015-04-04 00:40 - 00000000 ___SD C:\Windows\System32\GWX
2016-03-21 11:05 - 2016-01-21 19:27 - 00000000 ____D C:\Users\Bryan\AppData\Local\CrashDumps
2016-03-18 15:16 - 2014-08-15 14:47 - 00000000 ____D C:\Users\Exist\Desktop\beats
2016-03-18 14:11 - 2009-07-13 18:04 - 00000630 _____ C:\Windows\win.ini
2016-03-18 14:11 - 2009-07-13 18:04 - 00000241 _____ C:\Windows\system.ini
2016-03-15 19:38 - 2016-02-15 15:12 - 00000000 ____D C:\Users\Bryan\AppData\Roaming\iolo
2016-03-14 17:38 - 2013-06-08 13:48 - 00000000 ____D C:\users\Walter
2016-03-12 19:19 - 2013-03-03 14:35 - 00797376 _____ (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerApp.exe
2016-03-12 19:19 - 2013-03-03 14:35 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerCPLApp.cpl
2016-03-12 08:44 - 2016-02-14 11:45 - 00000000 ____D C:\Program Files\Mozilla Firefox
2016-03-10 13:09 - 2014-05-03 12:49 - 00053120 _____ (Malwarebytes Corporation) C:\Windows\System32\Drivers\mwac.sys
2016-03-10 13:08 - 2014-05-03 12:49 - 00126336 _____ (Malwarebytes) C:\Windows\System32\Drivers\mbamchameleon.sys
2016-03-10 13:08 - 2014-05-03 12:49 - 00024448 _____ (Malwarebytes) C:\Windows\System32\Drivers\mbam.sys
2016-03-09 21:32 - 2014-09-21 20:49 - 00543560 _____ C:\Windows\System32\FNTCACHE.DAT
2016-03-09 17:11 - 2016-02-25 15:10 - 07613334 _____ C:\Users\Exist\Downloads\FENIX X OHGEESY - CRAZY.m4a
2016-03-09 14:00 - 2013-03-03 14:05 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2016-03-08 18:29 - 2014-12-10 12:59 - 00000000 ____D C:\Windows\System32\appraiser
2016-03-08 17:18 - 2013-08-14 22:12 - 00000000 ____D C:\Windows\System32\MRT
2016-03-08 17:03 - 2013-03-03 14:45 - 141270216 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe
 
Some files in TEMP:
====================
C:\Users\ADMIN'\AppData\Local\Temp\7za.exe
C:\Users\ADMIN'\AppData\Local\Temp\catchme.dll
C:\Users\ADMIN'\AppData\Local\Temp\dxdiag.exe
C:\Users\ADMIN'\AppData\Local\Temp\IadHide5.dll
C:\Users\ADMIN'\AppData\Local\Temp\io1.exe
C:\Users\ADMIN'\AppData\Local\Temp\jre-8u66-windows-au.exe
C:\Users\ADMIN'\AppData\Local\Temp\jre-8u71-windows-au.exe
C:\Users\ADMIN'\AppData\Local\Temp\kts16.0.0.614en-gb.exe
C:\Users\ADMIN'\AppData\Local\Temp\LPPlugin.dll
C:\Users\ADMIN'\AppData\Local\Temp\McCSPInstall.dll
C:\Users\ADMIN'\AppData\Local\Temp\mccspuninstall.exe
C:\Users\ADMIN'\AppData\Local\Temp\namebench.exe
C:\Users\ADMIN'\AppData\Local\Temp\python27.dll
C:\Users\ADMIN'\AppData\Local\Temp\s5mark_setup_aid91tid336_20160318.exe
C:\Users\ADMIN'\AppData\Local\Temp\tcl85.dll
C:\Users\ADMIN'\AppData\Local\Temp\tk85.dll
C:\Users\ADMIN'\AppData\Local\Temp\Uninstall.exe
C:\Users\Exist\AppData\Local\Temp\IadHide5.dll
 
 
==================== Known DLLs (Whitelisted) =========================
 
 
==================== Bamital & volsnap =================
 
(There is no automatic fix for files that do not pass verification.)
 
C:\Windows\explorer.exe
[2016-02-09 14:33] - [2016-01-21 21:12] - 2973184 ____A (Microsoft Corporation) 2A156D5EBF221EF2A6AE7CE452324DAC
 
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe
[2015-05-12 13:12] - [2015-04-12 19:19] - 0259072 ____A (Microsoft Corporation) 0780A42DBD7D9969F9BF4A19AA4285B5
 
C:\Windows\System32\User32.dll
[2015-12-08 13:56] - [2015-11-10 10:39] - 0811520 ____A (Microsoft Corporation) 4C5A23AE4F5157F579C89736EA5D42CE
 
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\dnsapi.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
==================== EXE Association (Whitelisted) =============
 
 
==================== Restore Points  =========================
 
 
==================== Memory info =========================== 
 
Percentage of memory in use: 19%
Total physical RAM: 2557.61 MB
Available physical RAM: 2059.82 MB
Total Virtual: 2555.9 MB
Available Virtual: 2063.76 MB
 
==================== Drives ================================
 
Drive c: () (Fixed) (Total:74.41 GB) (Free:2.89 GB) NTFS
Drive d: (New Volume) (Fixed) (Total:232.88 GB) (Free:33.02 GB) NTFS
Drive g: (MULTIBOOT) (Removable) (Total:15.11 GB) (Free:3.14 GB) FAT32
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
Drive y: (System Reserved) (Fixed) (Total:0.1 GB) (Free:0.04 GB) NTFS ==>[system with boot components (obtained from drive)]
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 74.5 GB) (Disk ID: AB4C7F5F)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=74.4 GB) - (Type=07 NTFS)
 
========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 232.9 GB) (Disk ID: 54194EBA)
Partition 1: (Not Active) - (Size=232.9 GB) - (Type=07 NTFS)
 
========================================================
Disk: 2 (Size: 15.1 GB) (Disk ID: 04DD5721)
Partition 1: (Active) - (Size=15.1 GB) - (Type=0C)
Partition 4: (Not Active) - (Size=659 MB) - (Type=00)
 
 
LastRegBack: 2016-03-23 16:29
 
==================== End of FRST.txt ============================

  • 0

#3
emeraldnzl

emeraldnzl

    GeekU Instructor

  • GeekU Moderator
  • 20,008 posts

Hello pcme,

Welcome to Geekstogo.

Firstly

Did you install Teamviewer at some stage? Tell me when you come back.

For now

Download the attached fixlist.txt file and save it on the flashdrive as fixlist.txt

NOTE. It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work.

Please enter System Recovery Options, as we've done previously.
Run FRST64 and press the Fix button just once and wait.
The tool will make a log on the flashdrive (Fixlog.txt) please post it to your reply.

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

After that

Assuming you can now boot up normally please transfer FRST to your computers desktop and run another FRST scan with the Addition.txt box ticked and post back the two logs generated - FRST.txt and Addition.txt

So when you come back please post

  • Fixlog.txt
  • FRST.txt
  • Addition.txt
  • and tell me about Teamviewer

 

 

Attached Files


  • 0

#4
pcme

pcme

    Member

  • Topic Starter
  • Member
  • PipPip
  • 32 posts

hi emeraldnzl,

 

 thank you for your help

yes i did install teamviewer

i followed your instructions but still i can't boot up normally

here is the fixlog.txt 

Fix result of Farbar Recovery Scan Tool (x86) Version:05-03-2016 01
Ran by SYSTEM (2016-04-03 15:31:53) Run:1
Running from g:\
Boot Mode: Recovery
 
==============================================
 
fixlist content:
*****************
HKU\ADMIN'\...\Run: [Pritc] => C:\Users\ADMIN'\AppData\Local\Temp\is-06EDJ.tmp\print.exe <===== ATTENTION
GroupPolicyScripts: Restriction <======= ATTENTION
C:\Users\ADMIN'\AppData\Local\Temp\7za.exe
C:\Users\ADMIN'\AppData\Local\Temp\catchme.dll
C:\Users\ADMIN'\AppData\Local\Temp\dxdiag.exe
C:\Users\ADMIN'\AppData\Local\Temp\IadHide5.dll
C:\Users\ADMIN'\AppData\Local\Temp\io1.exe
C:\Users\ADMIN'\AppData\Local\Temp\jre-8u66-windows-au.exe
C:\Users\ADMIN'\AppData\Local\Temp\jre-8u71-windows-au.exe
C:\Users\ADMIN'\AppData\Local\Temp\kts16.0.0.614en-gb.exe
C:\Users\ADMIN'\AppData\Local\Temp\LPPlugin.dll
C:\Users\ADMIN'\AppData\Local\Temp\McCSPInstall.dll
C:\Users\ADMIN'\AppData\Local\Temp\mccspuninstall.exe
C:\Users\ADMIN'\AppData\Local\Temp\namebench.exe
C:\Users\ADMIN'\AppData\Local\Temp\python27.dll
C:\Users\ADMIN'\AppData\Local\Temp\s5mark_setup_aid91tid336_20160318.exe
C:\Users\ADMIN'\AppData\Local\Temp\tcl85.dll
C:\Users\ADMIN'\AppData\Local\Temp\tk85.dll
C:\Users\ADMIN'\AppData\Local\Temp\Uninstall.exe
C:\Users\Exist\AppData\Local\Temp\IadHide5.dll
 
*****************
 
HKU\ADMIN'\Software\Microsoft\Windows\CurrentVersion\Run\\Pritc => value not found.
C:\Windows\System32\GroupPolicy\Machine => moved successfully
C:\Windows\System32\GroupPolicy\GPT.ini => moved successfully
"C:\Users\ADMIN'\AppData\Local\Temp\7za.exe" => not found.
"C:\Users\ADMIN'\AppData\Local\Temp\catchme.dll" => not found.
"C:\Users\ADMIN'\AppData\Local\Temp\dxdiag.exe" => not found.
"C:\Users\ADMIN'\AppData\Local\Temp\IadHide5.dll" => not found.
"C:\Users\ADMIN'\AppData\Local\Temp\io1.exe" => not found.
"C:\Users\ADMIN'\AppData\Local\Temp\jre-8u66-windows-au.exe" => not found.
"C:\Users\ADMIN'\AppData\Local\Temp\jre-8u71-windows-au.exe" => not found.
"C:\Users\ADMIN'\AppData\Local\Temp\kts16.0.0.614en-gb.exe" => not found.
"C:\Users\ADMIN'\AppData\Local\Temp\LPPlugin.dll" => not found.
"C:\Users\ADMIN'\AppData\Local\Temp\McCSPInstall.dll" => not found.
"C:\Users\ADMIN'\AppData\Local\Temp\mccspuninstall.exe" => not found.
"C:\Users\ADMIN'\AppData\Local\Temp\namebench.exe" => not found.
"C:\Users\ADMIN'\AppData\Local\Temp\python27.dll" => not found.
"C:\Users\ADMIN'\AppData\Local\Temp\s5mark_setup_aid91tid336_20160318.exe" => not found.
"C:\Users\ADMIN'\AppData\Local\Temp\tcl85.dll" => not found.
"C:\Users\ADMIN'\AppData\Local\Temp\tk85.dll" => not found.
"C:\Users\ADMIN'\AppData\Local\Temp\Uninstall.exe" => not found.
"C:\Users\Exist\AppData\Local\Temp\IadHide5.dll" => not found.
 
==== End of Fixlog 15:31:54 ====

  • 0

#5
emeraldnzl

emeraldnzl

    GeekU Instructor

  • GeekU Moderator
  • 20,008 posts

yes i did install teamviewer


That's fine. It's a legitimate program but it is sometimes used by people of criminal intent for malicious purposes.

Moving on

Did you try booting to Safe Mode?

If not please try.

Boot into Safe Mode:

1) Restart your computer
2) After hearing your computer beep once during startup, but before the Windows icon appears, tap F8 continually.
3) If you are asked what mode to bootup in press Esc to boot in the default settings
4) Instead of Windows loading as normal, a menu should appear
5) Select the option to run Windows in Safe Mode.

If that works please proceed with the instruction to transfer FRST to the desktop and run the scans.

If it doesn't work please run another FRST scan from the flash drive as you did before and post back the log it generates.


  • 0

#6
pcme

pcme

    Member

  • Topic Starter
  • Member
  • PipPip
  • 32 posts

hi,

 

booting on safe mode didn't work

here is the new log

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:05-03-2016 01
Ran by SYSTEM on MININT-A7BMTM9 (03-04-2016 17:12:00)
Running from g:\
Platform: Windows 7 Ultimate Service Pack 1 (X86) Language: English (United States)
Internet Explorer Version 9
Boot Mode: Recovery
Default: ControlSet002
ATTENTION!:=====> If the system is bootable FRST must be run from normal or Safe mode to create a complete log.
 
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/
 
==================== Registry (Whitelisted) ===========================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Run: [APSDaemon] => "F:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
HKLM\...\Winlogon: [Userinit] F:\Windows\system32\userinit.exe,
HKU\castillo\...\RunOnce: [mctadmin] => F:\Windows\System32\mctadmin.exe
HKU\castillo.poderosa\...\RunOnce: [mctadmin] => F:\Windows\System32\mctadmin.exe
HKU\castillo.poderosa.000\...\Run: [LightScribe Control Panel] => F:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
HKU\castillo.poderosa.000\...\Run: [swg] => "F:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
HKU\castillo.poderosa.000\...\Run: [Facebook Update] => "F:\Users\castillo.poderosa.000\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
HKU\castillo.poderosa.000\...\Policies\system: [LogonHoursAction] 2
HKU\castillo.poderosa.000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\Default\...\RunOnce: [mctadmin] => F:\Windows\System32\mctadmin.exe
HKU\Jackie\...\Run: [LightScribe Control Panel] => F:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
HKU\Jackie\...\Run: [swg] => "F:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
HKU\Jackie\...\RunOnce: [FlashPlayerUpdate] => F:\Windows\system32\Macromed\Flash\FlashUtil32_11_4_402_265_ActiveX.exe -update activex
HKU\Jackie\...\Policies\system: [LogonHoursAction] 2
HKU\Jackie\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\mario\...\Run: [Sidebar] => F:\Program Files\Windows Sidebar\sidebar.exe /autoRun
HKU\mario\...\RunOnce: [FlashPlayerUpdate] => F:\Windows\system32\Macromed\Flash\FlashUtil32_11_5_502_146_Plugin.exe -update plugin
HKU\mario\...\Policies\system: [LogonHoursAction] 2
HKU\mario\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\mario\...\Policies\Explorer: [NoThumbnailCache] 1
HKU\mario\...\Policies\Explorer: [link] 0x00000000
HKU\mario\Control Panel\Desktop\\SCRNSAVE.EXE -> 
HKU\Mario G\...\RunOnce: [FlashPlayerUpdate] => F:\Windows\system32\Macromed\Flash\FlashUtil32_11_4_402_265_ActiveX.exe -update activex
HKU\Mario G\...\Policies\system: [LogonHoursAction] 2
HKU\Mario G\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\NeroMediaHomeUser.4.poderosa\...\RunOnce: [mctadmin] => F:\Windows\System32\mctadmin.exe
HKU\NeroMediaHomeUser.4.poderosa.000\...\Run: [DAEMON Tools Pro Agent] => "F:\Program Files\DAEMON Tools Pro\DTAgent.exe" -autorun
HKU\NeroMediaHomeUser.4.poderosa.000\...\RunOnce: [mctadmin] => "F:\Windows\System32\mctadmin.exe"
HKU\NeroMediaHomeUser.4.poderosa.000\...\Policies\system: [LogonHoursAction] 2
HKU\NeroMediaHomeUser.4.poderosa.000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\Predator\...\Run: [LightScribe Control Panel] => F:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
HKU\Predator\...\Run: [Aim] => "F:\Program Files\AIM\aim.exe" /d locale=en-US
HKU\Predator\...\Run: [DAEMON Tools Pro Agent] => "F:\Program Files\DAEMON Tools Pro\DTAgent.exe" -autorun
HKU\Predator\...\Run: [Sidebar] => F:\Program Files\Windows Sidebar\sidebar.exe /autoRun
HKU\Predator\...\Policies\system: [LogonHoursAction] 2
HKU\Predator\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\vilma\...\Run: [LightScribe Control Panel] => F:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
HKU\vilma\...\Run: [swg] => "F:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
HKU\vilma\...\Policies\system: [LogonHoursAction] 2
HKU\vilma\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\Walter\...\Run: [LightScribe Control Panel] => F:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
HKU\Walter\...\Run: [Aim] => "F:\Program Files\AIM\aim.exe" /d locale=en-US
HKU\Walter\...\Run: [IDMan] => F:\Program Files\Internet Download Manager\IDMan.exe /onboot
HKU\Walter\...\Run: [AdobeBridge] => [X]
HKU\Walter\...\Run: [DAEMON Tools Pro Agent] => "F:\Program Files\DAEMON Tools Pro\DTAgent.exe" -autorun
HKU\Walter\...\Policies\system: [LogonHoursAction] 2
HKU\Walter\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
Startup: C:\Users\Walter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\UltimateZip Quick Start.lnk [2013-06-23]
ShortcutTarget: UltimateZip Quick Start.lnk -> E:\Program Files\UltimateZip\uzqkst.exe (No File)
BootExecute: autocheck autochk * bddel.exesasnative32
GroupPolicyUsers\S-1-5-21-2011498354-3618458672-2158645030-1005\User: Restriction <======= ATTENTION
 
==================== Services (Whitelisted) ========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
S2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2009-07-13] (Microsoft Corporation)
S4 9734BF6A-2DCD-40f0-BAB0-5AAFEEBE1269; F:\Program Files\Roxio\BackOnTrack\App\SaibSVC.exe [X]
S3 ACDaemon; no ImagePath
S2 ADExchange; F:\Program Files\Common Files\ArcSoft\esinter\Bin\eservutil.exe [X]
S4 AdobeActiveFileMonitor10.0; K:\Elements 10 Organizer\PhotoshopElementsFileAgent.exe [X]
S4 AdobeARMservice; "F:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe" [X]
S4 AdobeFlashPlayerUpdateSvc; F:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [X]
S2 Akamai; f:\program files\common files\akamai/netsession_win_ce5ba24.dll [X]
S2 Amsp; "F:\Program Files\Trend Micro\AMSP\coreServiceShell.exe" coreFrameworkHost.exe -m=rb -dt=60000 -ad [X]
S2 Apple Mobile Device; "F:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe" [X]
S2 ASO3DiskOptimizer; F:\Program Files\Advanced System Optimizer 3\ASO3DefragSrv.exe [X]
S4 AVerRemote; F:\Program Files\Common Files\AVerMedia\Service\AVerRemote.exe [X]
S4 AVerScheduleService; F:\Program Files\Common Files\AVerMedia\Service\AVerScheduleService.exe [X]
S4 BackupService; F:\Users\mario\AppData\Roaming\HP SimpleSave Application\uUACTokenSvc.exe [X]
S4 bgsvcgen; "F:\Windows\System32\bgsvcgen.exe" [X]
S3 BITCOMET_HELPER_SERVICE; F:\Program Files\BitComet\tools\BitCometService.exe -service [X]
S4 Bonjour Service; "F:\Program Files\Bonjour\mDNSResponder.exe" [X]
S4 BOT4Service; "F:\Program Files\Roxio\BackOnTrack\App\BService.exe" [X]
S4 BOTService; "F:\Program Files\Roxio\BackOnTrack\Instant Restore\BOTService.exe" [X]
S4 CDScheduler; "F:\Program Files\CyberDefender\SchedulerService\SchedulerService.exe" [X]
S4 CLHNServiceForPowerDVD; F:\Program Files\CyberLink\PowerDVD11\Kernel\DMP\CLHNServiceForPowerDVD.exe [X]
S2 clr_optimization_v4.0.30319_32; F:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [X]
S4 CyberLink PowerDVD 11.0 Monitor Service; "F:\Program Files\CyberLink\PowerDVD11\Common\MediaServer\CLMSMonitorService.exe" [X]
S4 CyberLink PowerDVD 11.0 Service; "F:\Program Files\CyberLink\PowerDVD11\Common\MediaServer\CLMSServerForPDVD11.exe" [X]
S2 Fabs; F:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe /DisableUI [X]
S3 FirebirdServerMAGIXInstance; "F:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe" [X]
S4 FLEXnet Licensing Service; "F:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe" [X]
S2 gupdate; "F:\Program Files\Google\Update\GoogleUpdate.exe" /svc [X]
S3 gupdatem; "F:\Program Files\Google\Update\GoogleUpdate.exe" /medsvc [X]
S2 gusvc; "F:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe" [X]
S2 HauppaugeTVServer; F:\Program Files\WinTV\TVServer\HauppaugeTVServer.exe [X]
S3 hpqcxs08; F:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [X]
S2 hpqddsvc; F:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll [X]
S2 HPSLPSVC; F:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL [X]
S4 IDriverT; "F:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe" [X]
S3 iPod Service; "F:\Program Files\iPod\bin\iPodService.exe" [X]
S2 iReboot; "F:\Program Files\NeoSmart Technologies\iReboot\iRebootd.exe" [X]
S2 KSS; "F:\Program Files\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe" -r [X]
S4 LightScribeService; "F:\Program Files\Common Files\LightScribe\LSSrvc.exe" [X]
S4 LMIGuardianSvc; "F:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe" [X]
S4 LMIMaint; "F:\Program Files\LogMeIn\x86\RaMaint.exe" [X]
S4 LogMeIn; "F:\Program Files\LogMeIn\x86\LogMeIn.exe" [X]
S2 MAGIX StartUp Analyze Service; F:\Program Files\MAGIX\PC_Check_Tuning_2012_Download_Version\MXSAS.exe [X]
S3 Microsoft SharePoint Workspace Audit Service; "F:\Program Files\Microsoft Office\Office14\GROOVE.EXE" /auditservice [X]
S3 MozillaMaintenance; "F:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe" [X]
S2 MsMpSvc; "f:\Program Files\Microsoft Security Client\MsMpEng.exe" [X]
S2 MSSQL$SQLEXPRESS; "F:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS [X]
S4 MSSQLServerADHelper; "F:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe" [X]
S4 MySQL; F:\Program Files\MySQL\MySQL Server 5.1\bin\mysqld.exe --defaults-file="F:\Program Files\MySQL\MySQL Server 5.1\my.ini" MySQL
S2 NAUpdate; "F:\Program Files\Nero\Update\NASvc.exe" [X]
S4 NeroMediaHomeService.4; "F:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe" [X]
S3 Net Driver HPZ12; F:\Windows\system32\HPZinw12.dll [X]
S4 NetMsmqActivator; "F:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe" -NetMsmqActivator [X]
S4 NetPipeActivator; F:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [X]
S2 NetTalkUsrLaunchService; F:\Program Files\netTALK\nettalkl.exe --service [X]
S3 NetTalkUsrService; F:\Program Files\netTALK\nettalkd.exe --service [X]
S4 NetTcpActivator; F:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [X]
S4 NetTcpPortSharing; F:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [X]
S2 nlsX86cc; F:\Windows\system32\nlssrv32.exe [X]
S3 ose; "F:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE" [X]
S3 osppsvc; "F:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE" [X]
S3 Pml Driver HPZ12; F:\Windows\system32\HPZipm12.dll [X]
S4 PS3 Media Server; "F:\Program Files\PS3 Media Server\win32\service\wrapper.exe" -s "F:\Program Files\PS3 Media Server\win32\service\wrapper.conf"
S4 PSI_SVC_2; "f:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe" [X]
S4 RichVideo; "F:\Program Files\CyberLink\Shared files\RichVideo.exe" [X]
S4 RoxMediaDB13; "F:\Program Files\Common Files\Roxio Shared\13.0\SharedCOM\RoxMediaDB13.exe" [X]
S4 RoxWatch12; "F:\Program Files\Common Files\Roxio Shared\13.0\SharedCOM\RoxWatch13.exe" [X]
S2 SkypeUpdate; "F:\Program Files\Skype\Updater\Updater.exe" [X]
S2 SlingAgentService; F:\Program Files\Sling Media\SlingAgent\SlingAgentService.exe [X]
S2 SQLBrowser; "F:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe" [X]
S2 SQLWriter; "F:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe" [X]
S4 StarWindServiceAE; F:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [X]
S3 Steam Client Service; F:\Program Files\Common Files\Steam\SteamService.exe /RunAsService [X]
S4 SwitchBoard; "F:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [X]
S2 TuneUp.UtilitiesSvc; "F:\Program Files\TuneUp Utilities 2012\TuneUpUtilitiesService32.exe" [X]
S4 UMVPFSrv; F:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [X]
S4 wlcrasvc; "F:\Program Files\Windows Live\Mesh\wlcrasvc.exe" [X]
S2 wlidsvc; "F:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE" [X]
S2 wuauserv; F:\Windows\system32\wuaueng.dll [X]
S2 wwEngineSvc; F:\Program Files\Webroot\Washer\WasherSvc.exe [X]
S2 YahooAUService; "F:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe" [X]
 
===================== Drivers (Whitelisted) ==========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
S3 ALCXWDM; C:\Windows\System32\drivers\RTKVAC.SYS [4172832 2010-09-25] (Realtek Semiconductor Corp.)
S1 ArcSec; C:\Windows\System32\drivers\ArcSec.sys [192504 2010-09-21] ()
S3 ATIAVPCI; C:\Windows\System32\DRIVERS\atinavrr.sys [1086080 2011-01-26] (ATI Technologies Inc.)
S3 AtiIrRcvr; C:\Windows\System32\DRIVERS\aticir.sys [19584 2011-01-26] (ATI Technologies Inc.)
S2 BT848; C:\Windows\System32\drivers\Bt848.sys [163840 2004-07-06] (AVerMedia Technologies, Inc.)
S1 cdrbsdrv; C:\Windows\System32\Drivers\cdrbsdrv.sys [33408 2006-02-20] (B.H.A Corporation)
S3 hcw72ADFilter; C:\Windows\System32\DRIVERS\hcw72ADFilter.sys [28928 2010-04-23] (Hauppauge Computer Works, Inc.)
S3 hcw72ATV; C:\Windows\System32\DRIVERS\hcw72ATV.sys [1217920 2010-04-23] (Hauppauge Computer Works, Inc.)
S3 hcw72DTV; C:\Windows\System32\DRIVERS\hcw72DTV.sys [1220224 2010-04-23] (Hauppauge Computer Works, Inc.)
S3 HP8207_8307; C:\Windows\System32\DRIVERS\HP8207_8307.sys [13952 2010-02-04] (Windows ® Win 7 DDK provider)
S0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [135984 2011-10-20] (Kaspersky Lab ZAO)
S1 kl2; C:\Windows\System32\DRIVERS\kl2.sys [13104 2011-10-20] (Kaspersky Lab ZAO)
S1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [588080 2012-09-14] (Kaspersky Lab)
S1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [23856 2011-03-10] (Kaspersky Lab ZAO)
S3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [19984 2009-11-02] (Kaspersky Lab)
S3 LEqdUsb; C:\Windows\System32\Drivers\LEqdUsb.Sys [42648 2011-09-01] (Logitech, Inc.)
S3 LHidEqd; C:\Windows\System32\Drivers\LHidEqd.Sys [12184 2011-09-01] (Logitech, Inc.)
S3 libusb0; C:\Windows\System32\DRIVERS\libusb0.sys [35392 2011-09-22] (hxxp://libusb-win32.sourceforge.net)
S3 LUsbFilt; C:\Windows\System32\Drivers\LUsbFilt.Sys [30360 2011-09-01] (Logitech, Inc.)
S3 MobileAdapter; C:\Windows\System32\DRIVERS\qscnusb.sys [103552 2009-09-24] (QUALCOMM Incorporated)
S0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [193552 2012-08-30] (Microsoft Corporation)
S3 msvad_simple; C:\Windows\System32\drivers\povrtdev.sys [23920 2010-04-29] (MediaMall Technologies, Inc.)
S1 nettalkd; C:\Windows\System32\DRIVERS\nettalkd.sys [26336 2012-04-29] (NetTalk Inc.)
S0 PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [45744 2011-05-24] (Rovi Corporation)
S3 RTHDMIAzAudService; C:\Windows\System32\drivers\RtHDMIV.sys [328552 2011-07-06] (Realtek Semiconductor Corp.)
S0 sptd; C:\Windows\System32\Drivers\sptd.sys [691696 2011-05-21] (Duplex Secure Ltd.)
S0 SysCow; C:\Windows\System32\drivers\syscow32v.sys [81904 2010-05-23] (Sonic Solutions)
S1 tmactmon; C:\Windows\System32\DRIVERS\tmactmon.sys [94200 2012-07-12] (Trend Micro Inc.)
S0 tmcomm; C:\Windows\System32\DRIVERS\tmcomm.sys [257928 2012-07-12] (Trend Micro Inc.)
S0 TMEBC; C:\Windows\System32\DRIVERS\TMEBC32.sys [38328 2012-08-24] (Trend Micro Inc.)
S3 tmeevw; C:\Windows\System32\DRIVERS\tmeevw.sys [85816 2012-08-25] (Trend Micro Inc.)
S1 tmevtmgr; C:\Windows\System32\DRIVERS\tmevtmgr.sys [75624 2012-07-12] (Trend Micro Inc.)
S3 tmnciesc; C:\Windows\System32\DRIVERS\tmnciesc.sys [171064 2012-07-05] (Trend Micro Inc.)
S1 tmtdi; C:\Windows\System32\DRIVERS\tmtdi.sys [92304 2012-05-02] (Trend Micro Inc.)
S3 usbrndis6; C:\Windows\System32\DRIVERS\usb80236.sys [15872 2009-07-13] (Microsoft Corporation)
S3 WinDriver6; C:\Windows\System32\drivers\windrvr6.sys [186592 2010-08-28] (Jungo)
S3 Afc; no ImagePath
S3 cpudrv; \??\F:\Program Files\SystemRequirementsLab\cpudrv.sys [X]
S3 DrvAgent32; \??\F:\Windows\system32\Drivers\DrvAgent32.sys [X]
S5 HCWBT8XX; C:\Windows\System32\Drivers\HCWBT8XX.sys [280644 2002-02-28] (Hauppauge Computer Works)
S3 hitmanpro35; \??\F:\Windows\system32\drivers\hitmanpro35.sys [X]
S1 ISODrive; \??\F:\Program Files\UltraISO\drivers\ISODrive.sys [X]
S2 LMIInfo; \??\F:\Program Files\LogMeIn\x86\RaInfo.sys [X]
S4 LMIRfsClientNP; no ImagePath
S2 LMIRfsDriver; \??\F:\Windows\system32\drivers\LMIRfsDriver.sys [X]
S2 ntk_PowerDVD; \??\F:\Program Files\CyberLink\PowerDVD11\Kernel\DMP\ntk_PowerDVD.sys [X]
S3 pwdrvio; \??\F:\Windows\system32\pwdrvio.sys [X]
S3 pwdspio; \??\F:\Windows\system32\pwdspio.sys [X]
S2 supersafer; no ImagePath
S3 Synth3dVsc; no ImagePath
S0 TfFsMon; no ImagePath
S3 TfNetMon; no ImagePath
S0 TFSysMon; no ImagePath
S2 TMAgent; no ImagePath
S3 tsusbhub; no ImagePath
S3 TuneUpUtilitiesDrv; \??\F:\Program Files\TuneUp Utilities 2012\TuneUpUtilitiesDriver32.sys [X]
S3 VBoxNetFlt; no ImagePath
S3 VGPU; no ImagePath
S3 vmci; \SystemRoot\system32\DRIVERS\vmci.sys [X]
S3 VMnetAdapter; system32\DRIVERS\vmnetadapter.sys [X]
S5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [48128 2009-07-13] (Microsoft Corporation)
S2 {329F96B6-DF1E-4328-BFDA-39EA953C1312}; \??\F:\Program Files\CyberLink\PowerDVD11\Common\NavFilter\000.fcl [X]
 
==================== NetSvcs (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
 
==================== One Month Created files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2016-04-02 15:25 - 2016-04-03 17:12 - 00000000 ____D C:\FRST
2016-03-31 13:48 - 2016-04-02 10:04 - 00000000 ____D C:\Kaspersky Rescue Disk 10.0
2016-03-30 13:26 - 2016-03-31 06:21 - 00000000 ____D C:\RescueCD Logs
2016-03-27 20:51 - 2016-03-27 21:34 - 00000000 ____D C:\Program Files\MPC Cleaner
 
==================== One Month Modified files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2016-04-03 15:31 - 2009-07-13 18:37 - 00000000 ___HD C:\Windows\System32\GroupPolicy
2016-03-29 13:31 - 2012-11-22 13:57 - 00000000 ____D C:\Program Files\Coupons
2016-03-18 18:32 - 2014-06-25 13:42 - 00000000 ____D C:\Temp
2016-03-17 14:08 - 2011-10-30 17:49 - 00000000 ____D C:\Users\Mario G\Desktop\New folder
2016-03-17 13:12 - 2011-12-26 00:14 - 00000000 ____D C:\Users\Mario G\Desktop\iuok
 
==================== Known DLLs (Whitelisted) =========================
 
 
==================== Bamital & volsnap =================
 
(There is no automatic fix for files that do not pass verification.)
 
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\dnsapi.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
==================== EXE Association (Whitelisted) =============
 
 
==================== Restore Points  =========================
 
 
==================== Memory info =========================== 
 
Percentage of memory in use: 19%
Total physical RAM: 2557.61 MB
Available physical RAM: 2047.52 MB
Total Virtual: 2555.9 MB
Available Virtual: 2053.27 MB
 
==================== Drives ================================
 
Drive c: (New Volume) (Fixed) (Total:232.88 GB) (Free:33.02 GB) NTFS
Drive e: () (Fixed) (Total:74.41 GB) (Free:3.08 GB) NTFS
Drive g: (MULTIBOOT) (Removable) (Total:15.11 GB) (Free:3.14 GB) FAT32
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
Drive y: (System Reserved) (Fixed) (Total:0.1 GB) (Free:0.04 GB) NTFS ==>[system with boot components (obtained from drive)]
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 74.5 GB) (Disk ID: AB4C7F5F)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=74.4 GB) - (Type=07 NTFS)
 
========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 232.9 GB) (Disk ID: 54194EBA)
Partition 1: (Not Active) - (Size=232.9 GB) - (Type=07 NTFS)
 
========================================================
Disk: 2 (Size: 15.1 GB) (Disk ID: 04DD5721)
Partition 1: (Active) - (Size=15.1 GB) - (Type=0C)
Partition 4: (Not Active) - (Size=659 MB) - (Type=00)
 
 
LastRegBack: 2013-02-23 00:43
 
==================== End of FRST.txt ============================

  • 0

#7
emeraldnzl

emeraldnzl

    GeekU Instructor

  • GeekU Moderator
  • 20,008 posts

Hello again pcme,

Let's see if you can do this:

Please download the tool to your flash drive.

Download Windows Repair (All In One) from here. Make sure you download the Portable Version.

It will probably come as a Zip file and you will need to right click on the Zip file and click Extract. The contents will then be extracted to a separate folder.   

Double click the folder (Tweaking dot.com - Windows Repair) and a list will appear. Plug the flash drive into your sick computer.

 

Please enter System Recovery Options, as we've done previously.

From the Windows Repair List that shows double click the file (about the 5th one down the list) Repair_Windows.exe to run the program.

When the program opens click on the tab Start Repairs and the button Start

At the list that presents put a check (tick) in the following:

• Reset Registry Permissions
• Reset File Permissions
• Register System Files
• Repair WMI
• Repair Windows Firewall
• Repair Internet Explorer
• Repair MDAC & MS Jet
• Repair Hosts File
• Remove Policies Set By Infections
• Repair Icons
• Remove Temp Files
• Repair Proxy Settings
• Unhide Non System Files

Also put a check in the Restart/Shutdown System When Finished (lower right) box.

and in Restart System

Then click on the Start button if it doesn't do it automatically

If it asks you to back up your system please do so and continue

When it is finished come back and tell me how it went.


  • 0

#8
pcme

pcme

    Member

  • Topic Starter
  • Member
  • PipPip
  • 32 posts
hello again Repair_Windows.exe doesn't show on  the windows repair list

iam doing something wrong

please guide me


  • 0

#9
emeraldnzl

emeraldnzl

    GeekU Instructor

  • GeekU Moderator
  • 20,008 posts

Did you download the Portable Version?


  • 0

#10
pcme

pcme

    Member

  • Topic Starter
  • Member
  • PipPip
  • 32 posts

yes i did


  • 0

Advertisements


#11
pcme

pcme

    Member

  • Topic Starter
  • Member
  • PipPip
  • 32 posts

do i do go to command prompt?


  • 0

#12
emeraldnzl

emeraldnzl

    GeekU Instructor

  • GeekU Moderator
  • 20,008 posts

Just wait a bit. I am downloading it myself and testing to see why it won't work.

 

At first look it seems to have changed the way it works.


  • 0

#13
pcme

pcme

    Member

  • Topic Starter
  • Member
  • PipPip
  • 32 posts

ok thanks


  • 0

#14
emeraldnzl

emeraldnzl

    GeekU Instructor

  • GeekU Moderator
  • 20,008 posts

When I download it and unzip I find a folder Tweaking.com - Windows Repair

I double click on that and see a list. The 13th item on the list that presents is Windows Repair.exe or Repair Windows.exe. Try that one.

I have Windows 10 so it might be different on yours but have a look and tell me what you see.


  • 0

#15
pcme

pcme

    Member

  • Topic Starter
  • Member
  • PipPip
  • 32 posts

the 13th item on the list is is a windows repair application not ,exe


  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP