Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

can run antivirus or antispyware all icons change to realplayer [Solve

Started by x_LUIS_X , Oct 12 2014 05:34 PM

This topic is locked

#46
Naathim

Posted 24 October 2014 - 02:47 AM

GeekU Minion

Expert
4,568 posts

Then please do this one (before proceeding to the repairs):

Backing up Registry with Tweaking.com

Modifying the registry may create unforeseen results, so we always recommend creating a backup prior to doing that.

Please download Registry Backup (portable edition) by Tweaking.com and save the file to the desktop.
It will come as a zipped file, so you will need to unzip it. You may do it by right-clicking on it and choosing Extract All. Extract it to your desktop.

Enter the Tweaking.com directory, right-click on icon and select Run as Administrator to start the tool.
Once the main console is loaded, press Backup Now at the bottom.
Wait patiently until the backup is done - it may take several minutes.
Once finished (a message like Successful 12/12 Registry Files Backed Up will appear) - close the app.
On your main drive a folder named RegBackup should appear. This is the place where the backup is stored.

This tool won't generate any report.
You may delete it after we're done with the cleaning, but I'd recommend to save it and do a backup once per month. It's better to be safe than sorry.

#47
x_LUIS_X

Posted 25 October 2014 - 02:45 AM

Member

Topic Starter
Member
153 posts

registry backup done!!

fail to run the repair here is the log..

(I disable the antivirus on the second try)

Tweaking.com - Windows Repair v2.10.0
--------------------------------------------------------------------------------

System Variables
--------------------------------------------------------------------------------
OS: Windows 7 Home Premium
OS Architecture: 64-bit
OS Version: 6.1.7601
OS Service Pack: Service Pack 1
Computer Name: VICENTE-PC
Windows Drive: C:\
Windows Path: C:\Windows
Program Files: C:\Program Files
Program Files (x86): C:\Program Files (x86)
Current Profile: C:\Users\Vicente
Current Profile SID: S-1-5-21-1216312544-3494976201-1159279589-1001
Current Profile Classes: S-1-5-21-1216312544-3494976201-1159279589-1001_Classes
Profiles Location: C:\Users
Profiles Location 2: C:\Windows\ServiceProfiles
Local Settings AppData: C:\Users\Vicente\AppData\Local
--------------------------------------------------------------------------------

System Information
--------------------------------------------------------------------------------
System Up Time: 0 Days 00:44:11

Process Count: 57
Commit Total: 1.38 GB
Commit Limit: 7.83 GB
Commit Peak: 2.24 GB
Handle Count: 19962
Kernel Total: 378.55 MB
Kernel Paged: 322.89 MB
Kernel Non Paged: 55.66 MB
System Cache: 2.35 GB
Thread Count: 707
--------------------------------------------------------------------------------

Memory Before Cleaning with CleanMem
--------------------------------------------------------------------------------
Memory Total: 3.91 GB
Memory Used: 1.26 GB(32.2123%)
Memory Avail.: 2.65 GB
--------------------------------------------------------------------------------

Cleaning Memory Before Starting Repairs...

Memory After Cleaning with CleanMem
--------------------------------------------------------------------------------
Memory Total: 3.91 GB
Memory Used: 1.26 GB(32.2535%)
Memory Avail.: 2.65 GB
--------------------------------------------------------------------------------

Starting Repairs...
Started at (25/10/2014 03:02:08 a.m.)

The current repair has failed to start for over 30 sec.
Trying Again....

Done, but failed, at (25/10/2014 03:04:08 a.m.)
Total Repair Time: 00:02:02

The current repair has failed to start 4 times.
Something is keeping the repair from running.
Tweaking_ras.exe in the files folder is used to run the repairs under the system account, make sure your Antivirus isnt blocking it.
Please post in the Tweaking.com forums for support.

Edited by x_LUIS_X, 25 October 2014 - 03:17 AM.

#48
Naathim

Posted 25 October 2014 - 05:36 AM

GeekU Minion

Expert
4,568 posts

Uninstall completely your AV using the tools from this link:
Uninstallers (removal tools) for common Windows antivirus software.

Then try to repair it.

#49
x_LUIS_X

Posted 25 October 2014 - 05:29 PM

Member

Topic Starter
Member
153 posts

I used the tools to uninstall the AV and check with ESET and then run the repair and fail again

heres the log..

Tweaking.com - Windows Repair v2.10.0
--------------------------------------------------------------------------------

System Information
--------------------------------------------------------------------------------
System Up Time: 0 Days 00:06:13

Process Count: 60
Commit Total: 1.63 GB
Commit Limit: 7.83 GB
Commit Peak: 2.23 GB
Handle Count: 17224
Kernel Total: 305.81 MB
Kernel Paged: 263.13 MB
Kernel Non Paged: 42.69 MB
System Cache: 886.00 MB
Thread Count: 688
--------------------------------------------------------------------------------

Memory Before Cleaning with CleanMem
--------------------------------------------------------------------------------
Memory Total: 3.91 GB
Memory Used: 1.68 GB(42.9326%)
Memory Avail.: 2.23 GB
--------------------------------------------------------------------------------

Cleaning Memory Before Starting Repairs...

Memory After Cleaning with CleanMem
--------------------------------------------------------------------------------
Memory Total: 3.91 GB
Memory Used: 1.68 GB(42.9247%)
Memory Avail.: 2.23 GB
--------------------------------------------------------------------------------

Starting Repairs...
Started at (25/10/2014 05:17:04 p.m.)

The current repair has failed to start for over 30 sec.
Trying Again....

Done, but failed, at (25/10/2014 05:19:04 p.m.)
Total Repair Time: 00:02:01

#50
Naathim

Posted 26 October 2014 - 04:38 AM

GeekU Minion

Expert
4,568 posts

I begin to think that there is something really strange going on here.

Scan with Dr.Web CureIt

Please visit this page: Dr.Web CureIt!
You will find there a download site and instructions how to run a free scan with Dr.Web.

Some notes from me:

The file will come totally randomly named (like h34cva7) - that's normal; however it will have this icon: .
It may take a while to finish, depending of your capacities and system specs, be patient.
Don't fix anything on your own using Dr.Web - this type of scans often produces false positives; I will tell you what to remove and how to do it after a look at provided results.

Upon completion, please click Open Report and include it here for my analysis.

#51
x_LUIS_X

Posted 26 October 2014 - 11:05 PM

Member

Topic Starter
Member
153 posts

Hi Naat im having trouble to posting the log of Dr Web

not even attacing the file, says file is to large to attach and its only 2.03mb

I don't no way

and the scan only found 1 file (infected)

c:\user\vicente\documents\downloads\11ct2776682_brotherSoft_extreme.exe

ill keep trying to post the log..

#52
Naathim

Posted 27 October 2014 - 01:17 AM

GeekU Minion

Expert
4,568 posts

If you are absolutely sure that there is this only one detection there, that's fine. Just post me the infection name as detected by dr web.

#53
x_LUIS_X

Posted 27 October 2014 - 02:30 AM

Member

Topic Starter
Member
153 posts

Dr.Web Scanner SE for Windows v9.1.2.08270
© Doctor Web, Ltd., 1992-2013
Scan session started 2014/10/26 18:54:44
Module location : C:\Users\Vicente\AppData\Local\Temp\FDF8F670-2DB74B8-2FD49F38-C1AF22B0\
=============================================================================

OPTION [Automatic Apply Actions] NO
OPTION [Turn Off Computer After Scan] NO
OPTION [Use Sound Alerts] NO

OPTION [Block Network] NO
OPTION [Protect Process] NO
OPTION [Protect Raw Disk] NO

Using language: "Spanish (Español)"
Available instances: 6
Instances used: 6
Platform: Windows 7 Premium x64/WOW (Build 7601), Service Pack 1
API Version: 2.2
Scanning Engine version: 9.1.2.8281
Virus Finding Engine version: 7.0.10.8210
Total 209 virus bases are loaded from C:\Users\Vicente\AppData\Local\Temp\FDF8F670-2DB74B8-2FD49F38-C1AF22B0
rNdY8jRc 7.0 539a9aa61c822c2762acd2bbedef5538649aacb0 2014/10/26 16:00:22 1766 records - OK
KwrWjjqdwNHZG 7.0 98d8f983feec8436db1bc275c5bc9f42c68cef83 2011/07/25 08:20:03 2 records - OK
iX1p17hhK6sbhGO 7.0 e98194370620aa028f25475982654169557bd508 2014/10/25 13:03:09 4899 records - OK
xucqUqSEe3tvZCs 7.0 2709451693abb03ef06289795ba5b1b050c31407 2014/10/19 21:09:49 5207 records - OK
8RndINSL 7.0 f637e758c7c798876a9ca9b53d7ed983a1f9a78a 2014/10/12 21:06:56 5850 records - OK
YeCRAT02K 7.0 dbbe02afa247e00d996944cab2751417e0af0593 2014/10/05 21:07:56 7211 records - OK
uVSjx3SAxwyKHeQ 7.0 d2fb2555ede9c4f09056277043393851e3d4e579 2014/09/28 21:06:53 6473 records - OK
fOtVOrcmUiw 7.0 1945a00bf2201d282f3040064b1562d287ada621 2014/09/21 21:08:49 5969 records - OK
gQDPeQ7C 7.0 5e0d32abb6a1c2a69e0a132ac1f0457b428c8d53 2014/09/14 21:09:57 8883 records - OK
MJ5GDX8j4UqlxJN 7.0 cb605b7f9c9a9617aac8fb6cf2c27a9fd7c091fc 2014/09/07 21:09:48 7111 records - OK
2PwHpiFEZBE 7.0 62976ea7e4054c870c7733e90673927a2a9ae90e 2014/08/31 21:06:54 7511 records - OK
otSkIqqv3JzuR 7.0 837f6d82763ceb32731aad1c3ee0312d2b455bf4 2014/08/24 21:06:55 8997 records - OK
zGGi3gMNwrQjYy 7.0 1013789968aad0c7bc36cf266b05b21cc4084c0c 2014/08/17 21:07:39 6958 records - OK
PIkYZrc9WCV 7.0 eae60c4e7c9fbf767a0aba23f960eb9b9df2f971 2014/08/10 21:07:24 8795 records - OK
NWHMyJuDuv6 7.0 2eafa5ab516874d5203d635355eb3acf20e8e408 2014/08/03 21:07:52 9849 records - OK
qaRymkChVjjUBAU 7.0 6718ac62c04e88c95bde0e9ef6d5505e542dd8a7 2014/07/27 21:09:40 12605 records - OK
VGQ2TOPeQukmJmm 7.0 033244b1e10f00db0756c4831ef37274ce99db9c 2014/07/20 21:09:46 10201 records - OK
u8i5ftXFxK6 7.0 a340429552dc20014d354afe1a1786684abe6f99 2014/07/13 21:09:32 4714 records - OK
bveLQsXlG7P1RM 7.0 86d05f7e42516e7e48d3f5e60ef515299dc4b7b6 2014/07/07 09:38:23 8760 records - OK
N06Ql2qmwZvhNP 7.0 2fceffd3998ad0db5ca10f185be580982f762d8b 2014/06/29 21:07:57 10543 records - OK
QtiffOzPIGnG 7.0 14b2a292ea92e4466d250df30be27ff5b3d2d1b3 2014/06/22 21:10:21 16248 records - OK
fYkL1Mop 7.0 d84432e4c54688942bd8ed8d80be4e768bc2516a 2014/06/15 21:09:03 12083 records - OK
cwVRhWD8in 7.0 2080140e99633f53d4d5140a8c853521c9ea4f33 2014/06/08 21:13:49 17772 records - OK
9B1lpw3o 7.0 a0323248ff8ed6a2cedc3d9df82f112222522ca0 2014/06/01 21:20:57 29483 records - OK
nAWx8o2G 7.0 1a3078a9e363a3d76c2104be4530c8509a854ab9 2014/05/25 21:13:50 21308 records - OK
shyaktKMu1sKQ7 7.0 a01210689fa1584d22b17a03139ad266e4a8c56d 2014/05/18 21:09:22 15204 records - OK
XyVayBGzFZ 7.0 02a5ca5da5fd67475832779ce7e0a053ca85befd 2014/05/11 21:13:29 25180 records - OK
FpVr6aofu5Zf 7.0 4953e308a6689a2372c023488dbe9918fa04a273 2014/05/04 21:09:59 29125 records - OK
EeIGHBzLNHxLuOa 7.0 df6fe2e5c10e39c25515a39044369b11eb525cbc 2014/04/27 21:11:51 26168 records - OK
161kNFmC1S 7.0 5daf0e374b92eab6bf056e0372f87192353c0d30 2014/04/20 21:10:24 26824 records - OK
sMaPSIdowZ87w 7.0 956143979c1084c7996ee37d4d02332d0b4edd9e 2014/04/13 21:08:01 23470 records - OK
xB8WoX1mvJXls 7.0 b78bcfc3ca58ac346354af98504ae5b7a10c09fe 2014/04/06 21:06:38 7239 records - OK
l5nS3beo8M 7.0 90db53cf0aecc54e29fe45481c8701e172495654 2014/03/30 21:05:55 9893 records - OK
iayRTcM9suE9os 7.0 8beb8eb97aa5accaf0f36f7a322b761a1dc77dcf 2014/03/23 21:06:14 20363 records - OK
DWoPYs9WxF3g 7.0 b6c848e848970a30ff4eb4756cb6f4e7f14f4532 2014/03/16 21:06:15 17106 records - OK
FGOWt1u4wHwMAGi 7.0 c8b50201f91d633fd7a72aa7b32847785ff68598 2014/03/09 21:07:19 29679 records - OK
LIL9dzJxJe 7.0 ced18b5f940d318561bad384904b85c49cfe1d75 2014/03/03 02:14:22 26983 records - OK
psefiTd7Yo 7.0 ec1a9ea7dcfd8a5fbac623a06df46c8b9b404008 2014/02/23 20:06:08 20659 records - OK
HIDX72NZcmPYVQs 7.0 d9af357680a3a8e4972488588daa2093ad4e925b 2014/02/16 20:07:02 12119 records - OK
EElUGowmLZ 7.0 8096cc58eae678b74939277d4d6e3b1f7a498c54 2014/02/09 20:06:00 21955 records - OK
5DjZcy0J0vK 7.0 d2759d80da4df855cc56a1c3e14dc29721af2eb5 2014/02/02 20:11:13 21349 records - OK
L4wVp4cAA 7.0 3d19003910067f044af4e5fee3ca6ba49b1e0dff 2014/01/26 20:08:07 11704 records - OK
WYT3xJcxXPC 7.0 9ec552f68211aadc7667cb8fbdeedee84e2ccaf4 2014/01/19 20:10:10 19301 records - OK
YoLmDfbVH8hTr 7.0 141e9b07b61877285ee8d35a4ca0a552be38d299 2014/01/12 20:07:28 15935 records - OK
AH9lX1N6tuH 7.0 e4963e7b03c06feda00ae36a7942659c0737c1bd 2014/01/05 20:07:22 12941 records - OK
NzCAgf5boDHOsF 7.0 c3164a886736d726e2441cad3a4de6f0b0e3219b 2013/12/29 20:07:50 18147 records - OK
ttIOC4Vp3tNj 7.0 1b3a9eb9e843e310051345db539364f71dcdce26 2013/12/22 20:07:36 24291 records - OK
2YheHg3bIUSLNcx 7.0 3c6be998bcbacb19a30e4fd27fe02bb8d9401191 2013/12/15 20:08:17 22670 records - OK
491KxI4dL 7.0 17c7a62a967080ce25e28d47e4cf1035e145ddc1 2013/12/08 20:09:54 21015 records - OK
NRHWQbYGj 7.0 6dbc5b701b6ffb1a8bc80c52f3454314e6d82273 2013/12/01 20:09:01 20471 records - OK
uHRAsD9GNJvjDy 7.0 95e77d6bd2c5f5feabdd074d49272f3988737aac 2013/11/24 20:06:55 18641 records - OK
iQUrIBm27KFIf 7.0 8e677cc8b19dc0ad82c4b71202c0acd9e2e25827 2013/11/17 20:08:42 32245 records - OK
HeZZNtti 7.0 bc2662842e39ed5dc010a39140fd82d7ad1b6006 2013/11/10 20:09:43 33084 records - OK
MVXJ0Rr7DhJAP4 7.0 8900859cec3affe1e5bbb086bdb2299d125acf7c 2013/11/03 20:09:28 30356 records - OK
eKRviii2lvl 7.0 0e9ca4f15f289ae826d213e6a1d672470a127b51 2013/10/27 21:09:43 18457 records - OK
ePs5otPpGa 7.0 eba0efa3e9d70063908fb5e41a704579c255ea33 2013/10/20 21:09:49 19594 records - OK
0l3Hky2S 7.0 0f5e49d3e5b4c931d1f2de5e7b3551b3290cae26 2013/10/13 21:07:20 22924 records - OK
U6ZhgcRn 7.0 11c09a3ae7c80058711dd699aeb1ca4f5ba0f5a5 2013/10/06 21:07:56 24694 records - OK
bCVwQQ4xTmu 7.0 27f46d939a14e1a0605b9762db1de5a2aca20a58 2013/09/29 21:08:23 24253 records - OK
Oi2K3YiYci 7.0 e679853ff1af1082b1982cf226785128a26e1099 2013/09/22 21:07:56 18453 records - OK
ZDlfn4Deum 7.0 690d8b937e4edb8176c3d466585662a6014e3d0e 2013/09/15 21:08:41 19662 records - OK
kcxTbdGxHzqnNn3 7.0 cf5d32d1091e0c33523e8c6f9697c32ef2bf4f29 2013/09/08 21:07:53 11289 records - OK
EFawhkbNczt4V 7.0 8f8258337f82d1dd4434e9b71f2e481f06baf7c2 2013/09/01 21:08:50 16486 records - OK
EPmICIJo4VcB 7.0 f806ed4628669b46da54d1f2eb12aa9bcef603a6 2013/08/25 21:08:46 18051 records - OK
Tixnv49rxvr 7.0 b453f2d6f8659d9dd5b9aa92f2a4cfa16cbfa1db 2013/08/18 21:07:38 30970 records - OK
sY6bx5v9ixyPz 7.0 99da1df207839fb44ae24c23590c827a78b79624 2013/08/11 21:07:21 36983 records - OK
9oav8jMDhqxQ 7.0 f00c8b50a0012e8c42c6739e1326d23df1894610 2013/08/04 21:06:47 34115 records - OK
TPl7jvdkqA8e 7.0 896fcf8d5d0cd958da3891b65648d2dc1592338b 2013/07/28 21:07:44 19463 records - OK
JAj4Ok3J7P 7.0 d690513befab3ea86af2fe671a7f24cc05c9feaa 2013/07/21 21:08:15 35067 records - OK
NydIypWU 7.0 5d7d11b0edc97be077b0771339ba3dc0c75de9e0 2013/07/14 21:08:05 29822 records - OK
fog4iqLhq3QVj 7.0 67683402b8212ef4da87f649878865c52e5dc113 2013/07/07 21:08:35 39172 records - OK
tQbeaXtTTY 7.0 613a3e4bae38b4e00a7432c24a9cd916fb1c654f 2013/06/30 21:06:34 24654 records - OK
Jr08UZA5ADykYO 7.0 b81132c4abffd4d2949531a1219b6bb1c3bad6f7 2013/06/23 21:06:30 14062 records - OK
9nrWbZ9JzCY 7.0 9aab251475626c658b193cfa2b5f91da471bf8f2 2013/06/16 21:05:57 13350 records - OK
rUolJZFd 7.0 e1f8aca88745fcdd49dc7ae75e142c41e1faf178 2013/06/09 21:08:13 26371 records - OK
jlFVubyn9CanLgi 7.0 4e8627555a073f6bad5218bad3e69ebc4b93069f 2013/06/02 21:07:47 25525 records - OK
KoNtFKYTj 7.0 f562371c5115143824efde38c9567c34ccbe5d1a 2013/05/26 21:16:19 33200 records - OK
UdKVfIzv9 7.0 eccb30ec8ed44456f9b88fe96d9fe0de40e4fa51 2013/05/19 21:11:05 46384 records - OK
pEYxJ65VZ 7.0 9b481fbfbe1f564a84f21552da1d30d24e7b01db 2013/05/12 21:07:01 34270 records - OK
6XEAVo7Y4F 7.0 1bf754dd720727b5d6803e081c16ff7f4ba7b40b 2013/05/05 21:08:46 41611 records - OK
1rDinjQJtMhqK 7.0 4e883c92513c2d991968fb3e4f27910a63d9a2df 2013/04/28 21:06:36 36105 records - OK
IbQi6PBvlaHm 7.0 b047d178295ecde53c3cf1c34e4361004569fa33 2013/04/21 21:07:26 31319 records - OK
RUcKnRX6h 7.0 9207e55a924e4aa989dfde4d8d219cf5cc200ce2 2013/04/14 21:07:56 28216 records - OK
izZGJqSzeyE7Mx 7.0 78855cfb9fbc063889c5405a577fe73188f08789 2013/04/07 21:05:35 23589 records - OK
KBj5jHlAEDN 7.0 cec6d34c79d50608520e81b90a23d91f39df0b27 2013/03/31 21:07:37 26946 records - OK
0yDuNK4gDT 7.0 fd3c78d78ea4dae4e252a7f7d76db22e1a679be9 2013/03/24 21:05:37 34778 records - OK
LLTWtGKLm9MGbVV 7.0 268e71b1123ab5e60fd2f38d269fe5f3d22b3697 2013/03/17 21:06:19 11271 records - OK
ZJbMVSsu 7.0 d196879775b0dc0ee8286f2e4def9adedb5b88df 2013/03/10 21:05:36 12046 records - OK
sLFq63AKOIflkX 7.0 0db61d4e3235481da8493523538ced712db362c2 2013/03/03 20:05:18 21747 records - OK
azOZgcn4HGyRuM 7.0 65f99faf227b51883c9f1c854a3f76806b60affb 2013/02/24 20:06:28 11540 records - OK
44Vzt0w9o 7.0 17bd7383b9c4b214c5c9029171db8ae1455984a0 2013/02/17 20:06:38 15568 records - OK
n8PFUcwU 7.0 cbe8774953ae403e49370d552b522a5839aa9fdb 2013/02/10 20:06:00 18805 records - OK
mXidnFF7t 7.0 fb6865c02a3680338e4ee0603579107227313b2b 2013/02/03 20:06:01 32488 records - OK
i1rSjPP0c 7.0 95fcd2e24cd9b2ec2610656ffa70b8bf46e86a8b 2013/01/27 20:04:52 15470 records - OK
Z6YPasqE 7.0 3d710b3dd4580a7eca8c74d2c886d48f5b8b5172 2013/01/20 20:06:27 30093 records - OK
Q5fzv5yL 7.0 bddde0b5426b7e5bebd61e1239ca529c87ae6e36 2013/01/13 20:04:41 16158 records - OK
VIIwJ6GBVZ14 7.0 bc40bd9330301e8d7796f489d03357fb711b3121 2013/01/06 20:04:45 19597 records - OK
lpqCNTevPbs 7.0 805b6089c867549c75f843eac96b759c3f8d101f 2012/12/30 20:05:41 18184 records - OK
LSNys11g 7.0 c680da06ac6ec011d130e7ac765e33da89e2820a 2012/12/23 20:05:33 29945 records - OK
UmjKrdxLa 7.0 33def496782eb5b7b1cc93fdb036a1b62fa6a2fd 2012/12/16 20:06:21 25519 records - OK
yow82ICpineO9 7.0 422abae03c588822f412aa9aae50578a1d61737e 2012/12/09 20:05:04 20358 records - OK
P5u9zxmnp7j 7.0 a4f0d0ecad4fb6e0afdb1925f4e0b7863b9d03fa 2012/12/02 20:06:19 20133 records - OK
MXXKsO0tIY3YB 7.0 86daa918ee3de1e4c1e5dea6f9b5f63544cf8814 2012/11/25 20:05:22 27311 records - OK
yfSdHvbIidr7V 7.0 6556881c748e1f894eb9c7943ebae67017e1aec2 2012/11/18 20:06:09 29434 records - OK
6puf6KlMTK1Hq 7.0 559141ef34f9e6226bb58560e9b52e4cc5165150 2012/11/11 20:06:22 26900 records - OK
H69CzRfSd 7.0 cc55013e63ff89319ec772e34d77056c7108cd3b 2012/11/04 20:05:22 25164 records - OK
i2gvnucEv 7.0 f477dc247d9b562bb64fd4f46a7dcbdf7124eb60 2012/10/28 21:06:37 30226 records - OK
T8fF1FdkJJCFZ 7.0 abaf5f7fda7308fcf7573b193bbf2116723e9802 2012/10/21 21:04:37 16441 records - OK
C6YwIezIHIpgbI 7.0 5adc85528fb49e201d4bc61eca580d6839cc4a4c 2012/10/14 21:05:04 26289 records - OK
ZaOpDbKJnl 7.0 da8cf3fbd81206bb3d8103347a439f920a74bbe2 2012/10/07 21:05:51 27278 records - OK
4LupmW3DANEaOF 7.0 5988744d3cb357f1a013427d466e2d79ab5f8907 2012/09/30 21:05:11 17444 records - OK
HPVhfxISUS 7.0 d4a0dabf4a4df0f79805c6ccdc025f796765e786 2012/09/23 21:06:30 21205 records - OK
dfpud6odw9PjxN 7.0 82ed005784d9e258213070a0cd8bfceff345018d 2012/09/16 21:05:43 11686 records - OK
TtQiqsaDEVD 7.0 a95ae63004b8d857c2db055f4e47c15bfc97f626 2012/09/09 21:04:34 12677 records - OK
CjAOQXA6CzK 7.0 c39bf233d25242ae9ed8cf204b9b788c8f45ab79 2012/09/02 21:05:28 10118 records - OK
8pa5SzGZ 7.0 d37b5484b009947b7cdd3837dafe8148615401c2 2012/08/26 21:05:26 12602 records - OK
kuXPyCtkhv 7.0 41bf1347794ab7060dec7aaecc1d1d95cf6fecb5 2012/08/19 21:04:05 18298 records - OK
24CtDMCanCz 7.0 1a997511e5892aaeb69b3db70e06676af36382e3 2012/08/12 21:05:19 17126 records - OK
OLEYPMHow 7.0 f7226c59914e3683e538e668c3b664af3232654d 2012/08/05 21:03:53 20539 records - OK
0yGINQQC 7.0 4035c8d3b617bf935a317a8c57efaa8e835a61f4 2012/07/29 21:05:26 19330 records - OK
COcEziYf1n70 7.0 09b55bc000f184ed426f1d8b9665669346fe5e71 2012/07/22 21:05:34 19692 records - OK
zNH4vZdNxOD5AZY 7.0 f746c097f298e94faa9db94e6f64ef9fd4a7b010 2012/07/15 21:05:43 14727 records - OK
FkmCej5H 7.0 792a6a25a17e764390440cd4c2c6ca5a97ab162f 2012/07/08 21:04:33 19485 records - OK
2zplCwz2g2qi 7.0 ca9905c39e3d93428a4db65a192debe9fbd7acf7 2012/07/01 21:04:55 22898 records - OK
10uW2hk0 7.0 dc29c610b866c66ba5327e7830452b2460149a35 2012/06/24 21:05:17 20551 records - OK
LkklV3Je7vp5 7.0 c28739bea153508d12942ac9a61abd475d0a0404 2012/06/17 21:03:35 9661 records - OK
KO60VYWOd0rjQn 7.0 e5b5835a7c512120c5348e31483a4caa2a845d28 2012/06/10 21:04:32 23632 records - OK
bgDXjO3eFM 7.0 61853ce89026ef0ebbd80174f1b7dd5d25bbc63a 2012/06/03 21:04:41 12423 records - OK
Ekw1bXgM 7.0 4e6c9897e153b47ca97b7da48ceed23e555a7761 2012/05/27 21:04:26 15493 records - OK
7yRrFIibE 7.0 35f4c105cecd8ec1fd01714abebf30f8f3efb96e 2012/05/20 21:03:29 13065 records - OK
IikTFFLJeH 7.0 3522aa84677411aa7d67796bb05ea3ab62f02a71 2012/05/13 21:04:24 16238 records - OK
oKB4XtYQokft 7.0 7597333540eda537bd42c0a17d4a6526ad247a2e 2012/05/06 21:04:33 11570 records - OK
sG1zwAOxMyl 7.0 867814380363bc6ad605acf4b96e02c54dbd60f7 2012/04/29 21:03:28 15478 records - OK
7CKMTbtyJnykJ1 7.0 3c04f402d91a19039cb9c223c435dc4ea1bb3da4 2012/04/22 21:05:05 11881 records - OK
rYVRIzpygH 7.0 8d0220a2a50b367e61a51d3b29c2659cde41bb7f 2012/04/15 21:03:29 13578 records - OK
pw31ubKCVDdz1 7.0 b79dc6f5832ad390108d1880694ec538e8b34bb0 2012/04/08 21:05:02 14292 records - OK
6HyhlHiSb1k1SsE 7.0 8ff7cc095c43c2154275b7a54a89bf365e8daf4a 2012/04/01 21:03:24 14084 records - OK
kabJLyX9 7.0 9502a428b32be4ad08556134e271c9ba03195398 2012/03/25 21:04:43 19126 records - OK
nDxrbyol 7.0 28c2fabbc645aff41baac12b911a8499ea163536 2012/03/18 21:03:23 14920 records - OK
EggGKq23vGMCG 7.0 86de597ff06e58206f94263f2eef33cb41b2530c 2012/03/11 21:03:25 19017 records - OK
QaK5MHlA01LuuB 7.0 5bd1d666e7c9ca70c34e591dc6c55314ce4b11af 2012/03/04 20:04:32 19691 records - OK
xET7F1et3LoAKu 7.0 15a9d10c451d2fcf124700f29f557d9bf338e671 2012/02/26 20:03:21 23605 records - OK
t1fckc2pt 7.0 5647d941e5358105ca6558dce78873f06c48d5dc 2012/02/19 20:03:45 19067 records - OK
JTuzhtXmGccVH 7.0 c9b2600cb665ce34e0ccd0f19e0a88cd44437f51 2012/02/12 20:04:49 19019 records - OK
cJ49LtRL8X8 7.0 9df2e129e78a9d9ab491186da1329c1dd1190e17 2012/02/05 20:05:25 28028 records - OK
6sNIgFT8Yk 7.0 b69b9504a51b8777b8e95a4680dc8ac1d8d8c25d 2012/01/29 20:08:41 29444 records - OK
hGnth0AMhYsC 7.0 3d7431bdee1a22d6329e017f348db7760f2645ac 2012/01/23 01:22:13 19353 records - OK
61Hfit9I5nNrcsW 7.0 e04570f78fb00d758abdf77c534a460980e102c0 2012/01/15 20:12:31 20747 records - OK
xUabp4r2KoS 7.0 2de2479b112c4416e2375343f57ca789b042aecc 2012/01/08 20:04:30 28052 records - OK
aj9SGqoFu 7.0 c4bd9612ff1f71d8bd23b4f1bc114eed1ae2ee6b 2012/01/01 20:04:40 12183 records - OK
eNHRUbfJ7L5wI 7.0 28b1d218ade8f05fdc8550c7456ac3b74f705208 2011/12/25 20:03:33 19984 records - OK
bQJqSLwRa0w 7.0 539e41e8f3d97a6f347600c7cef903d9f34e0518 2011/12/18 20:08:45 22627 records - OK
GNpEtEvCKeSaih 7.0 f8e81968965f555bce0d02fc9933fee840b97aaf 2011/12/12 13:20:22 49580 records - OK
qh20Uu7QMd 7.0 14751e0f442bba3efc08ee12d82a2815c61cfeb6 2011/12/04 01:00:00 45195 records - OK
MKTSzK5Gg 7.0 1a1e6cb9b3096a2cbba2c31d05e11914c0357d52 2011/12/04 00:00:00 165532 records - OK
SkDsxFrq8mRp 7.0 0f948a7d416c556bfc8a8be2c2c39f998fee6d9e 2011/12/03 23:00:00 170820 records - OK
jp0FV43B51VRf 7.0 9357c3cc73a4a374346a678f197daa22496c7ae5 2011/12/03 22:00:00 171279 records - OK
1knjot5SNbtjpse 7.0 ae56b06b3d6f1e13c5f10cce4ed68f2cccbf3298 2011/12/03 21:00:00 170253 records - OK
rbBG9xWx 7.0 fdaab5c1079d02c94f20d07c39d638cad79d8771 2011/12/03 20:00:00 170291 records - OK
TATRDIFFoQF 7.0 b59d8841e65d7670b2aae7f2b65734269f6c4fe3 2011/12/03 19:00:00 170501 records - OK
OBAQfmmXEzV5urA 7.0 3946b1d195434cf7a70d144da71c87559475c58f 2011/12/03 18:00:00 353582 records - OK
fFlb8Fqjr736D3N 7.0 358e06756deb6d5773f353e309c1ccf781fb7e36 2014/10/26 16:01:19 1068 records - OK
ZwT4iEqIyJE 7.0 1d45e24aaddaac2d043bcbd3c6e2a91caee566a1 2014/06/25 05:07:15 5666 records - OK
mKVaxRDgCLkbaL 7.0 8df4695f74ea5949551df6044720694e204b13d7 2011/12/03 17:00:00 852776 records - OK
cL6mUnUb 7.0 8f28d5ae24f9820402a138c1707d023f3c4ba99c 2014/10/26 16:01:10 859 records - OK
29aOSfvQgdH8 7.0 362de42d3c93df53a53db806ee984af15c7d7f0b 2014/08/24 21:17:28 2228 records - OK
yWJbDszC1Pdhtt 7.0 4614d57b2919a7591e019206a71ef1b4fd765b65 2014/04/13 21:14:28 2109 records - OK
jskAKT8Jh5dcA 7.0 ce3100ec091fcc4cfffed117a4f62fb0bd553113 2013/11/24 20:15:53 1683 records - OK
GLUgdaHxCcImOH 7.0 6ede5b37423910c2f3ffff6d90fef6a16e565e5e 2013/09/01 21:14:42 1327 records - OK
sEBuWQbJRz 7.0 c1d53c2aef72dfab36a8045897938e7a31f279ac 2013/07/14 21:15:07 1590 records - OK
FPoEqUuU5SJCN 7.0 0cb77ee7a3e6545553585eb6df267a86d4fecbe4 2013/04/21 21:14:29 1680 records - OK
6MHzGMA4 7.0 6cb68b8fab821702ef054f864ff44917414e50fa 2013/02/03 20:13:43 2078 records - OK
BWflGgOe0tTLIr 7.0 cfbe9cf43615f7856e4c35f0fc02e2baf12e39e7 2012/12/16 20:14:14 1725 records - OK
bAos3CEZp1sk 7.0 047694e79b1a8d295f27ea9c6565062404f84a57 2012/11/11 20:12:52 2050 records - OK
gLghENZ0L3 7.0 f3413603f4ee1c88018a78c1f6faf2abeb8fa8c1 2012/09/23 21:13:14 1456 records - OK
EIrWBeIX4 7.0 8871f579eeb7e5e7b70c6dd898afd27391d7daf4 2012/06/24 21:12:36 1421 records - OK
0sa0dRI6meA2Z2Y 7.0 3ee43130fe7fec4b367a791892a444d0a791b29b 2012/03/25 21:12:30 1385 records - OK
nrR864ff 7.0 fddc5d687537580c7166dbf117d591593bc62261 2012/01/22 21:56:09 1653 records - OK
DCbyUjEagL 7.0 9561d2cafe5c9310e4825953c859e78272554912 2014/10/26 16:00:58 792 records - OK
ogEaqcMED 7.0 6ed594574179af60a5ec032fa78f8cc13c7c0bda 2014/10/05 21:28:15 2378 records - OK
uyAi6Vi1zzwIwJG 7.0 30e1ed61d7863a8a261809bc9d4d125820f21076 2014/08/10 21:27:37 2957 records - OK
owAahcNEzsY 7.0 9cdba67f029bf03bf363a984bb3b9b1409d304bb 2014/07/13 21:26:45 2706 records - OK
j56OV9gAP0JfnA3 7.0 202db6bd60030e8de0b5522ce875781f713f6dfb 2014/06/08 21:26:58 2619 records - OK
DbGPEURxNT 7.0 c4b0f2db9c6c4f419a1f236e12087cf05fef96ee 2014/05/11 21:26:12 2805 records - OK
k6U2f9gC 7.0 c8524257d9fe65a7c213c8288f32f62f46baf3e6 2014/04/20 21:26:10 2194 records - OK
QkRDL9y45X02 7.0 8db5435fdfa7a58ec4b7a7b09bc8d22da7b33557 2014/04/06 21:24:59 2290 records - OK
Uf7BGnDfj11M 7.0 2c7af9317ddc3df65fb41d24594a97580a7e0368 2014/02/23 20:25:04 2844 records - OK
o65NLYsiA5 7.0 79ee97945d406605f5330158ea8367948c6377de 2013/12/22 20:25:01 2352 records - OK
uP4ubIrzK 7.0 4ed4e052d8cc2df4eb5f1916da50e16da9e4e3da 2013/10/20 21:25:47 2062 records - OK
e3tiByZs3e 7.0 cc2fc58477a41d340f63e6d3d228133c927a9810 2013/09/15 21:25:22 3440 records - OK
EbesshuP 7.0 63ff62f7b5aa956912f6c29e7ad7be26569416ff 2013/08/18 21:25:05 1485 records - OK
C9NnkU04by9TPt 7.0 d95d1ab4adf9a869001802f64960356e903dd478 2013/07/21 21:24:06 2214 records - OK
RojfDbDiqTTJLqy 7.0 45cdfad530697916adbfea43a8763a4ab0c95beb 2013/05/19 21:24:48 1426 records - OK
Z4fWx8GP80D9vz 7.0 bd9fd948b79e07c8676018e17a43ee81f5335e36 2013/04/21 21:24:10 1641 records - OK
uUOuX08K3bIyTYc 7.0 c7f70566b9bae9fd3f5a8d0b56d961f890a55508 2013/03/17 21:23:44 1742 records - OK
VxBZM17EW67WQ 7.0 8893c0d254eb40c78b5c78ea17fbc3be60ea6304 2013/01/20 20:24:33 2016 records - OK
a0PQZJxbp 7.0 cdf3a9d2dcab57f90c378d9eefacbfd358a42699 2012/12/09 20:23:23 1620 records - OK
lcFYMFSPxA5Ai 7.0 c0726ba000e840272f0810b89051e6daa8799084 2012/11/04 20:23:16 1658 records - OK
qeYs9LLNj7u 7.0 216611859de0125bf130d6324d43c9115cb05def 2012/10/07 21:23:20 1465 records - OK
YpGddJb66pdDWS 7.0 264c14ad60c4423ec292f5f8b182e4448504dfa9 2012/09/09 21:23:14 1588 records - OK
El66R1co8 7.0 33197bfe9efefa9db33725d240757103c625b601 2012/07/22 21:22:36 1702 records - OK
Nazt1BXjxi9 7.0 74d8e114edb84b95bc09d5a2a36191d15a61e2cb 2012/06/10 21:22:36 1659 records - OK
6MfMy1qMuDCU 7.0 79ca8239f310688d2b9c314fa3d738a34985cce3 2012/04/29 21:22:34 1670 records - OK
yZCyGW6f31n 7.0 aac27e986e3731e5260cb76f5b14558e36660dec 2012/03/11 21:22:28 1729 records - OK
WiWqJoM5t 7.0 fa5c96b8be693a20c2a295e3545419e6f117fdc4 2012/01/29 20:23:00 1523 records - OK
toAlajDB8 7.0 e9b21e0a3578ef2e2067f4876309671ddc78f65f 2011/12/18 20:22:29 1805 records - OK
pYjbnJDQppzL 7.0 8f7a8f6f55130f6becc5331ab38dc2108746b8aa 2011/12/03 16:00:00 26456 records - OK
TMrFh1zEjmf 7.0 e6d52b11d2f7d405ccd31347da3b6fde69825168 2011/12/03 15:00:00 74279 records - OK
UZSeHfTShe 7.0 e20ffde4bbc58e0585b0b3b2f324bc91272c2360 2011/12/03 14:00:00 1 record - OK
Total records count: 5492656

Anti-rootkit module version ( ver: 9.1.201408290, api: 7.03 )

Using 106595627 as Dr.Web ® Key file

-----------------------------------------------------------------------------
Start scanning
-----------------------------------------------------------------------------
Command line used:-rpcep:\pipe\412481E00A -rpcpr:np "c:\users\vicente\desktop\mxlewsuj.exe"

Object(s) to scan:
- c:\users\vicente\desktop\mxlewsuj.exe

Total 394456022271 bytes in 25230 files scanned (27717 objects)
Total 25201 files (27682 objects) are clean
Total 1 file are infected
Total 34 files are raised error condition
Scan time is 00:08:04.213

the Threat file Name is (Program.brotherSoft.4)

#54
Naathim

Posted 27 October 2014 - 01:40 PM

GeekU Minion

Expert
4,568 posts

Hi

Nothing so far. I suspect that some internals are damaged here, but I can't tell what exactly... so far.

Scan with HitmanPro

In any case don't remove on your own anything that Hitman Pro detects!
This scanner, as it is a really good for checking, has been known for deleting files instead od curing them, which in some cases may render the machine unbootable.
Any removals will be done manually after careful analysis of the scan results!

Please download HitmanPro by SurfRight and save it to your desktop.
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.

Right-click on icon and select Run as Administrator to start the tool.
If the program won't run please run it while holding down the left CTRL key until it's loaded!
Click on the Next button. You must agree with the terms of EULA (if asked).
Check the box beside No, I only want to perform a one-time scan to check this computer.
Click on the Next button.
The program will start to scan the computer. It would only take several minutes.
When the scan is done click on drop-down menu of the found entries (if any) and choose - Apply to all => Ignore.
- If there isn't a dropdown menu when the scan is done then please don't delete anything and close HitmanPro!
  Navigate to C:\ProgramData\HitmanPro\Logs, open the report and include it it your next reply.
Click on the Next button.
Click on the Save Log button.
Save that file to your desktop.

Please include that logfile in your next reply.
Don't forget to re-enable your previously switched-off protection software!

Scan with Farbar Recovery Scan Tool

Please re-run Farbar Recovery Scan Tool.

Right-click on icon and select Run as Administrator to start the tool.
> XP users click run after receipt of Windows Security Warning - Open File.
> 8 users will be prompted about Windows SmartScreen protection - click More information and Run.
Make sure that Addition option is checked.
Press Scan button and wait.
The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.

Please include their content in your next reply.

#55
x_LUIS_X

Posted 27 October 2014 - 05:13 PM

Member

Topic Starter
Member
153 posts

Hello Naat I could run the Hitman Pro I try several times.

I open it and it beggined to scan but it only took like 3sec. and it give this log

(it keep asking to connect to the internet and I had to connected to the internet to work)

HitmanPro 3.7.9.225
www.hitmanpro.com
   Computer name . . . . : VICENTE-PC
   Windows . . . . . . . : 6.1.1.7601.X64/4
   User name . . . . . . : Vicente-PC\Vicente
   UAC . . . . . . . . . : Disabled
   License . . . . . . . : Free
   Scan date . . . . . . : 2014-10-27 14:52:52
   Scan mode . . . . . . : Context
   Scan duration . . . . : 1s
   Disk access mode  . . : Direct disk access (SRB)
   Cloud . . . . . . . . : Internet
   Reboot  . . . . . . . : No
   Threats . . . . . . . : 0
   Objects scanned . . . : 1
   Files scanned . . . . : 1
   Remnants scanned  . . : 0 files / 0 keys

and here is the FRST log

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-10-2014 01
Ran by Vicente (administrator) on VICENTE-PC on 27-10-2014 17:00:24
Running from C:\Users\Vicente\Downloads
Loaded Profile: Vicente (Available profiles: Vicente & LogMeInRemoteUser)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Español (España, internacional)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
(SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe
(Motorola Mobility LLC) C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe
(Motorola) C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe
(Seagate Technology LLC) C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.DASWindowsService.exe
(Motorola Mobility LLC) C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperAgent.exe
(Secure Download Ltd.) C:\Program Files (x86)\SoftPlanet Software Assistant\spassist.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Toaster.exe
() C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [DellStage] => C:\Program Files (x86)\Dell Stage\Dell Stage\stage_primary.exe [2195824 2012-02-01] ()
HKLM\...\Run: [LogMeIn GUI] => C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe [57928 2012-11-29] (LogMeIn, Inc.)
HKLM-x32\...\Run: [Dell Registration] => C:\Program Files (x86)\System Registration\prodreg.exe [4165440 2011-08-04] (Dell, Inc.)
HKLM-x32\...\Run: [NBAgent] => C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe [1234216 2010-03-26] (Nero AG)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59240 2012-02-20] (Apple Inc.)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [DBAgent] => C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\DBAgent.exe [1517640 2013-05-30] (Seagate Technology LLC)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
Winlogon\Notify\GoToAssist: C:\Program Files (x86)\Citrix\GoToAssist\514\G2AWinLogon_x64.dll [X]
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1216312544-3494976201-1159279589-1001\...\Run: [EPSON Stylus CX5600 Series] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATICAL.EXE [209408 2007-01-25] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-1216312544-3494976201-1159279589-1001\...\Run: [Uploader] => C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.Uploader.exe [122984 2013-05-30] (Seagate Technology LLC)
HKU\S-1-5-21-1216312544-3494976201-1159279589-1001\...\Run: [OfficeSyncProcess] => C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE [720064 2013-04-22] (Microsoft Corporation)
HKU\S-1-5-21-1216312544-3494976201-1159279589-1001\...\MountPoints2: {1d1d9e06-610f-11e2-8395-d067e50e031f} - F:\AutoRun.exe "motorola.html"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TMMonitor.lnk
ShortcutTarget: TMMonitor.lnk -> C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\TMMonitor.exe (ArcSoft, Inc.)
Startup: C:\Users\Vicente\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Herramienta de búsqueda de soportes de PMB.lnk
ShortcutTarget: Herramienta de búsqueda de soportes de PMB.lnk -> C:\Program Files (x86)\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe (Sony Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.msn.com/?pc=AV01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xAFF9DF0D988ACF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://prodigy.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = es-MX
SearchScopes: HKLM-x32 - {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = http://www.bing.com/...=AVASDF&PC=AV01
SearchScopes: HKCU - {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.co...q={searchTerms}
SearchScopes: HKCU - {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = http://www.bing.com/...=AVASDF&PC=AV01
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = https://www.google.c...q={searchTerms}
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Skype add-on for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Aplicación auxiliar de inicio de sesión de Windows Live ID -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: EpsonToolBandKicker Class -> {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} -> C:\Program Files (x86)\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macr...director/sw.cab
DPF: HKLM-x32 {20A60F0D-9AFA-4515-A0FD-83BD84642501} http://messenger.zon...kr.cab56986.cab
DPF: HKLM-x32 {233C1507-6A77-46A4-9443-F871F945D258} http://download.macr...director/sw.cab
DPF: HKLM-x32 {C3F79A2B-B9B4-4A66-B012-3EE46475B072} http://messenger.zon...nt.cab56907.cab
DPF: HKLM-x32 {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} https://secure.logme...rl.cab?lmi=1007
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1167637.dll (Adobe Systems, Inc.)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

Chrome:
=======
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\21.0.1180.89\PepperFlash\pepflashplayer.dll No File
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.124\gcswf32.dll No File
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.124\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.124\pdf.dll ()
CHR Plugin: (Babylon ToolBar) - C:\Users\Vicente\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.8_0\BabylonChromeToolBar.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll No File
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File
CHR Plugin: (Java™ Platform SE 6 U33) - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll No File
CHR Plugin: (Java Deployment Toolkit 6.0.330.5) - C:\Windows\SysWOW64\npdeployJava1.dll No File
CHR Plugin: (RealPlayer™ G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll No File
CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpjplug.dll No File
CHR Plugin: (RealJukebox NS Plugin) - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprjplug.dll No File
CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File
CHR Profile: C:\Users\Vicente\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Skype Click to Call) - C:\Users\Vicente\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2014-08-25]
CHR Extension: (Google Wallet) - C:\Users\Vicente\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-10-20]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2012-10-02]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe [376144 2013-06-07] (LogMeIn, Inc.)
S4 LMIMaint; C:\Program Files (x86)\LogMeIn\x64\RaMaint.exe [226640 2013-06-07] (LogMeIn, Inc.)
S4 LogMeIn; C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe [407424 2012-11-29] (LogMeIn, Inc.)
R2 Motorola Device Manager; C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe [137528 2013-11-15] (Motorola Mobility LLC)
R2 PST Service; C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe [65657 2011-09-02] (Motorola) [File not signed]
R2 Seagate Dashboard Services; C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.DASWindowsService.exe [16000 2013-05-30] (Seagate Technology LLC)
S2 BroadCamService; "C:\Program Files (x86)\NCH Software\BroadCam\broadcam.exe" -service [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 LMIInfo; C:\Program Files (x86)\LogMeIn\x64\RaInfo.sys [16056 2013-05-27] (LogMeIn, Inc.)
R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-02-28] (Riverbed Technology, Inc.)
S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Research In Motion Limited)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-13] (Brother Industries Ltd.)
S3 StkTMini; C:\Windows\System32\Drivers\StkTMini.sys [528256 2007-11-15] (Syntek) [File not signed]
S3 motmodem; system32\DRIVERS\motmodem.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-27 16:56 - 2014-10-27 16:56 - 11194928 _____ (SurfRight B.V.) C:\Users\Vicente\Downloads\HitmanPro_x64.exe
2014-10-27 16:49 - 2014-10-27 14:47 - 11194928 _____ (SurfRight B.V.) C:\Users\Vicente\Desktop\HitmanPro_x64.exe
2014-10-27 14:53 - 2014-10-27 14:53 - 00001282 _____ () C:\Users\Vicente\Documents\HitmanPro_20141027_1453.log
2014-10-27 14:50 - 2014-10-27 14:52 - 00000000 ____D () C:\ProgramData\HitmanPro
2014-10-27 02:19 - 2014-10-27 02:19 - 02130810 _____ () C:\Users\Vicente\Desktop\cureit.log
2014-10-26 18:54 - 2014-10-26 18:54 - 00000000 ____D () C:\Users\Vicente\Doctor Web
2014-10-26 18:53 - 2014-10-26 18:46 - 156149000 _____ () C:\Users\Vicente\Desktop\mxlewsuj.exe
2014-10-25 17:04 - 2014-10-25 17:04 - 05038224 _____ (AVAST Software) C:\Users\Vicente\Desktop\avastclear.exe
2014-10-25 17:03 - 2014-10-25 16:42 - 01132704 _____ (ESET spol. s r.o.) C:\Users\Vicente\Desktop\eset_av_remover.exe
2014-10-25 02:40 - 2014-10-25 02:40 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-VICENTE-PC-Microsoft-Windows-7-Home-Premium-(64-bit).dat
2014-10-25 02:39 - 2014-10-25 02:39 - 00000000 ____D () C:\RegBackup
2014-10-24 02:16 - 2014-09-04 20:11 - 06584320 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-10-24 02:16 - 2014-09-04 19:52 - 05703168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-10-24 02:16 - 2014-08-28 20:07 - 03179520 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-10-24 02:16 - 2014-05-08 03:32 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-10-23 16:15 - 2014-10-23 16:16 - 00000000 ____D () C:\Users\Vicente\Desktop\Tweaking.com - Windows Repair
2014-10-23 16:05 - 2014-10-25 02:42 - 00000000 ____D () C:\Users\Vicente\Desktop\Nueva carpeta (2)
2014-10-22 22:56 - 2014-10-22 22:56 - 00000000 ____D () C:\Intel
2014-10-22 22:54 - 2013-10-01 20:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-10-22 22:54 - 2013-10-01 20:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-10-22 22:54 - 2013-10-01 20:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-10-22 22:54 - 2013-10-01 19:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-10-22 22:54 - 2013-10-01 19:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-10-22 22:54 - 2013-10-01 19:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-10-22 22:54 - 2013-10-01 19:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-10-22 22:54 - 2013-10-01 18:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-10-22 22:54 - 2013-10-01 18:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2014-10-22 22:54 - 2013-10-01 18:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2014-10-22 22:54 - 2013-10-01 18:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-10-22 22:54 - 2013-10-01 18:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-10-22 22:54 - 2013-10-01 17:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-10-22 22:54 - 2013-10-01 17:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-10-22 22:54 - 2013-10-01 17:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-10-22 22:54 - 2013-10-01 16:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-10-22 22:53 - 2012-08-23 08:13 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2014-10-22 22:53 - 2012-08-23 08:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2014-10-22 22:53 - 2012-08-23 08:08 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbGD.sys
2014-10-22 22:53 - 2012-08-23 05:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll
2014-10-22 22:53 - 2012-08-23 04:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2014-10-22 03:06 - 2014-10-22 03:06 - 00038585 _____ () C:\Users\Vicente\Downloads\Addition.txt
2014-10-22 03:04 - 2014-10-27 17:00 - 00018952 _____ () C:\Users\Vicente\Downloads\FRST.txt
2014-10-22 03:03 - 2014-10-27 16:59 - 00000000 ____D () C:\Users\Vicente\Downloads\FRST-OlderVersion
2014-10-20 20:44 - 2014-10-20 20:45 - 04965896 _____ (Piriform Ltd) C:\Users\Vicente\Downloads\ccsetup418.exe
2014-10-20 20:39 - 2014-10-09 20:05 - 00507392 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-10-20 20:39 - 2014-10-09 20:05 - 00276480 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-10-20 20:39 - 2014-10-09 20:00 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-10-20 20:39 - 2014-10-06 20:54 - 00378552 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-10-20 20:39 - 2014-10-06 20:04 - 00331448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-10-20 20:39 - 2014-09-28 18:58 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-10-20 20:39 - 2014-09-25 16:46 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-10-20 20:39 - 2014-09-25 16:46 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-10-20 20:39 - 2014-09-25 16:32 - 02017280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-10-20 20:39 - 2014-09-18 19:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-10-20 20:39 - 2014-09-18 19:44 - 17484800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-10-20 20:39 - 2014-09-18 19:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-10-20 20:39 - 2014-09-18 19:30 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-10-20 20:39 - 2014-09-18 19:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-10-20 20:39 - 2014-09-18 19:06 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-10-20 20:39 - 2014-09-18 19:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-10-20 20:39 - 2014-09-18 19:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-10-20 20:39 - 2014-09-18 18:55 - 02187264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-10-20 20:39 - 2014-09-18 18:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-10-20 20:39 - 2014-09-18 18:49 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-10-20 20:39 - 2014-09-18 18:42 - 00710656 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-10-20 20:39 - 2014-09-18 18:36 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-10-20 20:39 - 2014-09-18 18:20 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-10-20 20:39 - 2014-09-18 18:14 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-10-20 20:39 - 2014-09-18 17:53 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-10-20 20:39 - 2014-06-18 16:23 - 01943696 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2014-10-20 20:39 - 2014-06-18 16:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
2014-10-20 20:39 - 2014-06-18 16:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll
2014-10-20 20:39 - 2014-06-18 16:23 - 00156312 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2014-10-20 20:39 - 2014-06-18 16:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll
2014-10-20 20:39 - 2014-06-18 16:23 - 00073880 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2014-10-20 20:38 - 2014-09-25 16:50 - 13619200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-10-20 20:38 - 2014-09-25 16:46 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-10-20 20:38 - 2014-09-25 16:43 - 11807232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-10-20 20:38 - 2014-09-25 16:31 - 02108416 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-10-20 20:38 - 2014-09-18 20:25 - 23631360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-10-20 20:38 - 2014-09-18 19:55 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-10-20 20:38 - 2014-09-18 19:41 - 02796032 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-10-20 20:38 - 2014-09-18 19:40 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-10-20 20:38 - 2014-09-18 19:40 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-10-20 20:38 - 2014-09-18 19:38 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-10-20 20:38 - 2014-09-18 19:36 - 05829632 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-10-20 20:38 - 2014-09-18 19:31 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-10-20 20:38 - 2014-09-18 19:27 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-10-20 20:38 - 2014-09-18 19:26 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-10-20 20:38 - 2014-09-18 19:25 - 04201472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-10-20 20:38 - 2014-09-18 19:25 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-10-20 20:38 - 2014-09-18 19:25 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-10-20 20:38 - 2014-09-18 19:18 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-10-20 20:38 - 2014-09-18 19:14 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-10-20 20:38 - 2014-09-18 19:02 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-10-20 20:38 - 2014-09-18 19:01 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-10-20 20:38 - 2014-09-18 19:00 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-10-20 20:38 - 2014-09-18 18:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-10-20 20:38 - 2014-09-18 18:58 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-10-20 20:38 - 2014-09-18 18:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-10-20 20:38 - 2014-09-18 18:51 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-10-20 20:38 - 2014-09-18 18:50 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-10-20 20:38 - 2014-09-18 18:42 - 00731136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-10-20 20:38 - 2014-09-18 18:40 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-10-20 20:38 - 2014-09-18 18:33 - 02309632 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-10-20 20:38 - 2014-09-18 18:32 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-10-20 20:38 - 2014-09-18 18:18 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-10-20 20:38 - 2014-09-18 17:59 - 01810944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-10-20 20:38 - 2014-09-18 17:59 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-10-20 20:38 - 2014-09-18 17:52 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-10-20 20:37 - 2014-09-17 20:00 - 03241472 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-10-20 20:37 - 2014-09-17 19:32 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-10-20 20:37 - 2014-09-03 23:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2014-10-20 20:37 - 2014-09-03 23:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2014-10-20 20:37 - 2014-07-16 20:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-10-20 20:37 - 2014-07-16 20:07 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-10-20 20:37 - 2014-07-16 20:07 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2014-10-20 20:37 - 2014-07-16 20:07 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-10-20 20:37 - 2014-07-16 20:07 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-10-20 20:37 - 2014-07-16 20:07 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-10-20 20:37 - 2014-07-16 19:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll
2014-10-20 20:37 - 2014-07-16 19:39 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-10-20 20:37 - 2014-07-16 19:39 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-10-20 20:37 - 2014-07-16 19:21 - 00212480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-10-20 20:37 - 2014-07-16 19:21 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-10-20 20:36 - 2014-09-12 19:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-10-20 20:36 - 2014-09-12 19:40 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-10-19 23:35 - 2014-10-21 17:15 - 00000127 _____ () C:\Windows\SysWOW64\ckfiles.txt
2014-10-17 21:05 - 2014-10-17 21:09 - 00000000 ____D () C:\MGADiagToolOutput
2014-10-17 21:05 - 2014-10-17 21:05 - 00000000 ____D () C:\ProgramData\Office Genuine Advantage
2014-10-17 02:23 - 2014-10-17 02:23 - 00852808 _____ (Google Inc.) C:\Users\Vicente\Downloads\chrome.exe
2014-10-17 02:22 - 2014-10-20 00:09 - 00001360 _____ () C:\Users\Vicente\Desktop\Google Chrome.lnk
2014-10-16 18:48 - 2014-10-25 17:11 - 00117556 _____ () C:\Windows\PFRO.log
2014-10-16 18:39 - 2014-10-16 18:05 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-10-16 18:28 - 2014-10-16 18:53 - 00013328 _____ () C:\zoek-results.log
2014-10-16 18:05 - 2014-10-16 18:37 - 00000000 ____D () C:\zoek_backup
2014-10-16 17:54 - 2014-10-16 17:54 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-10-16 17:53 - 2013-01-09 20:42 - 02617648 _____ (VS Revo Group Ltd.) C:\Users\Vicente\Downloads\revosetup.exe
2014-10-15 16:04 - 2014-10-25 17:11 - 00000672 _____ () C:\Windows\setupact.log
2014-10-15 16:04 - 2014-10-15 16:04 - 00000000 _____ () C:\Windows\setuperr.log
2014-10-15 15:43 - 2014-10-15 15:43 - 00059504 _____ () C:\Users\Vicente\Documents\cc_20141015_154345.reg
2014-10-15 15:42 - 2014-10-15 15:42 - 00371532 _____ () C:\Users\Vicente\Documents\cc_20141015_154206.reg
2014-10-15 15:14 - 2014-10-27 16:59 - 02113024 _____ (Farbar) C:\Users\Vicente\Downloads\FRST64.exe
2014-10-14 21:45 - 2014-10-14 21:51 - 00000000 ____D () C:\AdwCleaner
2014-10-14 21:45 - 2014-10-14 21:32 - 01976320 _____ () C:\Users\Vicente\Downloads\AdwCleaner.exe
2014-10-14 03:26 - 2014-10-14 03:49 - 00037624 _____ () C:\Windows\system32\Drivers\TrueSight.sys
2014-10-14 03:26 - 2014-10-14 03:26 - 00000000 ____D () C:\ProgramData\RogueKiller
2014-10-14 02:18 - 2014-10-21 16:34 - 00000000 ___RD () C:\Users\Vicente\Desktop\Nueva carpeta
2014-10-14 02:11 - 2014-10-14 02:11 - 00000000 ____D () C:\Windows\ERUNT
2014-10-13 19:39 - 2014-10-27 17:00 - 00000000 ____D () C:\FRST
2014-10-06 22:03 - 2014-10-11 23:22 - 00003348 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1216312544-3494976201-1159279589-1001
2014-10-06 22:03 - 2014-10-11 23:22 - 00003218 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1216312544-3494976201-1159279589-1001
2014-10-06 22:03 - 2014-10-06 22:03 - 00003106 _____ () C:\Windows\System32\Tasks\RealCreateProcessScheduledTask45746778S-1-5-21-1216312544-3494976201-1159279589-1001
2014-10-06 21:55 - 2014-10-06 21:55 - 00003106 _____ () C:\Windows\System32\Tasks\RealCreateProcessScheduledTask45233659S-1-5-21-1216312544-3494976201-1159279589-1001
2014-09-30 13:52 - 2014-09-24 20:08 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-09-30 13:52 - 2014-09-24 19:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-27 16:59 - 2012-08-14 21:55 - 00000838 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-10-27 16:48 - 2011-10-24 14:47 - 01547754 _____ () C:\Windows\WindowsUpdate.log
2014-10-27 16:42 - 2012-01-19 17:19 - 00001036 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-10-27 02:20 - 2012-01-19 17:19 - 00001032 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-10-26 18:54 - 2012-01-13 21:28 - 00000000 ____D () C:\Users\Vicente
2014-10-25 17:47 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\rescache
2014-10-25 17:18 - 2009-07-13 22:45 - 00028352 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-10-25 17:18 - 2009-07-13 22:45 - 00028352 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-10-25 17:11 - 2011-10-24 15:28 - 00000000 ____D () C:\Users\Default\AppData\Local\SoftThinks
2014-10-25 17:11 - 2011-10-24 15:28 - 00000000 ____D () C:\Users\Default User\AppData\Local\SoftThinks
2014-10-25 17:11 - 2011-10-24 15:05 - 00000000 ____D () C:\Temp
2014-10-25 17:11 - 2011-10-24 15:04 - 00000000 ____D () C:\Program Files (x86)\Dell DataSafe Local Backup
2014-10-25 17:11 - 2009-07-13 23:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-10-25 17:04 - 2010-11-21 01:09 - 00160398 _____ () C:\Windows\system32\perfc00A.dat
2014-10-25 17:04 - 2010-11-21 01:09 - 00065620 _____ () C:\Windows\system32\perfh00A.dat
2014-10-25 17:04 - 2009-07-13 23:13 - 00997984 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-10-24 02:00 - 2014-06-30 21:50 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-10-22 22:59 - 2009-07-13 21:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-10-22 22:57 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-10-22 22:56 - 2011-10-24 07:44 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-10-22 22:53 - 2011-02-12 06:26 - 00971634 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-10-22 03:11 - 2013-07-22 23:27 - 00000000 ____D () C:\Windows\system32\MRT
2014-10-22 03:02 - 2012-01-20 15:18 - 103265616 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-10-21 16:41 - 2012-02-29 22:00 - 00000000 ___RD () C:\Users\Vicente\Dropbox
2014-10-21 12:54 - 2009-07-13 22:45 - 00527848 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-10-21 12:52 - 2014-05-06 22:41 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-10-21 03:06 - 2012-08-22 21:15 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-10-20 20:45 - 2014-08-04 18:33 - 00000000 ____D () C:\Program Files\CCleaner
2014-10-20 20:37 - 2014-08-12 14:01 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-10-20 20:33 - 2012-01-19 17:19 - 00004032 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-10-20 20:33 - 2012-01-19 17:19 - 00003780 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-10-17 20:58 - 2009-07-13 23:08 - 00032630 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-10-17 02:42 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\AppCompat
2014-10-16 18:17 - 2014-07-24 18:12 - 00000282 __RSH () C:\Users\Vicente\ntuser.pol
2014-10-15 15:45 - 2012-02-28 20:43 - 00000000 ____D () C:\Windows\Minidump
2014-10-14 21:51 - 2012-01-13 21:54 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-10-11 23:23 - 2012-05-22 17:15 - 00000000 ____D () C:\ProgramData\Real
2014-10-11 23:23 - 2012-01-13 22:07 - 00000000 ____D () C:\Program Files (x86)\Real
2014-10-11 23:23 - 2012-01-13 22:06 - 00000000 ____D () C:\Users\Vicente\AppData\Roaming\Real
2014-10-09 17:49 - 2014-09-26 17:34 - 00003240 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1216312544-3494976201-1159279589-1001
2014-10-09 17:49 - 2014-09-26 17:33 - 00003370 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1216312544-3494976201-1159279589-1001
2014-10-03 15:10 - 2012-01-13 23:15 - 00000000 ____D () C:\Users\Vicente\AppData\Local\Windows Live
2014-10-02 15:53 - 2010-11-20 21:27 - 00278152 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-09-29 21:51 - 2013-06-18 10:30 - 00000069 _____ () C:\Windows\NeroDigital.ini
2014-09-29 21:51 - 2012-01-13 23:25 - 00000000 ____D () C:\Users\Vicente\AppData\Local\Nero
2014-09-27 21:56 - 2014-06-17 19:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\aTube Catcher
2014-09-27 21:56 - 2012-11-28 23:13 - 00000000 ____D () C:\Program Files (x86)\DsNET Corp

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2014-10-26 13:15

==================== End Of Log ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 27-10-2014 01
Ran by Vicente at 2014-10-27 17:01:01
Running from C:\Users\Vicente\Downloads
Boot Mode: Normal
==========================================================

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

ABBYY FineReader 6.0 Sprint (HKLM-x32\...\{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}) (Version: 6.00.1395.4512 - ABBYY Software House)
Actualización del driver del escáner EPSON Stylus CX5600 Series (HKLM-x32\...\{116D5112-0717-4411-A516-43468EF26D73}) (Version: - )
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated)
Adobe Reader X (10.1.12) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.12 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.6 (HKLM-x32\...\Adobe Shockwave Player) (Version: 11.6.7.637 - Adobe Systems, Inc.)
Aimersoft Audio Converter(Build 1.1.52) (HKLM-x32\...\Aimersoft Audio Converter_is1) (Version: - Aimersoft Software)
Aimersoft DVD Creator(Build 1.1.52) (HKLM-x32\...\Aimersoft DVD Creator_is1) (Version: - Aimersoft Software)
Aimersoft DVD Ripper(Build 1.1.52) (HKLM-x32\...\Aimersoft DVD Ripper_is1) (Version: - Aimersoft Software)
Aimersoft DVD Studio Pack(Build 1.1.52) (HKLM-x32\...\Aimersoft DVD Studio Pack_is1) (Version: - Aimersoft Software)
Aimersoft Video Converter(Build 1.1.52) (HKLM-x32\...\Aimersoft Video Converter_is1) (Version: - Aimersoft Software)
AoA Audio Extractor 1.0 (HKLM-x32\...\AoA Audio Extractor_is1) (Version: - AoAMedia.Com)
Apple Application Support (HKLM-x32\...\{EB879750-CCBD-4013-BFD5-0294D4DA5BD0}) (Version: 2.1.7 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ArcSoft TotalMedia 3.5 (HKLM-x32\...\{EDA159E8-9ABD-40DE-B984-49A11F49E1B3}) (Version: 3.5.34.290 - ArcSoft)
Ares 2.1.7 (HKLM-x32\...\Ares) (Version: 2.1.7-Build#3041 - Ares Development Group)
Barra de búsqueda de Encarta (64 bits) (HKLM\...\{08144040-959A-4B0D-8825-2C533F0DDB19}) (Version: 1.0.0 - Microsoft)
BCC 7 OFX 64Bit (HKLM\...\{05D8FAA8-958E-4E47-96DA-F1E043EB01E5}) (Version: 7.0.4 - Boris FX, Inc.)
BroadCam Video Streaming Server (HKLM-x32\...\BroadCam) (Version: - NCH Software)
CCleaner (HKLM\...\CCleaner) (Version: 4.18 - Piriform)
CloneDVD2 (HKLM-x32\...\CloneDVD2) (Version: 2.9.3.0 - Elaborate Bytes)
Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.50.4.0 - Conexant)
Control ActiveX de Windows Live Mesh para conexiones remotas (HKLM-x32\...\{04668DF2-D32F-4555-9C7E-35523DCD6544}) (Version: 15.4.5722.2 - Microsoft Corporation)
Controlador de Pinnacle Video (HKLM\...\{6DE721A5-5E89-4D74-994C-652BB3C0672E}) (Version: 12.1.0.030 - Pinnacle Systems)
ConvertXtoDVD 4.1.19.365 (HKLM-x32\...\{DB6AB705-C9BD-40E3-8929-2EA57F36A4FF}_is1) (Version: 4.1.19.365 - )
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dell DataSafe Local Backup - Support Software (HKLM-x32\...\{A9668246-FB70-4103-A1E3-66C9BC2EFB49}) (Version: 9.4.60 - Dell Inc.)
Dell DataSafe Local Backup (HKLM-x32\...\{0ED7EE95-6A97-47AA-AD73-152C08A15B04}) (Version: 9.4.60 - Dell Inc.)
Dell Edoc Viewer (HKLM\...\{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}) (Version: 1.0.0 - Dell Inc)
Dell Getting Started Guide (HKLM-x32\...\{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}) (Version: 1.00.0000 - Dell Inc.)
Dell PhotoStage (HKLM-x32\...\{0D98F04D-11A1-4B64-A406-43292B9EEE90}) (Version: 1.5.0.130 - ArcSoft)
Dell PhotoStage (HKLM-x32\...\{E4335E82-17B3-460F-9E70-39D9BC269DB3}) (Version: 1.5.0.130 - ArcSoft)
Dell Product Registration (HKLM-x32\...\{2A0F2CC5-3065-492C-8380-B03AA7106B1A}) (Version: 1.1.3 - Dell Inc.)
Dell Stage (HKLM-x32\...\{BF3E8A13-7A99-447A-8396-2BF9D8B8E2C2}) (Version: 1.7.209.0 - Fingertapps)
Dell VideoStage (HKLM-x32\...\InstallShield_{DCE0E79A-B9AC-41AC-98C1-7EF0538BCA7F}) (Version: 1.2.0.1719 - CyberLink Corp.)
Dell VideoStage (x32 Version: 1.2.0.1719 - CyberLink Corp.) Hidden
DVD Shrink 3.2 (HKLM-x32\...\DVD Shrink_is1) (Version: - DVD Shrink)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - )
EPSON Web-To-Page (HKLM-x32\...\{7F14F68C-17FA-4F88-B3FD-7F449C1EBF32}) (Version: - )
e-Sword (HKLM-x32\...\{67880EA3-63C2-4143-88F4-51A21B516CBE}) (Version: 9.06.0000 - Rick Meyers)
e-Sword GUI Localization (HKLM-x32\...\{3A7C2E71-0BC2-45A1-9829-766E72949119}) (Version: 9.00.0002 - Rick Meyers)
Express Burn Disc Burning Software (HKLM-x32\...\ExpressBurn) (Version: - NCH Software)
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 38.0.2125.104 - Google Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.25.5 - Google Inc.) Hidden
Haali Media Splitter (HKLM-x32\...\HaaliMkx) (Version: - )
High-Definition Video Playback 10 (x32 Version: 7.0.11400.29.0 - Nero AG) Hidden
Instalación de DivX (HKLM-x32\...\DivX Setup) (Version: 2.6.1.100 - DivX, LLC)
Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.3347 - Intel Corporation)
Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217067FF}) (Version: 7.0.670 - Oracle)
Java Auto Updater (x32 Version: 2.1.67.1 - Oracle, Inc.) Hidden
Java™ 6 Update 27 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86416027FF}) (Version: 6.0.270 - Oracle)
Java™ 6 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216031F0}) (Version: 6.0.310 - Oracle)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
LogMeIn (HKLM-x32\...\{0330FC8D-EDB2-455E-A3DC-B56DD107E4BC}) (Version: 4.1.2694 - LogMeIn, Inc.)
Malwarebytes Anti-Malware versión 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Manual del usuario CX5600 (HKLM-x32\...\Silent Package Run-Time Sample) (Version: - )
Matroska Pack (HKLM-x32\...\Matroska Pack) (Version: - )
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (español) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 3082) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Encarta 2009 Biblioteca Premium (HKLM-x32\...\{09140081-2C94-4A67-8E55-8483C019C7D2}) (Version: 2009 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Primary Interoperability Assemblies 2005 (HKLM-x32\...\{D24DB8B9-BB6C-4334-9619-BA1C650E13D3}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{820B6609-4C97-3A2B-B644-573B06A0F0CC}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Motorola Device Manager (HKLM-x32\...\{28DB8373-C1BB-444F-A427-A55585A12ED7}) (Version: 2.4.5 - Motorola Mobility)
Motorola Device Software Update (x32 Version: 13.09.3001 - Motorola Mobility) Hidden
Motorola Mobile Drivers Installation 6.3.0 (HKLM\...\{759E6A2F-1F01-45EF-A0C4-22F1B56CB975}) (Version: 6.3.0 - Motorola Mobility LLC)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT Redists (Version: 1.0 - Sony Creative Software Inc.) Hidden
MSVCRT Redists (x32 Version: 1.0 - Sony Creative Software Inc.) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
My Dell (HKLM\...\PC-Doctor for Windows) (Version: 3.4.6308.28 - PC-Doctor, Inc.)
NCH Toolbox (HKLM-x32\...\ToolBox) (Version: - NCH Software)
Nero 10 Menu TemplatePack Basic (x32 Version: 10.0.10600.6.0 - Nero AG) Hidden
Nero 10 Movie ThemePack Basic (x32 Version: 10.0.10600.6.0 - Nero AG) Hidden
Nero BackItUp 10 (HKLM-x32\...\{68AB6930-5BFF-4FF6-923B-516A91984FE6}) (Version: 5.4.11600.19.100 - Nero AG)
Nero BackItUp 10 Help (CHM) (x32 Version: 1.0.10700 - Nero AG) Hidden
Nero Burning ROM 10 (HKLM-x32\...\{7A5D731D-B4B3-490E-B339-75685712BAAB}) (Version: 10.0.11100.10.100 - Nero AG)
Nero BurningROM 10 Help (CHM) (x32 Version: 1.0.10700 - Nero AG) Hidden
Nero BurnRights 10 (HKLM-x32\...\{943CFD7D-5336-47AF-9418-E02473A5A517}) (Version: 4.0.11000.12.100 - Nero AG)
Nero BurnRights 10 Help (CHM) (x32 Version: 1.0.10600 - Nero AG) Hidden
Nero Control Center 10 (x32 Version: 10.0.12000.1.4 - Nero AG) Hidden
Nero ControlCenter 10 Help (CHM) (x32 Version: 1.0.10700 - Nero AG) Hidden
Nero Core Components 10 (x32 Version: 2.0.13700.0.1 - Nero AG) Hidden
Nero CoverDesigner 10 (HKLM-x32\...\{FCF00A6E-FB58-477A-ABE9-232907105521}) (Version: 5.0.10900.11.100 - Nero AG)
Nero CoverDesigner 10 Help (CHM) (x32 Version: 1.0.10600 - Nero AG) Hidden
Nero DiscSpeed 10 (HKLM-x32\...\{34490F4E-48D0-492E-8249-B48BECF0537C}) (Version: 6.0.10800.7.100 - Nero AG)
Nero DiscSpeed 10 Help (CHM) (x32 Version: 1.0.10600 - Nero AG) Hidden
Nero Dolby Files 10 (x32 Version: 2.0.11000.0.10 - Nero AG) Hidden
Nero Express 10 (HKLM-x32\...\{70550193-1C22-445C-8FA4-564E155DB1A7}) (Version: 10.0.11000.10.100 - Nero AG)
Nero Express 10 Help (CHM) (x32 Version: 1.0.10700 - Nero AG) Hidden
Nero InfoTool 10 (HKLM-x32\...\{F412B4AF-388C-4FF5-9B2F-33DB1C536953}) (Version: 7.0.10800.8.100 - Nero AG)
Nero InfoTool 10 Help (CHM) (x32 Version: 1.0.10600 - Nero AG) Hidden
Nero MediaHub 10 (HKLM-x32\...\{1F7FB68F-52F6-46A3-B42F-38CE46295AE5}) (Version: 1.0.13400.11.100 - Nero AG)
Nero MediaHub 10 Help (CHM) (x32 Version: 1.0.10700 - Nero AG) Hidden
Nero Multimedia Suite 10 (HKLM-x32\...\{277C1559-4CF7-44FF-8D07-98AA9C13AABD}) (Version: 10.0.13100 - Nero AG)
Nero Recode 10 (HKLM-x32\...\{8ECEC853-5C3D-4B10-B5C7-FF11FF724807}) (Version: 4.6.10900.4.100 - Nero AG)
Nero Recode 10 Help (CHM) (x32 Version: 1.0.10600 - Nero AG) Hidden
Nero RescueAgent 10 (HKLM-x32\...\{E337E787-CF61-4B7B-B84F-509202A54023}) (Version: 3.0.10900.9.100 - Nero AG)
Nero RescueAgent 10 Help (CHM) (x32 Version: 1.0.10700 - Nero AG) Hidden
Nero SoundTrax 10 (HKLM-x32\...\{E1EE5339-5D32-458F-BAAB-B19F6301BCE2}) (Version: 4.6.10600.2.100 - Nero AG)
Nero SoundTrax 10 Help (CHM) (x32 Version: 1.0.10600 - Nero AG) Hidden
Nero StartSmart 10 (HKLM-x32\...\{F61D489E-6C44-49AC-AD02-7DA8ACA73A65}) (Version: 10.0.11200.12.100 - Nero AG)
Nero StartSmart 10 Help (CHM) (x32 Version: 1.0.10700 - Nero AG) Hidden
Nero Update (HKLM-x32\...\{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}) (Version: 1.0.0017 - Nero AG)
Nero Vision 10 (HKLM-x32\...\{9A4297F3-2A51-4ED9-92CA-4BCB8380947E}) (Version: 7.0.11100.8.100 - Nero AG)
Nero Vision 10 Help (CHM) (x32 Version: 1.0.10600 - Nero AG) Hidden
Nero WaveEditor 10 (HKLM-x32\...\{EDCDFAD5-DF80-4600-A493-E9DAD6810230}) (Version: 5.6.10600.2.100 - Nero AG)
Nero WaveEditor 10 Help (CHM) (x32 Version: 1.0.10600 - Nero AG) Hidden
Primo (x32 Version: 1.00.0000 - Your Company Name) Hidden
QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
Revo Uninstaller 1.94 (HKLM-x32\...\Revo Uninstaller) (Version: 1.94 - VS Revo Group)
Runtime (x32 Version: 1.00.0000 - Your Company Name) Hidden
Seagate Dashboard 2.0 (HKLM-x32\...\{43C423D9-E6D6-4607-ADC9-EBB54F690C57}) (Version: 2.2.29.0 - Seagate)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
Skype Click to Call (HKLM-x32\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 6.3.11079 - Skype Technologies S.A.)
Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
Software de impresora EPSON (HKLM\...\EPSON Printer and Utilities) (Version: - SEIKO EPSON Corporation)
Sonic Foundry Preset Manager 1.0 (HKLM-x32\...\{7266C898-F9CB-4122-9452-2AA1DACE245E}) (Version: 1.0.73 - Sonic Foundry)
Sony Picture Utility (HKLM-x32\...\{D5068583-D569-468B-9755-5FBF5848F46F}) (Version: 4.1.00.11040 - Sony Corporation)
Sound Forge Pro 10.0 (HKLM-x32\...\{3F9170C9-A7C2-408F-A4D8-EC77250040BF}) (Version: 10.0.368 - Sony)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.32494 - TeamViewer)
USB Storage Driver (HKLM-x32\...\GENEUIDE) (Version: - )
USB2.0 ATV (HKLM-x32\...\{3C873221-12B9-475D-8DCB-62D0B2179AF9}) (Version: 6.10.000.001 - Regulus)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
Vegas Pro 11.0 (HKLM-x32\...\{09771440-269F-11E1-89B1-F04DA23A5C58}) (Version: 11.0.510 - Sony)
WildSnake Pinball: Soccer Stars 1.28 (HKLM-x32\...\WildSnake Pinball: Soccer Stars_is1) (Version: - WildSnake Software)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
WinRAR 5.10 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

==================== Restore Points =========================

30-09-2014 19:52:11 Windows Update
01-10-2014 04:03:02 Windows Update
07-10-2014 19:54:20 Windows Update
10-10-2014 22:27:37 Windows Update
17-10-2014 00:28:59 zoek.exe restore point
21-10-2014 02:35:35 Windows Update
21-10-2014 09:01:30 Windows Update
21-10-2014 22:48:48 Revo Uninstaller's restore point - JDownloader 0.9
22-10-2014 09:01:23 Windows Update
23-10-2014 04:51:26 Windows Update
24-10-2014 08:30:27 Tweaking.com - Windows Repair
24-10-2014 08:41:36 Tweaking.com - Windows Repair
24-10-2014 09:00:12 Windows Update
24-10-2014 09:12:59 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-13 20:34 - 2014-10-16 18:29 - 00000840 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 localhost
::1 localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {072364D0-E0F5-41ED-B6F1-1DA69C29A3A5} - System32\Tasks\Motorola Device Manager Update => C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotorolaDeviceManagerUpdate.exe [2013-10-31] ()
Task: {0CC485E8-8660-4E82-9D9A-AAB23B8661B0} - System32\Tasks\{8BF69164-EFB3-4DB9-B7B2-C1FC2BBE40AF} => C:\Program Files (x86)\Sony\Vegas Pro 11.0\vegas110.exe [2011-12-16] (Sony Creative Software Inc.)
Task: {1B5BC6FA-EC1E-4B05-98D4-5E82148E156B} - System32\Tasks\{850B709E-C9AC-4094-9485-9FA78AE86EE8} => C:\Program Files (x86)\Sony\Vegas Pro 11.0\vegas110.exe [2011-12-16] (Sony Creative Software Inc.)
Task: {1D55F86E-D886-4E28-9622-E0C53022163C} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
Task: {28AC7EA3-7B62-47AF-B106-3780348A05FA} - System32\Tasks\NCH Software\ExpressBurnReminder => C:\Program Files (x86)\NCH Software\ExpressBurn\ExpressBurn.exe
Task: {2C114FBD-58F9-4535-B1CD-874862889BC9} - System32\Tasks\{E402B988-83A8-4F5E-B902-07FD667DF538} => G:\Easy Cap\debut video setup.exe
Task: {3BAF8C0F-0832-4352-BD91-27340181A6E3} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-20] (Google Inc.)
Task: {3DFE73B3-EE7D-49D5-ADF8-C47D7D32B24F} - System32\Tasks\{9DF21424-1B46-4486-8242-013A9717971A} => G:\Easy Cap\debut video setup.exe
Task: {3FCD7FC0-1BB7-414E-B531-2723FA5B2BB0} - System32\Tasks\{EFEDCF47-3414-424C-889E-4668556A207B} => G:\Easy Cap\debut video setup.exe
Task: {439F32CF-D680-4993-B549-E21C4F28C002} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-20] (Google Inc.)
Task: {43DE4C0E-0874-4F3A-87B9-B01E7B9B90A0} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1216312544-3494976201-1159279589-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe
Task: {4469E380-2D82-406E-B801-15876628F52C} - System32\Tasks\Motorola Device Manager Initial Update => C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotorolaDeviceManagerUpdate.exe [2013-10-31] ()
Task: {44AAFCF9-7CDD-442D-B879-9AA1515BC443} - System32\Tasks\Programa de actualización en línea de Adobe => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-08-21] (Adobe Systems Incorporated)
Task: {4F192E6D-8B1F-417D-A193-40D7A785103D} - System32\Tasks\Seagate_Install_Launch => C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\Dashboard.exe [2013-05-30] (Seagate Technology LLC)
Task: {5181B760-A286-4332-8CCC-E6F6A7BF04A5} - System32\Tasks\{6A0AFCA5-1B0E-4B26-BB10-B652FC843012} => G:\Easy Cap\debut video setup.exe
Task: {523EFB22-90D3-407C-BD0A-932BBFF78FD2} - System32\Tasks\{309190F5-4D76-410A-A420-4C5DD44F72F6} => G:\Easy Cap\debut video setup.exe
Task: {540A04E7-EEB0-4CDD-95B3-10212D8513A2} - System32\Tasks\{1E16DF4D-C081-4832-B540-64F8BAEF3A69} => G:\Easy Cap\debut video setup.exe
Task: {59DA1205-9D4A-447F-8DD5-3AD90EE96644} - System32\Tasks\Programa de actualización en línea de Real Player => C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe
Task: {657BE6F5-A1C9-4180-8306-C2DBD6231F56} - System32\Tasks\{EF27EEF6-B40C-4479-AE32-A2E8D28E40D7} => G:\Easy Cap\debut video setup.exe
Task: {6BFB5441-2ED4-4782-BA2C-C26F7E44DBB9} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1216312544-3494976201-1159279589-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {6DFD2D0C-FD86-4247-B934-B2A88657CD1A} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-09-26] (Piriform Ltd)
Task: {6ECEF707-006B-4F79-ACA6-85CCFA97A2A6} - System32\Tasks\PCDEventLauncherTask => C:\Program Files\My Dell\sessionchecker.exe [2013-09-05] (PC-Doctor, Inc.)
Task: {7600A238-8A32-418C-8C79-E0B3DE1A9E58} - System32\Tasks\Motorola Device Manager Engine => C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotorolaDeviceManagerUpdate.exe [2013-10-31] ()
Task: {7E1FB175-D83F-4E8B-9132-DFD09C43D3DB} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1216312544-3494976201-1159279589-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe
Task: {85D70493-576E-47F4-B750-CD6AFBFA961F} - System32\Tasks\ArcSoft Connect Daemon => C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [2010-10-27] (ArcSoft Inc.)
Task: {86397E88-6F17-4B5F-83B4-DCF710B98DDF} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-07-25] (Oracle Corporation)
Task: {9364E261-4821-4C4C-9359-F669B4694F53} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1216312544-3494976201-1159279589-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {967F8AEC-02C6-455C-923B-950938E5C690} - System32\Tasks\{B4BA306A-2897-490B-AB2F-6F5AECFA512A} => G:\Easy Cap\Driver Easy cap\Setup_For_Win7.exe
Task: {9FB6508B-53C5-4ABC-972C-6731453551EB} - System32\Tasks\{A215B68B-0896-41B4-9E4C-24A1C70F62B1} => G:\Easy Cap\debut video setup.exe
Task: {A81A3FFB-7EC5-485A-A37F-DF869F8D91CF} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-1216312544-3494976201-1159279589-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe
Task: {ACB26BFD-BCDC-4F94-BA98-5584FE2F0C6A} - System32\Tasks\{E3E94137-0591-424F-AE39-85DB5A926BF4} => C:\Program Files (x86)\Sony\Vegas Pro 11.0\vegas110.exe [2011-12-16] (Sony Creative Software Inc.)
Task: {ACE5A70F-FB2F-43C1-B5D7-CB0CEB76BD37} - System32\Tasks\SoftPlanet Software Assistant => C:\Program Files (x86)\SoftPlanet Software Assistant\spassist.exe [2013-12-09] (Secure Download Ltd.)
Task: {BAE08DFF-E75C-478A-A9F7-39312B1CF0F8} - System32\Tasks\RealCreateProcessScheduledTask45746778S-1-5-21-1216312544-3494976201-1159279589-1001 => c:\program files (x86)\real\realplayer\update\realsched.exe
Task: {C0CCE0D3-A003-416E-8884-EDD11BAF6463} - System32\Tasks\{0FFFFFDB-402C-4DBC-B4C2-60071B2A73AE} => C:\Program Files (x86)\Sony\Vegas Pro 11.0\vegas110.exe [2011-12-16] (Sony Creative Software Inc.)
Task: {C40A87C0-65FE-4E10-99C0-18F9FA147716} - System32\Tasks\SystemToolsDailyTest => uaclauncher.exe
Task: {E7A7FE7D-4C27-4B48-B84A-B370593602C3} - System32\Tasks\RealCreateProcessScheduledTask45233659S-1-5-21-1216312544-3494976201-1159279589-1001 => c:\program files (x86)\real\realplayer\update\realsched.exe
Task: {E847253D-ED5A-40F5-9C25-330867056A6F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-24] (Adobe Systems Incorporated)
Task: {EFC2AD63-C2AD-4203-A313-E30601BDF1A7} - System32\Tasks\{D0E90FA4-BE72-4E6E-AF92-272B177F23A9} => C:\Program Files\PhotoZoom Pro 4\PhotoZoom Pro 4.exe
Task: {F0FCDF21-3648-41B6-8CD0-02B1AF4BC9A4} - System32\Tasks\Programa de actualización en línea de DivX => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [2014-01-09] ()
Task: {F21BD1A0-EC65-4B31-BE61-25F5D77AD851} - System32\Tasks\{8C607B1E-3FC8-4A9B-B52B-BABE4FAD8DE6} => D:\Google_Earth_BZXE.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-09-05 01:17 - 2013-09-05 01:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2011-10-24 15:05 - 2011-08-18 10:05 - 02751808 _____ () C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE
2013-10-31 09:05 - 2013-10-31 09:05 - 00172032 _____ () C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\css_core.dll
2013-09-05 01:14 - 2013-09-05 01:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\GoToAssist => ""="Service"

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

========================= Accounts: ==========================

Administrador (S-1-5-21-1216312544-3494976201-1159279589-500 - Administrator - Disabled)
HomeGroupUser$ (S-1-5-21-1216312544-3494976201-1159279589-1002 - Limited - Enabled)
Invitado (S-1-5-21-1216312544-3494976201-1159279589-501 - Limited - Disabled)
LogMeInRemoteUser (S-1-5-21-1216312544-3494976201-1159279589-1003 - Administrator - Enabled) => C:\Users\LogMeInRemoteUser
Vicente (S-1-5-21-1216312544-3494976201-1159279589-1001 - Administrator - Enabled) => C:\Users\Vicente

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:
==================
Error: (10/25/2014 05:41:43 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Error al generar el contexto de activación para "37.0.2062.124,language="*",type="win32",version="37.0.2062.124"1".
No se encontró el ensamblado dependiente 37.0.2062.124,language="*",type="win32",version="37.0.2062.124".
Use sxstrace.exe para obtener un diagnóstico detallado.

Error: (10/25/2014 05:12:45 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/25/2014 05:08:19 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/25/2014 05:02:55 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/25/2014 02:19:53 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/24/2014 03:04:25 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/23/2014 04:18:09 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Error del Servicio de instantáneas de volumen: error inesperado al llamar a la rutina CoCreateInstance. HR = 0x80040154, Clase no registrada
.

Operación:
Creando instancia del servidor de VSS

Error: (10/23/2014 04:18:09 PM) (Source: VSS) (EventID: 22) (User: )
Description: Error del Servicio de instantáneas de volumen: un componente crítico requerido por el Servicio de instantáneas de volumen no está registrado.
Esto puede ocurrir si se produjo un error durante la instalación de Windows o durante la instalación de un proveedor de instantáneas.
Error devuelto desde CoCreateInstance en la clase con CLSID {e579ab5f-1cc4-44b4-bed9-de0991ff0623} y nombre IVssCoordinatorEx2 es [0x80040154, Clase no registrada
].

Operación:
Creando instancia del servidor de VSS

Error: (10/22/2014 10:59:57 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/22/2014 10:59:12 PM) (Source: Seagate Dashboard Services) (EventID: 0) (User: )
Description: No se puede iniciar el servicio. El proceso del servicio no puede conectar con el controlador del servicio

System errors:
=============
Error: (10/27/2014 02:20:44 AM) (Source: Disk) (EventID: 11) (User: )
Description: El controlador detectó un error de controladora en \Device\Harddisk2\DR4.

Error: (10/27/2014 02:20:43 AM) (Source: Disk) (EventID: 11) (User: )
Description: El controlador detectó un error de controladora en \Device\Harddisk2\DR4.

Error: (10/27/2014 02:20:42 AM) (Source: Disk) (EventID: 11) (User: )
Description: El controlador detectó un error de controladora en \Device\Harddisk2\DR4.

Error: (10/25/2014 05:12:22 PM) (Source: WMPNetworkSvc) (EventID: 14332) (User: )
Description: WMPNetworkSvc0x80004005

Error: (10/25/2014 05:07:46 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: El servicio Servicio de lista de redes depende del servicio Reconocimiento de ubicación de red, el cual no pudo iniciarse debido al siguiente error:
%%1068

Microsoft Office Sessions:
=========================
Error: (10/25/2014 05:41:43 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: 37.0.2062.124,language="*",type="win32",version="37.0.2062.124"c:\Users\Vicente\downloads\chrome.exe

Error: (10/23/2014 04:18:09 PM) (Source: VSS) (EventID: 8193) (User: )
Description: CoCreateInstance0x80040154, Clase no registrada

Operación:
Creando instancia del servidor de VSS

Error: (10/23/2014 04:18:09 PM) (Source: VSS) (EventID: 22) (User: )
Description: {e579ab5f-1cc4-44b4-bed9-de0991ff0623}IVssCoordinatorEx20x80040154, Clase no registrada

Operación:
Creando instancia del servidor de VSS

==================== Memory info ===========================

Processor: Intel® Core™ i3-2100 CPU @ 3.10GHz
Percentage of memory in use: 22%
Total physical RAM: 4008.63 MB
Available physical RAM: 3126.13 MB
Total Pagefile: 8015.44 MB
Available Pagefile: 6631.49 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:918.71 GB) (Free:257.88 GB) NTFS
Drive f: (BLACK OPS) (Removable) (Total:7.52 GB) (Free:0.73 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 931.5 GB) (Disk ID: B64B71B9)
Partition 1: (Not Active) - (Size=39 MB) - (Type=DE)
Partition 2: (Active) - (Size=12.8 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=918.7 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (MBR Code: Windows XP) (Size: 7.5 GB) (Disk ID: C3072E18)
Partition 1: (Active) - (Size=7.5 GB) - (Type=0C)

==================== End Of Log ============================

#56
Naathim

Posted 29 October 2014 - 01:23 AM

GeekU Minion

Expert
4,568 posts

Hi,

sorry, somehow I missed your thread yesterday. However I can't tell exactly what is going on there. Your logs don't indicate that you are infected. I'd rather say that some Windows internals are broken, but since Windows Repair isn't able to help us, I don't have a fresh idea on how to proceed.

Maybe a repair install could help?