Jump to content

My computer is slow (Resolved)


Icedog101
 Share

Recommended Posts

Hi Juliet

 

I did do the download of combofix , unchecked the anti virus microsoft security essentials.

 

Hre is the log for combo fix:

 

ComboFix 14-06-04.01 - John 08/06/2014 23:48:30.12.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.352.1033.18.5612.3777 [GMT -4:00]
Lancé depuis: c:\users\John\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
SP: Microsoft Security Essentials *Disabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2014-05-09 au 2014-06-09 ))))))))))))))))))))))))))))))))))))
.
.
2014-06-09 04:11 . 2014-06-09 04:11 -------- d-----w- c:\users\Icedog\AppData\Local\temp
2014-06-09 04:11 . 2014-06-09 04:11 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-06-08 23:45 . 2014-06-08 23:45 75888 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{4A9AC0E1-0F6B-4D90-8448-1DCD9715EBD4}\offreg.dll
2014-06-08 23:42 . 2014-04-30 20:20 10702536 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{4A9AC0E1-0F6B-4D90-8448-1DCD9715EBD4}\mpengine.dll
2014-06-08 21:27 . 2014-04-30 20:20 10702536 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2014-06-07 14:35 . 2014-06-07 14:35 -------- d-----w- c:\program files (x86)\Common Files\Java
2014-06-07 14:35 . 2014-05-07 19:02 98216 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-06-05 15:27 . 2014-06-04 01:23 1031560 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{5760F975-C340-4410-9977-3100C941B8ED}\gapaengine.dll
2014-06-05 15:20 . 2014-06-05 15:20 736952 ----a-w- c:\programdata\Microsoft\eHome\Packages\SportsV2\SportsTemplateCore-2\Microsoft.MediaCenter.Sports.UI.dll
2014-06-05 14:48 . 2014-06-05 14:48 -------- d-----w- c:\program files\iPod
2014-06-05 14:48 . 2014-06-05 14:50 -------- d-----w- c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-06-05 14:48 . 2014-06-05 14:50 -------- d-----w- c:\program files\iTunes
2014-06-05 14:45 . 2014-06-05 14:45 -------- d-----w- c:\users\John\AppData\Local\Apple Computer
2014-06-05 14:36 . 2014-06-05 14:36 -------- d-----w- c:\users\John\AppData\Local\Apple
2014-06-05 01:18 . 2013-09-02 07:58 175528 ----a-w- c:\windows\system32\drivers\tmcomm.sys
2014-06-05 00:50 . 2000-01-01 00:00 74344 ----a-w- c:\windows\system32\RtNicProp64.dll
2014-06-05 00:50 . 2000-01-01 00:00 685160 ----a-w- c:\windows\system32\drivers\Rt64win7.sys
2014-06-04 03:47 . 2014-06-04 01:23 1031560 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
2014-06-04 02:03 . 2014-06-04 02:03 -------- d-----w- c:\windows\ERUNT
2014-06-04 01:23 . 2014-05-20 05:18 10702536 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{5E199AA6-DA3F-4175-B637-98EE576B9E36}\mpengine.dll
2014-06-04 01:13 . 2014-06-04 01:13 -------- d-----w- c:\program files (x86)\Microsoft Security Client
2014-06-04 01:13 . 2014-06-04 01:13 -------- d-----w- c:\program files\Microsoft Security Client
2014-06-03 14:57 . 2014-06-03 14:57 -------- d--h--w- c:\windows\AxInstSV
2014-06-03 02:18 . 2014-06-03 02:18 -------- d-----w- c:\users\John\AppData\Local\com
2014-06-03 02:16 . 2014-06-03 02:42 -------- d-----w- c:\programdata\198768042fc4fc9c
2014-06-03 02:15 . 2014-06-03 02:15 -------- d-----w- c:\users\John\AppData\Local\Packages
2014-06-03 02:15 . 2014-06-03 02:15 -------- d-----w- c:\users\John\AppData\Local\globalUpdate
2014-06-03 02:15 . 2014-06-03 02:42 -------- d-----w- c:\users\John\AppData\Roaming\Activeris
2014-06-03 02:15 . 2014-06-03 02:15 -------- d-----w- c:\users\John\AppData\Local\Chromatic Browser
2014-06-03 02:15 . 2014-06-03 02:15 -------- d-----w- c:\users\Icedog\AppData\Local\Chromatic Browser
2014-06-03 02:15 . 2014-06-03 02:15 -------- d-----w- c:\users\John\AppData\Local\Torch
2014-06-03 02:15 . 2014-06-03 02:15 -------- d-----w- c:\users\Icedog\AppData\Local\Torch
2014-06-03 02:15 . 2014-06-03 02:15 -------- d-----w- c:\users\John\AppData\Local\Comodo
2014-06-03 02:15 . 2014-06-03 02:15 -------- d-----w- c:\users\Icedog\AppData\Local\Comodo
2014-06-03 02:14 . 2014-06-03 02:15 -------- d-----w- c:\users\Icedog\AppData\Local\Google
2014-06-03 02:14 . 2014-06-03 02:14 -------- d-----w- c:\users\Guest
2014-06-03 02:13 . 2014-06-03 02:13 -------- d-----w- c:\users\Administrator
2014-06-02 15:43 . 2014-06-02 15:43 -------- d-----w- c:\windows\system32\SRSLabs
2014-06-02 15:43 . 2014-06-02 15:43 -------- d-----w- c:\program files\Realtek
2014-06-02 15:43 . 2014-06-02 15:43 -------- d-----w- c:\windows\SysWow64\RTCOM
2014-06-02 15:40 . 2000-01-01 00:00 14737496 ----a-w- c:\windows\system32\MaxxAudioRealtek64.dll
2014-06-02 15:40 . 2000-01-01 00:00 2037336 ----a-w- c:\windows\system32\MaxxAudioEQ64.dll
2014-06-02 15:40 . 2000-01-01 00:00 1033304 ----a-w- c:\windows\system32\MaxxAudioAPOShell64.dll
2014-06-02 15:40 . 2000-01-01 00:00 663296 ----a-w- c:\windows\system32\MaxxAudioAPO30.dll
2014-06-02 15:40 . 2000-01-01 00:00 318808 ----a-w- c:\windows\system32\MaxxAudioAPO20.dll
2014-06-02 15:40 . 2000-01-01 00:00 603984 ----a-w- c:\windows\system32\KAAPORT64.dll
2014-06-02 15:40 . 2000-01-01 00:00 2770976 ----a-w- c:\windows\system32\FMAPO64.dll
2014-06-02 15:40 . 2000-01-01 00:00 693352 ----a-w- c:\windows\system32\DTSVoiceClarityDLL64.dll
2014-06-02 15:40 . 2000-01-01 00:00 712296 ----a-w- c:\windows\system32\DTSSymmetryDLL64.dll
2014-06-02 15:40 . 2000-01-01 00:00 1756264 ----a-w- c:\windows\system32\DTSS2SpeakerDLL64.dll
2014-06-02 14:58 . 2014-06-02 14:58 -------- d-----w- c:\users\John\AppData\Local\AMD
2014-06-02 14:58 . 2014-06-02 14:58 -------- d-----w- c:\programdata\ATI
2014-06-02 14:52 . 2014-06-02 14:52 -------- d-----w- c:\users\John\AppData\Roaming\library_dir
2014-06-02 14:51 . 2014-06-02 14:51 -------- d-----w- c:\program files (x86)\AMD AVT
2014-06-02 14:50 . 2014-06-02 14:50 -------- d-----w- c:\program files (x86)\Common Files\ATI Technologies
2014-06-02 14:47 . 2014-06-02 14:51 -------- d-----w- c:\programdata\AMD
2014-06-02 14:33 . 2014-06-02 14:33 -------- d-----w- c:\program files\Common Files\ATI Technologies
2014-06-02 14:30 . 2014-06-02 14:48 -------- d-----w- c:\program files\ATI Technologies
2014-06-02 05:02 . 2014-06-02 05:02 -------- d-----w- c:\program files (x86)\SlimDrivers
2014-06-01 17:24 . 2010-08-30 12:34 536576 ----a-w- c:\windows\SysWow64\sqlite3.dll
2014-06-01 17:22 . 2014-06-01 17:26 -------- d-----w- C:\AdwCleaner
2014-05-31 19:26 . 2014-06-06 14:39 -------- d-----w- C:\FRST
2014-05-28 01:18 . 2014-05-29 21:33 -------- d-----w- c:\users\John\AppData\Roaming\vlc
2014-05-23 14:10 . 2014-05-23 14:10 -------- d-----w- c:\program files (x86)\Common Files\Skype
2014-05-23 14:07 . 2014-05-23 14:07 -------- d-----w- c:\program files (x86)\SkypeWebPlugin
2014-05-18 21:18 . 2014-06-03 21:37 -------- d-----w- c:\programdata\Malwarebytes' Anti-Malware (portable)
2014-05-17 17:14 . 2014-06-02 05:02 -------- d-----w- c:\users\John\AppData\Local\SlimWare Utilities Inc
2014-05-17 04:27 . 2014-05-23 00:29 -------- d-----w- c:\users\John\AppData\Local\Diagnostics
2014-05-16 22:53 . 2014-05-14 08:39 118048 ----a-w- c:\windows\system32\BootDefrag.exe
2014-05-16 21:04 . 2014-05-16 21:04 20672 ----a-w- c:\windows\system32\drivers\GUBootStartup.sys
2014-05-16 20:16 . 2014-05-16 20:16 -------- d-s---w- c:\windows\system32\CompatTel
2014-05-16 18:44 . 2014-03-25 02:43 14175744 ----a-w- c:\windows\system32\shell32.dll
2014-05-16 18:44 . 2014-05-09 06:14 477184 ----a-w- c:\windows\system32\aepdu.dll
2014-05-16 18:44 . 2014-05-09 06:11 424448 ----a-w- c:\windows\system32\aeinv.dll
2014-05-16 05:24 . 2014-05-16 05:24 -------- d-----w- c:\program files\Common Files\Bitdefender
2014-05-16 05:18 . 2014-05-16 05:18 -------- d-----w- c:\program files (x86)\Common Files\Bitdefender
2014-05-14 14:31 . 2014-06-07 06:07 -------- d-----w- c:\program files (x86)\Glary Utilities 5
2014-05-12 04:19 . 2014-05-16 18:26 -------- d-----w- c:\users\Isabel
.
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-06-09 03:32 . 2014-04-01 16:46 122584 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2014-06-04 21:37 . 2013-02-16 21:11 70832 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-06-04 21:37 . 2013-02-16 21:11 692400 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2014-05-16 19:06 . 2012-05-06 21:41 93223848 ----a-w- c:\windows\system32\MRT.exe
2014-05-12 11:26 . 2014-04-01 16:45 63704 ----a-w- c:\windows\system32\drivers\mwac.sys
2014-05-12 11:26 . 2014-04-01 16:45 91352 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2014-05-12 11:25 . 2012-06-12 15:55 25816 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-04-18 02:43 . 2014-04-18 02:43 78432 ----a-w- c:\windows\system32\atimpc64.dll
2014-04-18 02:43 . 2014-04-18 02:43 78432 ----a-w- c:\windows\system32\amdpcom64.dll
2014-04-18 02:43 . 2014-04-18 02:43 71704 ----a-w- c:\windows\SysWow64\atimpc32.dll
2014-04-18 02:43 . 2014-04-18 02:43 71704 ----a-w- c:\windows\SysWow64\amdpcom32.dll
2014-04-18 02:43 . 2011-11-01 07:00 143304 ----a-w- c:\windows\system32\atiuxp64.dll
2014-04-18 02:42 . 2014-04-18 02:42 126336 ----a-w- c:\windows\SysWow64\atiuxpag.dll
2014-04-18 02:42 . 2014-04-18 02:42 117584 ----a-w- c:\windows\system32\atiu9p64.dll
2014-04-18 02:42 . 2014-04-18 02:42 99520 ----a-w- c:\windows\SysWow64\atiu9pag.dll
2014-04-18 02:42 . 2011-11-01 07:00 1343272 ----a-w- c:\windows\system32\aticfx64.dll
2014-04-18 02:42 . 2014-04-18 02:42 1117184 ----a-w- c:\windows\SysWow64\aticfx32.dll
2014-04-18 02:42 . 2011-11-01 07:00 10335208 ----a-w- c:\windows\system32\atidxx64.dll
2014-04-18 02:42 . 2014-04-18 02:42 8866928 ----a-w- c:\windows\SysWow64\atidxx32.dll
2014-04-18 02:42 . 2014-04-18 02:42 6796592 ----a-w- c:\windows\SysWow64\atiumdva.dll
2014-04-18 02:42 . 2014-04-18 02:42 6799688 ----a-w- c:\windows\SysWow64\atiumdag.dll
2014-04-18 02:42 . 2014-04-18 02:42 7520200 ----a-w- c:\windows\system32\atiumd6a.dll
2014-04-18 02:42 . 2014-04-18 02:42 8010968 ----a-w- c:\windows\system32\atiumd64.dll
2014-04-18 02:39 . 2014-04-18 02:39 274656 ----a-w- c:\windows\system32\drivers\amdacpksd.sys
2014-04-18 02:36 . 2014-04-18 02:36 15376384 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2014-04-18 02:33 . 2014-04-18 02:33 51200 ----a-w- c:\windows\system32\kdbsdk64.dll
2014-04-18 02:28 . 2014-04-18 02:28 38912 ----a-w- c:\windows\SysWow64\kdbsdk32.dll
2014-04-18 02:23 . 2014-04-18 02:23 231424 ----a-w- c:\windows\system32\clinfo.exe
2014-04-18 02:22 . 2014-04-18 02:22 1187342 ----a-w- c:\windows\system32\amdocl_as64.exe
2014-04-18 02:22 . 2014-04-18 02:22 1061902 ----a-w- c:\windows\system32\amdocl_ld64.exe
2014-04-18 02:22 . 2014-04-18 02:22 995342 ----a-w- c:\windows\SysWow64\amdocl_as32.exe
2014-04-18 02:22 . 2014-04-18 02:22 798734 ----a-w- c:\windows\SysWow64\amdocl_ld32.exe
2014-04-18 02:22 . 2014-04-18 02:22 98816 ----a-w- c:\windows\system32\OpenVideo64.dll
2014-04-18 02:22 . 2014-04-18 02:22 83456 ----a-w- c:\windows\SysWow64\OpenVideo.dll
2014-04-18 02:22 . 2014-04-18 02:22 86528 ----a-w- c:\windows\system32\OVDecode64.dll
2014-04-18 02:22 . 2014-04-18 02:22 73216 ----a-w- c:\windows\SysWow64\OVDecode.dll
2014-04-18 02:22 . 2014-04-18 02:22 28685824 ----a-w- c:\windows\system32\amdocl64.dll
2014-04-18 02:19 . 2014-04-18 02:19 24107520 ----a-w- c:\windows\SysWow64\amdocl.dll
2014-04-18 02:17 . 2014-04-18 02:17 65024 ----a-w- c:\windows\system32\OpenCL.dll
2014-04-18 02:17 . 2014-04-18 02:17 58880 ----a-w- c:\windows\SysWow64\OpenCL.dll
2014-04-18 02:13 . 2014-04-18 02:13 127488 ----a-w- c:\windows\system32\mantle64.dll
2014-04-18 02:13 . 2014-04-18 02:13 113664 ----a-w- c:\windows\SysWow64\mantle32.dll
2014-04-18 02:12 . 2014-04-18 02:12 27907584 ----a-w- c:\windows\system32\atio6axx.dll
2014-04-18 02:12 . 2014-04-18 02:12 5442048 ----a-w- c:\windows\system32\amdmantle64.dll
2014-04-18 01:58 . 2014-04-18 01:58 4358656 ----a-w- c:\windows\SysWow64\amdmantle32.dll
2014-04-18 01:51 . 2014-04-18 01:51 23409152 ----a-w- c:\windows\SysWow64\atioglxx.dll
2014-04-18 01:46 . 2014-04-18 01:46 368128 ----a-w- c:\windows\system32\atiapfxx.exe
2014-04-18 01:46 . 2014-04-18 01:46 62464 ----a-w- c:\windows\system32\aticalrt64.dll
2014-04-18 01:46 . 2014-04-18 01:46 52224 ----a-w- c:\windows\SysWow64\aticalrt.dll
2014-04-18 01:46 . 2014-04-18 01:46 55808 ----a-w- c:\windows\system32\aticalcl64.dll
2014-04-18 01:46 . 2014-04-18 01:46 49152 ----a-w- c:\windows\SysWow64\aticalcl.dll
2014-04-18 01:46 . 2014-04-18 01:46 15716352 ----a-w- c:\windows\system32\aticaldd64.dll
2014-04-18 01:45 . 2014-04-18 01:45 91136 ----a-w- c:\windows\system32\mantleaxl64.dll
2014-04-18 01:45 . 2014-04-18 01:45 85504 ----a-w- c:\windows\SysWow64\mantleaxl32.dll
2014-04-18 01:42 . 2014-04-18 01:42 14302208 ----a-w- c:\windows\SysWow64\aticaldd.dll
2014-04-18 01:33 . 2014-04-18 01:33 48128 ----a-w- c:\windows\system32\amdmmcl6.dll
2014-04-18 01:33 . 2014-04-18 01:33 37888 ----a-w- c:\windows\SysWow64\amdmmcl.dll
2014-04-18 01:30 . 2014-04-18 01:30 442368 ----a-w- c:\windows\system32\atidemgy.dll
2014-04-18 01:30 . 2014-04-18 01:30 31232 ----a-w- c:\windows\system32\atimuixx.dll
2014-04-18 01:29 . 2014-04-18 01:29 586240 ----a-w- c:\windows\system32\atieclxx.exe
2014-04-18 01:29 . 2014-04-18 01:29 239616 ----a-w- c:\windows\system32\atiesrxx.exe
2014-04-18 01:28 . 2014-04-18 01:28 190976 ----a-w- c:\windows\system32\atitmm64.dll
2014-04-18 01:21 . 2014-04-18 01:21 806912 ----a-w- c:\windows\system32\coinst_14.100.dll
2014-04-18 01:09 . 2014-04-18 01:09 1177600 ----a-w- c:\windows\system32\atiadlxx.dll
2014-04-18 01:09 . 2014-04-18 01:09 848896 ----a-w- c:\windows\SysWow64\atiadlxy.dll
2014-04-18 01:07 . 2014-04-18 01:07 75264 ----a-w- c:\windows\system32\atig6pxx.dll
2014-04-18 01:07 . 2014-04-18 01:07 69632 ----a-w- c:\windows\SysWow64\atiglpxx.dll
2014-04-18 01:07 . 2014-04-18 01:07 69632 ----a-w- c:\windows\system32\atiglpxx.dll
2014-04-18 01:07 . 2014-04-18 01:07 146944 ----a-w- c:\windows\system32\atig6txx.dll
2014-04-18 01:07 . 2014-04-18 01:07 133632 ----a-w- c:\windows\SysWow64\atigktxx.dll
2014-04-18 01:07 . 2014-04-18 01:07 638976 ----a-w- c:\windows\system32\drivers\atikmpag.sys
2014-04-18 01:04 . 2014-04-18 01:04 43520 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2014-04-01 08:04 . 2014-04-02 16:33 24352 ----a-w- c:\windows\system32\RegBootDefrag.exe
2014-04-01 02:46 . 2014-04-01 02:46 130712 ----a-w- c:\windows\SysWow64\MSSTDFMT.DLL
2014-04-01 02:46 . 2014-04-01 02:46 1070232 ----a-w- c:\windows\SysWow64\MSCOMCTL.OCX
2014-03-31 13:35 . 2010-11-21 03:27 270496 ------w- c:\windows\system32\MpSigStub.exe
2014-03-30 04:51 . 2014-03-30 04:51 0 ----a-w- c:\windows\system32\atiumdva.dll
2014-03-30 04:51 . 2014-03-30 04:51 0 ----a-w- c:\windows\system32\atiumdag.dll
2014-03-30 04:51 . 2014-03-30 04:51 0 ----a-w- c:\windows\system32\atiu9pag.dll
2014-03-30 04:51 . 2014-03-30 04:51 0 ----a-w- c:\windows\system32\aticfx32.dll
2014-03-30 04:51 . 2014-03-30 04:51 0 ----a-w- c:\windows\system32\MSVBVM60.DLL
2014-03-26 02:58 . 2014-03-26 02:58 0 ----a-w- c:\windows\system32\olepro32.dll
2014-03-26 02:58 . 2014-03-26 02:58 0 ----a-w- c:\windows\system32\atipdlxx.dll
2014-03-19 02:41 . 2014-03-19 02:41 388096 ----a-r- c:\users\John\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2014-03-11 13:52 . 2014-03-11 13:52 133928 ----a-w- c:\windows\system32\drivers\NisDrvWFP.sys
.
.
------- Sigcheck -------
Note: Unsigned files aren't necessarily malware.
.
[7] 2014-03-06 . 37D0FB9E5E8EDA40B66FC3FB3D660261 . 23549440 . . [11.00.9600.17041] .. c:\windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17041_none_f5c8074c3714b96c\mshtml.dll
[7] 2013-11-12 . D233E1A32CE6AF918C9DE1BC44AFEB2A . 23212032 . . [11.00.9600.16428] .. c:\windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.16428_none_f59a25aa3737acc2\mshtml.dll
[-] 2013-09-22 . F026C6F104758D0EB215B017016FAE27 . 19252224 . . [10.00.9200.16521] .. c:\windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_10.2.9200.16721_none_91070c5892ad50c1\mshtml.dll
[-] 2013-08-10 . CC4AE7E2ECAEE7612B3C0D3AB302375C . 19246592 . . [10.00.9200.16521] .. c:\windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_10.2.9200.16686_none_91176c1892a04cff\mshtml.dll
[-] 2013-07-26 . 396889142BD839DB8A055A0BE0AD2F79 . 19239424 . . [10.00.9200.16521] .. c:\windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_10.2.9200.16660_none_9115f43492a1808b\mshtml.dll
[-] 2013-09-22 . F026C6F104758D0EB215B017016FAE27 . 19252224 . . [10.00.9200.16521] .. c:\windows\system32\mshtml.dll
.
[7] 2014-03-06 . F220BA78AB542C70211D73AE4729B2CD . 2260480 . . [11.00.9600.17041] .. c:\windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17041_none_e46de82db6be5036\wininet.dll
[7] 2013-11-12 . E6CB36B85BE59095337427E853A5B65A . 2332160 . . [11.00.9600.16428] .. c:\windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.16428_none_e440068bb6e1438c\wininet.dll
[-] 2013-09-22 . D28B35DE88D27EFB27DF4B1E8319E3C0 . 2241024 . . [10.00.9200.16521] .. c:\windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.16721_none_7faced3a1256e78b\wininet.dll
[-] 2013-08-10 . AAFA952E774DDDB0956D3BDFAE5B5B99 . 2241024 . . [10.00.9200.16521] .. c:\windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.16686_none_7fbd4cfa1249e3c9\wininet.dll
[-] 2013-07-26 . AC155DD9BD1E6D3B740826A4D1C68AAE . 2241024 . . [10.00.9200.16521] .. c:\windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.16660_none_7fbbd516124b1755\wininet.dll
[-] 2013-06-11 . FAF6EC2460AD5FBBD38D8E1AE28B0D77 . 2241024 . . [10.00.9200.16521] .. c:\windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.16635_none_7fb86250124e4b75\wininet.dll
[-] 2013-05-17 . 12716D987D475B051F35895659159705 . 2241024 . . [10.00.9200.16521] .. c:\windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.16614_none_7fb67884124fff26\wininet.dll
[-] 2013-04-05 . 27A9000C534AA9BADC9EE74940F50C6D . 2242048 . . [10.00.9200.16521] .. c:\windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.16576_none_7fc71c9c1242ae81\wininet.dll
[-] 2013-03-14 . 69F1D418B4C4EC23033D598E4CBC6B73 . 2240512 . . [10.00.9200.16521] .. c:\windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.16521_none_7fc28d121246afa9\wininet.dll
[-] 2013-02-21 . 753C0848AE7872A3F59663078A517293 . 2240512 . . [10.00.9200.16521] .. c:\windows\ERDNT\cache64\wininet.dll
[-] 2013-02-21 . 753C0848AE7872A3F59663078A517293 . 2240512 . . [10.00.9200.16521] .. c:\windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.16540_none_7fc4a46e1244c8b6\wininet.dll
[7] 2010-11-21 . F6C5302E1F4813D552F41A0AC82455E5 . 1188864 . . [8.00.7601.17514] .. c:\windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7601.17514_none_7ac940242f7494a4\wininet.dll
[-] 2013-09-22 . D28B35DE88D27EFB27DF4B1E8319E3C0 . 2241024 . . [10.00.9200.16521] .. c:\windows\system32\wininet.dll
.
[7] 2014-03-06 . EA85144F35EDE6EE25C484D4242FF2C8 . 17387008 . . [11.00.9600.17041] .. c:\windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17041_none_001cb19e6b757b67\mshtml.dll
[7] 2013-11-12 . F9F114B2A6F876C92D317A755494F233 . 17142784 . . [11.00.9600.16428] .. c:\windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.16428_none_ffeecffc6b986ebd\mshtml.dll
[-] 2013-09-22 . A7221924181C8EB92B64C5A2D888BEA5 . 14335488 . . [10.00.9200.16521] .. c:\windows\SysWOW64\mshtml.dll
[-] 2013-09-22 . A7221924181C8EB92B64C5A2D888BEA5 . 14335488 . . [10.00.9200.16521] .. c:\windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_10.2.9200.16721_none_9b5bb6aac70e12bc\mshtml.dll
[-] 2013-08-10 . 5D2D7E7850CE963C2F401D4DEE7BB32A . 14332928 . . [10.00.9200.16521] .. c:\windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_10.2.9200.16686_none_9b6c166ac7010efa\mshtml.dll
[-] 2013-07-26 . E631B408882F8320739F6E0CAF444397 . 14329344 . . [10.00.9200.16521] .. c:\windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_10.2.9200.16660_none_9b6a9e86c7024286\mshtml.dll
[-] 2013-06-11 . AF31E7D2C385F647ADFD5F5736B3BA64 . 14329856 . . [10.00.9200.16521] .. c:\windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_10.2.9200.16635_none_9b672bc0c70576a6\mshtml.dll
[-] 2013-06-08 . 05920BD009621D06722A1CD339DA6481 . 14327808 . . [10.00.9200.16521] .. c:\windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_10.2.9200.16618_none_9b64e6d4c70790db\mshtml.dll
.
[7] 2014-03-06 . E4E829EE073E046B0EB19B5FECB19B8C . 1789440 . . [11.00.9600.17041] .. c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17041_none_884f4ca9fe60df00\wininet.dll
[7] 2013-11-12 . B5EB5BD3066959611E1F7A80FD6CC172 . 1818112 . . [11.00.9600.16428] .. c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.16428_none_88216b07fe83d256\wininet.dll
[-] 2013-09-22 . E4FEB264B47360B7296AEA4E052F88D8 . 1767936 . . [10.00.9200.16521] .. c:\windows\SysWOW64\wininet.dll
[-] 2013-09-22 . E4FEB264B47360B7296AEA4E052F88D8 . 1767936 . . [10.00.9200.16521] .. c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.16721_none_238e51b659f97655\wininet.dll
[-] 2013-08-10 . 535F6263035F2530A62D5D64EF6E73D3 . 1767936 . . [10.00.9200.16521] .. c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.16686_none_239eb17659ec7293\wininet.dll
[-] 2013-07-26 . DAA3903F06116AE9EE7AC1D1B93684A4 . 1767936 . . [10.00.9200.16521] .. c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.16660_none_239d399259eda61f\wininet.dll
[-] 2013-06-11 . 9BF7C7654EFD098EE3A27B49492A382A . 1767936 . . [10.00.9200.16521] .. c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.16635_none_2399c6cc59f0da3f\wininet.dll
[-] 2013-05-17 . 2473CA6595A2659D7039A4A89FECA269 . 1767936 . . [10.00.9200.16521] .. c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.16614_none_2397dd0059f28df0\wininet.dll
[-] 2013-04-05 . 5ABB3F36AF17007F33FA275E96A2C95E . 1767424 . . [10.00.9200.16521] .. c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.16576_none_23a8811859e53d4b\wininet.dll
[-] 2013-03-14 . BA15504FA59A8DC304F1CBAEBA6252A1 . 1766912 . . [10.00.9200.16521] .. c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.16521_none_23a3f18e59e93e73\wininet.dll
[-] 2013-02-21 . CFE0CEE587F9CEA4C29DEEC6D85FC91C . 1766912 . . [10.00.9200.16521] .. c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.16540_none_23a608ea59e75780\wininet.dll
[7] 2010-11-21 . 44214C94911C7CFB1D52CB64D5E8368D . 980992 . . [8.00.7601.17514] .. c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7601.17514_none_1eaaa4a07717236e\wininet.dll
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
2014-02-26 15:55 222920 ----a-w- c:\users\John\AppData\Local\Microsoft\SkyDrive\17.0.4029.0217_2\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
2014-02-26 15:55 222920 ----a-w- c:\users\John\AppData\Local\Microsoft\SkyDrive\17.0.4029.0217_2\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
2014-02-26 15:55 222920 ----a-w- c:\users\John\AppData\Local\Microsoft\SkyDrive\17.0.4029.0217_2\SkyDriveShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WinPatrol"="c:\program files (x86)\BillP Studios\WinPatrol\winpatrol.exe" [2014-04-23 533568]
"HydraVisionDesktopManager"="c:\program files (x86)\ATI Technologies\HydraVision\HydraDM.exe" [2014-04-18 1967616]
"GUDelayStartup"="c:\program files (x86)\Glary Utilities 5\StartupManager.exe" [2014-06-03 37152]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2014-05-08 21444224]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-12-21 959904]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" [2014-04-18 767200]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2014-05-26 152392]
"YouCam Mirage"="c:\program files (x86)\CyberLink\YouCam\YCMMirage.exe" [2013-06-07 136488]
"YouCam Tray"="c:\program files (x86)\CyberLink\YouCam\YouCam.exe" [2013-06-07 234456]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2014-05-07 256896]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"GarminExpressTrayApp"="c:\program files (x86)\Garmin\Express Tray\ExpressTray.exe" [2014-05-08 122200]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk /p \??\c:\0autocheck autochk * \0BootDefrag.exe
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-disabled]
"WD Drive Unlocker"="c:\program files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe"
"WD Quick View"=c:\program files (x86)\Western Digital\WD Quick View\WDDMStatus.exe
"BingDesktop"=c:\program files (x86)\Microsoft\BingDesktop\BingDesktop.exe /fromkey
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" -atboottime
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe"
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe"
.
R0 70844403;70844403;c:\windows\system32\drivers\77897873.sys;c:\windows\SYSNATIVE\drivers\77897873.sys [x]
R0 xbrmb;xbrmb;c:\windows\System32\drivers\bger.sys;c:\windows\SYSNATIVE\drivers\bger.sys [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 Garmin Core Update Service;Garmin Core Update Service;c:\program files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe;c:\program files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [x]
R2 LxrSII1d;Secure II Driver;c:\windows\system32\Drivers\LxrSII1d.sys;c:\windows\SYSNATIVE\Drivers\LxrSII1d.sys [x]
R2 SamsungDeviceConfigurationWinService;SamsungDeviceConfiguration;c:\program files (x86)\Samsung\Easy Settings\SamsungDeviceConfiguration.exe;c:\program files (x86)\Samsung\Easy Settings\SamsungDeviceConfiguration.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R2 SWUpdateService;SW Update Service;c:\programdata\Samsung\SW Update Service\SWMAgent.exe;c:\programdata\Samsung\SW Update Service\SWMAgent.exe [x]
R3 CH341SER_A64;CH341SER_A64;c:\windows\system32\Drivers\CH341S64.SYS;c:\windows\SYSNATIVE\Drivers\CH341S64.SYS [x]
R3 DCamUSBSTK02N;Standard Camera;c:\windows\system32\DRIVERS\STK02NW2.sys;c:\windows\SYSNATIVE\DRIVERS\STK02NW2.sys [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]
R3 PSI;PSI;c:\windows\system32\DRIVERS\psi_mf_amd64.sys;c:\windows\SYSNATIVE\DRIVERS\psi_mf_amd64.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 SBIOSIO;SBIOSIO;c:\users\John\AppData\Local\Temp\__Samsung_Update\SBIOSIO64.sys;c:\users\John\AppData\Local\Temp\__Samsung_Update\SBIOSIO64.sys [x]
R3 Secunia PSI Agent;Secunia PSI Agent;c:\program files (x86)\Secunia\PSI\PSIA.exe;c:\program files (x86)\Secunia\PSI\PSIA.exe [x]
R3 taphss6;Anchorfree HSS VPN Adapter;c:\windows\system32\DRIVERS\taphss6.sys;c:\windows\SYSNATIVE\DRIVERS\taphss6.sys [x]
R3 tapSF0901;Spotflux Virtual Network Device Driver;c:\windows\system32\DRIVERS\tapSF0901.sys;c:\windows\SYSNATIVE\DRIVERS\tapSF0901.sys [x]
R3 TFsExDisk;TFsExDisk;c:\windows\System32\Drivers\TFsExDisk.sys;c:\windows\SYSNATIVE\Drivers\TFsExDisk.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\DRIVERS\wdcsam64.sys;c:\windows\SYSNATIVE\DRIVERS\wdcsam64.sys [x]
R4 avgtp;avgtp;c:\windows\system32\drivers\avgtpx64.sys;c:\windows\SYSNATIVE\drivers\avgtpx64.sys [x]
R4 BootDefragDriver;BootDefragDriver;c:\windows\System32\drivers\BootDefragDriver.sys;c:\windows\SYSNATIVE\drivers\BootDefragDriver.sys [x]
R4 GUBootStartup;GUBootStartup;c:\windows\System32\drivers\GUBootStartup.sys;c:\windows\SYSNATIVE\drivers\GUBootStartup.sys [x]
S0 amd_sata;amd_sata;c:\windows\system32\DRIVERS\amd_sata.sys;c:\windows\SYSNATIVE\DRIVERS\amd_sata.sys [x]
S0 amd_xata;amd_xata;c:\windows\system32\DRIVERS\amd_xata.sys;c:\windows\SYSNATIVE\DRIVERS\amd_xata.sys [x]
S1 SABI;SAMSUNG Kernel Driver For Windows 7;c:\windows\system32\Drivers\SABI.sys;c:\windows\SYSNATIVE\Drivers\SABI.sys [x]
S1 SafDskNT;SafeHouse;c:\windows\system32\drivers\SAFDSKNT.SYS;c:\windows\SYSNATIVE\drivers\SAFDSKNT.SYS [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [x]
S2 AODDriver4.3;AODDriver4.3;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
S2 Atheros Bt&Wlan Coex Agent;Atheros Bt&Wlan Coex Agent;c:\program files (x86)\Bluetooth Suite\Ath_CoexAgent.exe;c:\program files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [x]
S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe;c:\program files (x86)\Bluetooth Suite\adminservice.exe [x]
S2 c2cautoupdatesvc;Skype Click to Call Updater;c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe;c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [x]
S2 c2cpnrsvc;Skype Click to Call PNR Service;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [x]
S2 mbamchameleon;mbamchameleon;c:\windows\system32\drivers\mbamchameleon.sys;c:\windows\SYSNATIVE\drivers\mbamchameleon.sys [x]
S2 Secunia Update Agent;Secunia Update Agent;c:\program files (x86)\Secunia\PSI\sua.exe;c:\program files (x86)\Secunia\PSI\sua.exe [x]
S2 SGDrv;SGDrv;c:\windows\system32\DRIVERS\SGdrv64.sys;c:\windows\SYSNATIVE\DRIVERS\SGdrv64.sys [x]
S2 WDBackup;WD Backup;c:\program files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe;c:\program files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [x]
S2 WDDriveService;WD Drive Manager;c:\program files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe;c:\program files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [x]
S3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_flt.sys [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys;c:\windows\SYSNATIVE\drivers\btath_a2dp.sys [x]
S3 btath_avdt;Atheros Bluetooth AVDT Service;c:\windows\system32\drivers\btath_avdt.sys;c:\windows\SYSNATIVE\drivers\btath_avdt.sys [x]
S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys;c:\windows\SYSNATIVE\DRIVERS\btath_bus.sys [x]
S3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_hcrp.sys [x]
S3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_lwflt.sys [x]
S3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_rcp.sys [x]
S3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys;c:\windows\SYSNATIVE\DRIVERS\btfilter.sys [x]
S3 clwvd;CyberLink WebCam Virtual Driver;c:\windows\system32\DRIVERS\clwvd.sys;c:\windows\SYSNATIVE\DRIVERS\clwvd.sys [x]
S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys;c:\windows\SYSNATIVE\DRIVERS\ETD.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys;c:\windows\SYSNATIVE\DRIVERS\usbfilter.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-05-22 19:39 1091912 ----a-w- c:\program files (x86)\Google\Chrome\Application\35.0.1916.114\Installer\chrmstp.exe
.
Contenu du dossier 'Tâches planifiées'
.
2014-06-09 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-02-16 21:37]
.
2014-06-07 c:\windows\Tasks\GlaryInitialize 5.job
- c:\program files (x86)\Glary Utilities 5\Initialize.exe [2014-06-03 01:25]
.
2014-06-07 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-06-28 16:38]
.
2014-06-09 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-06-28 16:38]
.
2014-06-06 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-839072158-3120938179-813264055-1000Core.job
- c:\users\John\AppData\Local\Google\Update\GoogleUpdate.exe [2013-01-19 01:51]
.
2014-06-09 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-839072158-3120938179-813264055-1000UA.job
- c:\users\John\AppData\Local\Google\Update\GoogleUpdate.exe [2013-01-19 01:51]
.
2014-06-07 c:\windows\Tasks\SlimDrivers Scan.job
- c:\program files (x86)\SlimDrivers\SlimDrivers.exe [2013-09-24 16:49]
.
2014-06-07 c:\windows\Tasks\SlimDrivers Startup.job
- c:\program files (x86)\SlimDrivers\SlimDrivers.exe [2013-09-24 16:49]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
2014-02-26 15:55 261832 ----a-w- c:\users\John\AppData\Local\Microsoft\SkyDrive\17.0.4029.0217_2\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
2014-02-26 15:55 261832 ----a-w- c:\users\John\AppData\Local\Microsoft\SkyDrive\17.0.4029.0217_2\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
2014-02-26 15:55 261832 ----a-w- c:\users\John\AppData\Local\Microsoft\SkyDrive\17.0.4029.0217_2\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2000-01-01 13667032]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2014-03-11 1271072]
.
------- Examen supplémentaire -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = www.google.com
uDefault_Search_URL = hxxp://www.google.com
mDefault_Search_URL = hxxp://www.google.com
mDefault_Page_URL = hxxp://www.google.com
mStart Page = about:newtab
mLocal Page = c:\windows\SysWOW64\blank.htm
mSearch Page = hxxp://www.google.com
mSearch Bar = hxxp://www.google.com
uInternet Settings,ProxyServer = localhost:8080
uSearchURL,(Default) = hxxp://www.google.com/
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.2.1
TCP: Interfaces\{F8BCFB85-77AD-4FB6-8817-47080EE4DC69}: NameServer = 192.168.2.1
Handler: intu-tt2013 - {9FF5EC07-1645-43BF-828F-C73CFA7BC1AF} - c:\program files (x86)\TurboTax 2013\ic2013pp.dll
FF - ProfilePath - c:\users\John\AppData\Roaming\Mozilla\Firefox\Profiles\2d837ppg.default-1395243719434\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - msn.ca
.
- - - - ORPHELINS SUPPRIMES - - - -
.
SafeBoot-70844403.sys
.
.
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xht\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_13_0_0_214_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_13_0_0_214_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_13_0_0_214_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_13_0_0_214_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_214.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.13"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_214.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_214.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_214.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*]
@="?????????????????? v1"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
@="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*]
@="?????????????????? v2"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
@="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
@DACL=(02 0000)
@="Bing"
"URL"="http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC"
"DisplayName"="@ieframe.dll,-12512"
"SuggestionsURL"="http://api.bing.com/qsml.aspx?query={searchTerms}&src={referrer:source?}&maxwidth={ie:maxWidth}&rowheight={ie:rowHeight}&sectionHeight={ie:sectionHeight}&FORM=IE8SSC&market={Language}"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Heure de fin: 2014-06-09 00:21:31
ComboFix-quarantined-files.txt 2014-06-09 04:21
.
Avant-CF: 86,610,620,416 bytes free
Après-CF: 86,513,807,360 bytes free
.
- - End Of File - - 605BB02AE51086260FCF10EC4BEFB33F
2E5DEBB2116B3417023E0D6562D7ED07

Link to comment
Share on other sites

  • Replies 77
  • Created
  • Last Reply

Top Posters In This Topic

Welcome back

 

Open notepad. Please copy the contents of the quote box below. To do this highlight the contents of the box and right click on it and select copy.

Paste this into the open notepad. save it to the Desktop as fixlist.txt

NOTE. It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work.

It needs to be saved Next to the "Farbar Recovery Scan Tool" (FRST) program (If asked to overwrite existing one please allow)

 

start

replace:c:\windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17041_none_f5c8074c3714b96c\mshtml.dll c:\windows\system32\mshtml.dll

replace:c:\windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.16540_none_7fc4a46e1244c8b6\wininet.dll c:\windows\system32\wininet.dll

replace:c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.16540_none_23a608ea59e75780\wininet.dll c:\windows\SysWOW64\wininet.dll

end

Run FRST/FRST64 and press the Fix button just once and wait.

If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.

When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.

 

****

Next

 

Go here to run an online scanner from ESET.

  • Turn off the real time scanner of any existing antivirus program while performing the online scan
  • Tick the box next to YES, I accept the Terms of Use.
  • Click Start
  • When asked, allow the activeX control to install
  • Click Start
  • Make sure that the option Remove found threats is unticked and the Scan Archives option is ticked.
  • Click on Advanced Settings, ensure the options Scan for potentially unwanted applications, Scan for potentially unsafe applications, and Enable Anti-Stealth Technology are ticked.
  • Click Scan
  • Wait for the scan to finish
  • When the scan completes, press the LIST OF THREATS FOUND button
  • Press EXPORT TO TEXT FILE , name the file ESETSCAN and save it to your desktop
  • Include the contents of this report in your next reply.
  • Press the BACK button.
  • Press Finish
Link to comment
Share on other sites

Please also

 

Download Windows Repair (all in one) from this site

 

Install the program then run it.

 

Go to Step 2 and allow it to run CheckDisk by clicking on Do It button:

 

p22001645.gif

 

 

 

Once that is done then go to Step 3 and allow it to run System File Check by clicking on Do It button:

 

p22001646.gif

 

 

Go to Step 4 and under "System Restore" click on Create button:

 

p22001644.gif

 

 

Go to Start Repairs tab and click Start button.

 

p22001166.gif

 

 

Please ensure that ONLY items seen in the image below are ticked as indicated (they're all checked by default):

 

p22001647.gif

 

Click on box next to the Restart System when Finished. Then click on Start.

Link to comment
Share on other sites

Hi Juliet

 

I did the scan of FRST/FRST64, and I have the log.

 

I did download Windows Repair and when I did the sacn I unchecked the the real- protection for windows security essentials.

 

I noticed that Tweaking.com - Windows Repair v2.7.5 (Windows 7 Home Premium v6.1 64-bit) as a different configuration for the one you have here. At the end on step 4 there were more boxes checked and I went with the ones you said.

 

I will see if this is working.

 

I have here the ESETSCAN:

 

C:\Users\John\AppData\Local\SlimWare Utilities Inc\SlimCleaner\Downloads\D52C177C4E85A4104093E9B1A044C62C000000000255F618.exe a variant of Win32/OpenCandy.A potentially unsafe application
C:\Users\John\Documents\APNSetup1.exe a variant of Win32/Bundled.Toolbar.Ask.E potentially unsafe application
C:\Users\John\Documents\John`s Files\EXE Files\Burner software\burnaware_free.exe a variant of Win32/Bundled.Toolbar.Ask.A potentially unsafe application
C:\Users\John\Documents\John`s Files\EXE Files\Cleaners\ccsetup318.exe Win32/Bundled.Toolbar.Google.E potentially unsafe application
C:\Users\John\Documents\John`s Files\EXE Files\Cleaners\gusetup.exe a variant of Win32/Bundled.Toolbar.Ask potentially unsafe application
C:\Users\John\Documents\John`s Files\EXE Files\Glary Utilities\gusetup.exe probably a variant of Win32/Bundled.Toolbar.Ask potentially unsafe application
C:\Users\John\Downloads\Cleaners\CCleaner_v4.13.4693.exe Win32/Bundled.Toolbar.Google.D potentially unsafe application
D:\John`s Files\EXE Files\Burner software\burnaware_free.exe a variant of Win32/Bundled.Toolbar.Ask.A potentially unsafe application
D:\John`s Files\EXE Files\Cleaners\ccsetup318.exe Win32/Bundled.Toolbar.Google.E potentially unsafe application
D:\John`s Files\EXE Files\Cleaners\gusetup.exe a variant of Win32/Bundled.Toolbar.Ask potentially unsafe application
D:\John`s Files\EXE Files\Glary Utilities\gusetup.exe probably a variant of Win32/Bundled.Toolbar.Ask potentially unsafe application

Link to comment
Share on other sites

 

I did the scan of FRST/FRST64, and I have the log.

May I see it please.

 

Applications that were downloaded came in with adware/hidden extra's. Although they are free this is not uncommon.

 

Before I create a new script to remove those malicious files I need to see if the previous one did it's job. I don't want them to get mixed up and have to do a repeat.

Link to comment
Share on other sites

Hi Juliet

 

I am so sorry, I have been at the hospital with my wife. She was in for kidney stones, and I was there all night.

 

 

I am sorry for the mistake about the log, I did one now:

 

 

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-06-2014 01
Ran by John at 2014-06-11 15:59:36 Run:3
Running from C:\Users\John\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Quote

start
replace:c:\windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17041_none_f5c8074c3714b96c\mshtml.dll c:\windows\system32\mshtml.dll
replace:c:\windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.16540_none_7fc4a46e1244c8b6\wininet.dll c:\windows\system32\wininet.dll
replace:c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.16540_none_23a608ea59e75780\wininet.dll c:\windows\SysWOW64\wininet.dll
end
*****************

c:\windows\system32\mshtml.dll => Moved successfully.
c:\windows\winsxs\amd64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17041_none_f5c8074c3714b96c\mshtml.dll copied successfully to c:\windows\system32\mshtml.dll
c:\windows\system32\wininet.dll => Moved successfully.
c:\windows\winsxs\amd64_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.16540_none_7fc4a46e1244c8b6\wininet.dll copied successfully to c:\windows\system32\wininet.dll
c:\windows\SysWOW64\wininet.dll => Moved successfully.
c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_10.2.9200.16540_none_23a608ea59e75780\wininet.dll copied successfully to c:\windows\SysWOW64\wininet.dll

==== End of Fixlog ====

Link to comment
Share on other sites

I am so sorry to hear about your wife, and hope she is better today.

 

According to the log you posted we were successful.

 

Now, let's remove the malicious files found the the Eset scan.

The machine will reboot after the scan has run, please don't be alarmed.

 

Open notepad. Please copy the contents of the quote box below. To do this highlight the contents of the box and right click on it and select copy.

Paste this into the open notepad. save it to the Desktop as fixlist.txt

NOTE. It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work.

It needs to be saved Next to the "Farbar Recovery Scan Tool" (FRST) program (If asked to overwrite existing one please allow)

 

start

C:\Users\John\AppData\Local\SlimWare Utilities Inc\SlimCleaner\Downloads\D52C177C4E85A4104093E9B1A044C62C000000000255F618.exe

C:\Users\John\Documents\APNSetup1.exe

C:\Users\John\Documents\John`s Files\EXE Files\Burner software\burnaware_free.exe

C:\Users\John\Documents\John`s Files\EXE Files\Cleaners\ccsetup318.exe

C:\Users\John\Documents\John`s Files\EXE Files\Cleaners\gusetup.exe

C:\Users\John\Documents\John`s Files\EXE Files\Glary Utilities\gusetup.exe

C:\Users\John\Downloads\Cleaners\CCleaner_v4.13.4693.exe

D:\John`s Files\EXE Files\Burner software\burnaware_free.exe

D:\John`s Files\EXE Files\Cleaners\ccsetup318.exe

D:\John`s Files\EXE Files\Cleaners\gusetup.exe

D:\John`s Files\EXE Files\Glary Utilities\gusetup.exe

Reboot:

end

Run FRST/FRST64 and press the Fix button just once and wait.

If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.

When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.

 

 

Please post this log in your next reply.

Also, can you give me an update on how the computer is at the moment.

Link to comment
Share on other sites

Hi Juliet

 

Thank you for your kind wards. I also thank for all you help.

 

My system is perfoming better. I can see that the stpo script is rare and the lag when I right is not as often as before.

 

I did scan with FRST/FRST64.

 

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-06-2014 01
Ran by John at 2014-06-12 11:49:57 Run:4
Running from C:\Users\John\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Quote

start
C:\Users\John\AppData\Local\SlimWare Utilities Inc\SlimCleaner\Downloads\D52C177C4E85A4104093E9B1A044C62C000000000255F618.exe
C:\Users\John\Documents\APNSetup1.exe
C:\Users\John\Documents\John`s Files\EXE Files\Burner software\burnaware_free.exe
C:\Users\John\Documents\John`s Files\EXE Files\Cleaners\ccsetup318.exe
C:\Users\John\Documents\John`s Files\EXE Files\Cleaners\gusetup.exe
C:\Users\John\Documents\John`s Files\EXE Files\Glary Utilities\gusetup.exe
C:\Users\John\Downloads\Cleaners\CCleaner_v4.13.4693.exe
D:\John`s Files\EXE Files\Burner software\burnaware_free.exe
D:\John`s Files\EXE Files\Cleaners\ccsetup318.exe
D:\John`s Files\EXE Files\Cleaners\gusetup.exe
D:\John`s Files\EXE Files\Glary Utilities\gusetup.exe
Reboot:
end
*****************

C:\Users\John\AppData\Local\SlimWare Utilities Inc\SlimCleaner\Downloads\D52C177C4E85A4104093E9B1A044C62C000000000255F618.exe => Moved successfully.
C:\Users\John\Documents\APNSetup1.exe => Moved successfully.
C:\Users\John\Documents\John`s Files\EXE Files\Burner software\burnaware_free.exe => Moved successfully.
C:\Users\John\Documents\John`s Files\EXE Files\Cleaners\ccsetup318.exe => Moved successfully.
C:\Users\John\Documents\John`s Files\EXE Files\Cleaners\gusetup.exe => Moved successfully.
C:\Users\John\Documents\John`s Files\EXE Files\Glary Utilities\gusetup.exe => Moved successfully.
C:\Users\John\Downloads\Cleaners\CCleaner_v4.13.4693.exe => Moved successfully.
D:\John`s Files\EXE Files\Burner software\burnaware_free.exe => Moved successfully.
D:\John`s Files\EXE Files\Cleaners\ccsetup318.exe => Moved successfully.
D:\John`s Files\EXE Files\Cleaners\gusetup.exe => Moved successfully.
D:\John`s Files\EXE Files\Glary Utilities\gusetup.exe => Moved successfully.


The system needed a reboot.

==== End of Fixlog ====

Link to comment
Share on other sites

Good work. Logs look better.

 

When booting up I think I would experiment and disable either WinPatrol or MalwareBytes Anti-Exploit to see if thats where your lag is coming from.

 

Also, if you don't mind I would like to see a new FRST log.

  • Right click Farbar Recovery Scan Tool to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
  • Please also click on the Addition.txt for it to create an additional log for me to see.
  • Press Scan button.
  • It will produce a log called FRST.txt in the same directory the tool is run from.
  • Please copy and paste log back here.
  • Please also paste that along with the FRST.txt into your reply.
~~~~~~~~~~~~~~~~

 

Please run this security check for my review.

 

Download Security Check by screen317 from here.

  • Save it to your Desktop.
  • Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
  • A Notepad document should open automatically called checkup.txt; please post the contents of that document.
Link to comment
Share on other sites

Hi Juliet

 

I did what you asked.

 

You said for me to uninstall MalwareBytes Anti-Exploit, which I did since we stared fixing it.

 

I have here the logs:

 

FRST:

 

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-06-2014 01
Ran by John (administrator) on JOHN-PC on 13-06-2014 12:28:32
Running from C:\Users\John\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English(US)
Internet Explorer Version 10
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
() C:\Program Files (x86)\Samsung\Easy Settings\SamsungDeviceConfiguration.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleCrashHandler.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Settings\dmhkcore.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Settings\MovieColorEnhancer.exe
(BillP Studios) C:\Program Files (x86)\BillP Studios\WinPatrol\WinPatrol.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Settings\SmartSetting.exe
(Samsung Electronics) C:\Program Files (x86)\Samsung\Easy Settings\EasySpeedUpManager.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe
(Glarysoft Ltd) C:\Program Files (x86)\Glary Utilities 5\Integrator.exe
(Samsung Electronics CO., LTD.) C:\Program Files\Samsung\Easy Support Center\SamoyedAgent.exe
(Samsung Electronics CO., LTD.) C:\Program Files\Samsung\S Agent\CommonAgent.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\Media+Player10\Media+Player10Serv.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Samsung Electronics CO., LTD.) C:\ProgramData\SAMSUNG\SW Update Service\SWMAgent.exe
(SEC) C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13667032 1999-12-31] (Realtek Semiconductor)
HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1271072 2014-03-11] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [startCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767200 2014-04-17] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [YouCam Mirage] => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [136488 2013-06-07] (CyberLink)
HKLM-x32\...\Run: [sunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-05-07] (Oracle Corporation)
HKU\.DEFAULT\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [122200 2014-06-09] (Garmin Ltd or its subsidiaries)
HKU\S-1-5-21-839072158-3120938179-813264055-1000\...\Run: [WinPatrol] => C:\Program Files (x86)\BillP Studios\WinPatrol\winpatrol.exe [533568 2014-04-22] (BillP Studios)
HKU\S-1-5-21-839072158-3120938179-813264055-1000\...\Run: [HydraVisionDesktopManager] => C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [1967616 2014-04-17] (AMD)
HKU\S-1-5-21-839072158-3120938179-813264055-1000\...\Run: [skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21444224 2014-05-08] (Skype Technologies S.A.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-ca
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:newtab
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM-x32 - Backup.Old.DefaultScope {c1d89ae7-449d-4929-b24b-fded04adbe06}
SearchScopes: HKLM-x32 - {c1d89ae7-449d-4929-b24b-fded04adbe06} URL = http://isearch.glarysoft.com/?q={searchTerms}&src=iesearch
SearchScopes: HKCU - Backup.Old.DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
BHO: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO-x32: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO-x32: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab
DPF: HKLM-x32 {4B54A9DE-EF1C-4EBE-A328-7C28EA3B433A} http://quickscan.bitdefender.com/qsax/qsax.cab
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: intu-tt2013 - {9FF5EC07-1645-43BF-828F-C73CFA7BC1AF} - C:\Program Files (x86)\TurboTax 2013\ic2013pp.dll (Intuit Canada, a general partnership/une société en nom collectif.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{F8BCFB85-77AD-4FB6-8817-47080EE4DC69}: [NameServer]192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\John\AppData\Roaming\Mozilla\Firefox\Profiles\2d837ppg.default-1395243719434
FF SelectedSearchEngine: Google
FF Homepage: msn.ca
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_14_0_0_125.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.6 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.0.7 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.0.8 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.1 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.3 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.4 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_125.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\windows\SysWOW64\Adobe\Director\np32dsw_1210150.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @garmin.com/GpsControl - C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3522.0110 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @veetle.com/veetleCorePlugin,version=0.9.19 - C:\Program Files (x86)\Veetle\plugins\npVeetle.dll (Veetle Inc)
FF Plugin-x32: @veetle.com/veetlePlayerPlugin,version=0.9.18 - C:\Program Files (x86)\Veetle\Player\npvlc.dll (Veetle Inc)
FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.0.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.0.6 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\John\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\John\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\John\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\John\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\John\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\John\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\John\AppData\Roaming\mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin ProgramFiles/Appdata: C:\Users\John\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF Extension: Canadian English Dictionary - C:\Users\John\AppData\Roaming\Mozilla\Firefox\Profiles\2d837ppg.default-1395243719434\Extensions\en-CA@dictionaries.addons.mozilla.org [2014-05-17]
FF Extension: 365Scores Notifier - C:\Users\John\AppData\Roaming\Mozilla\Firefox\Profiles\2d837ppg.default-1395243719434\Extensions\Firefox@365scores.com [2014-05-18]
FF Extension: Corretor para Português de Portugal - C:\Users\John\AppData\Roaming\Mozilla\Firefox\Profiles\2d837ppg.default-1395243719434\Extensions\pt-PT@dictionaries.addons.mozilla.org [2014-05-16]
FF Extension: WOT - C:\Users\John\AppData\Roaming\Mozilla\Firefox\Profiles\2d837ppg.default-1395243719434\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2014-05-16]
FF Extension: AutoTradutor - C:\Users\John\AppData\Roaming\Mozilla\Firefox\Profiles\2d837ppg.default-1395243719434\Extensions\jid0-Re15rJGCtDTAeh3coeID4VTYl18@jetpack.xpi [2014-05-16]
FF Extension: Pin It button - C:\Users\John\AppData\Roaming\Mozilla\Firefox\Profiles\2d837ppg.default-1395243719434\Extensions\pinterest@robertnyman.com.xpi [2014-05-16]
FF Extension: Priberam - Lingua Portuguesa On-Line. - C:\Users\John\AppData\Roaming\Mozilla\Firefox\Profiles\2d837ppg.default-1395243719434\Extensions\priberam@coelhonarede.com.xpi [2014-05-16]
FF Extension: Flagfox - C:\Users\John\AppData\Roaming\Mozilla\Firefox\Profiles\2d837ppg.default-1395243719434\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}.xpi [2014-05-16]
FF Extension: abcTajpu - C:\Users\John\AppData\Roaming\Mozilla\Firefox\Profiles\2d837ppg.default-1395243719434\Extensions\{15a7ef52-8a77-426e-9e17-e21af257d7c8}.xpi [2014-05-16]
FF Extension: FootieFox - C:\Users\John\AppData\Roaming\Mozilla\Firefox\Profiles\2d837ppg.default-1395243719434\Extensions\{9fb7d178-155a-4318-9173-1a8eaaea7fe4}.xpi [2014-06-03]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-04-11]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\Users\John\RealDownloader\BrowserPlugins\Firefox\Ext
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird

Chrome:
=======
CHR HomePage: hxxp://msn.ca/
CHR StartupUrls: "hxxp://msn.ca/", "hxxp://msn.pt/"
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (Google Talk Plugin) - C:\Users\John\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
CHR Plugin: (Google Talk Plugin Video Accelerator) - C:\Users\John\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
CHR Plugin: (Google Talk Plugin Video Renderer) - C:\Users\John\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
CHR Plugin: (Foxit Reader Plugin for Mozilla) - C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
CHR Plugin: (Java Platform SE 7 U25) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll No File
CHR Plugin: (Veetle TV Player) - C:\Program Files (x86)\Veetle\Player\npvlc.dll (Veetle Inc)
CHR Plugin: (Veetle TV Core) - C:\Program Files (x86)\Veetle\plugins\npVeetle.dll (Veetle Inc)
CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (RealDownloader Plugin) - C:\Users\John\RealDownloader\BrowserPlugins\npdlplugin.dll No File
CHR Plugin: (Shockwave for Director) - C:\windows\SysWOW64\Adobe\Director\np32dsw.dll No File
CHR Plugin: (Shockwave Flash) - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.250.16) - C:\windows\SysWOW64\npDeployJava1.dll No File
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-05-23]
CHR Extension: (Special Characters - Click and Paste) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkjbliednplpohojfpgnbpcppgdnhklb [2014-05-23]
CHR Extension: (AdBlock) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-02-15]
CHR Extension: (Pin It Button) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpdjojdkbbmdfjfahjcgigfpmkopogic [2014-05-26]
CHR Extension: (Portuguese Dictionary) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkjekdadnmabagedanjdjfpmjpoglapb [2014-02-16]
CHR Extension: (Spell Checker for Chrome) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfpdnkkdgghlpdgldicfgnnnkhdfhocg [2014-05-18]
CHR Extension: (Shareaholic for Pinterest) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfjkehmceppcpjoaoegdmffmkdhiegmc [2014-05-18]
CHR Extension: (Skype Click to Call) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2013-08-20]
CHR Extension: (Google Wallet) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-04]
CHR Extension: (365Scores - Live Scores,Sports News & Alerts) - C:\Users\John\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmpppefjehmjbiplimkfjeamnohldmko [2014-05-18]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-04-11]

==================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-04-17] (Advanced Micro Devices, Inc.) [File not signed]
R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [146592 2011-07-15] (Atheros) [File not signed]
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [91296 2011-07-15] (Atheros Commnucations) [File not signed]
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390720 2014-04-11] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1764992 2014-04-11] (Microsoft Corporation)
R2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [435032 2014-06-09] (Garmin Ltd or its subsidiaries)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2014-03-11] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [347872 2014-03-11] (Microsoft Corporation)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [244904 2009-12-01] () [File not signed]
R2 SamsungDeviceConfigurationWinService; C:\Program Files (x86)\Samsung\Easy Settings\SamsungDeviceConfiguration.exe [31624 2012-02-13] () [File not signed]
S3 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1229528 2013-12-06] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [662232 2013-12-06] (Secunia)
R2 SWUpdateService; C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe [3018800 2013-10-21] (Samsung Electronics CO., LTD.)
R2 WDBackup; C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [1042808 2014-02-28] (Western Digital Technologies, Inc.)
R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [271728 2014-02-28] (Western Digital Technologies, Inc.)

==================== Drivers (Whitelisted) ====================

R2 AODDriver4.3; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27648 2011-03-01] (Microsoft Corporation)
S4 avgtp; C:\windows\system32\drivers\avgtpx64.sys [50976 2014-03-10] (AVG Technologies)
S3 CH341SER_A64; C:\Windows\System32\Drivers\CH341S64.SYS [58368 2011-11-04] (www.winchiphead.com)
S4 GUBootStartup; C:\Windows\System32\drivers\GUBootStartup.sys [20672 2014-05-16] (Glarysoft Ltd)
S2 LxrSII1d; C:\windows\SysWOW64\Drivers\LxrSII1d.sys [70016 2005-05-19] () [File not signed]
R2 mbamchameleon; C:\windows\system32\drivers\mbamchameleon.sys [91352 2014-05-12] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [268512 2014-01-25] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133928 2014-03-11] (Microsoft Corporation)
S3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-12-06] (Secunia)
S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [78336 2013-01-03] (Research In Motion Limited)
S3 RimVSerPort; C:\Windows\System32\DRIVERS\RimSerial_AMD64.sys [44544 2012-12-10] (Research in Motion Ltd)
S3 rtport; C:\windows\SysWOW64\drivers\rtport.sys [15144 2012-04-14] (Windows ® 2003 DDK 3790 provider)
R1 SafDskNT; C:\windows\system32\drivers\SAFDSKNT.SYS [76112 2009-12-07] (PC Dynamics, Inc.)
R2 SGDrv; C:\Windows\System32\DRIVERS\SGdrv64.sys [7680 2011-04-11] (Phoenix Technologies Ltd.)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [40712 2012-11-01] (Anchorfree Inc.)
S3 tapSF0901; C:\Windows\System32\DRIVERS\tapSF0901.sys [39104 2013-05-28] (Spotflux, Inc.)
S0 70844403; system32\drivers\77897873.sys [X]
S4 BootDefragDriver; \SystemRoot\System32\drivers\BootDefragDriver.sys [X]
S3 DCamUSBSTK02N; system32\DRIVERS\STK02NW2.sys [X]
S3 SBIOSIO; \??\C:\Users\John\AppData\Local\Temp\__Samsung_Update\SBIOSIO64.sys [X]
S0 xbrmb; System32\drivers\bger.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-13 12:28 - 2014-06-13 12:29 - 00027453 _____ () C:\Users\John\Desktop\FRST.txt
2014-06-13 12:23 - 2014-06-13 12:23 - 00854378 _____ () C:\Users\John\Desktop\SecurityCheck.exe
2014-06-12 23:15 - 2014-06-12 23:42 - 00000062 _____ () C:\Users\John\Desktop\Drive clean.txt
2014-06-12 16:34 - 2014-06-12 16:34 - 00000000 ____D () C:\windows\system32\nn-NO
2014-06-12 16:34 - 2014-06-12 16:34 - 00000000 ____D () C:\Program Files (x86)\Cisco
2014-06-12 16:34 - 2011-08-09 18:46 - 00443040 _____ (Atheros) C:\windows\system32\athihvs.dll
2014-06-12 16:34 - 2011-08-09 18:46 - 00063648 _____ (Atheros) C:\windows\system32\athihvui.dll
2014-06-12 16:29 - 2014-06-12 16:29 - 00000000 ____D () C:\Users\John\Desktop\Wireless LAN Driver_9.2.0.439
2014-06-12 16:20 - 2014-06-12 16:32 - 00000083 _____ () C:\Users\John\Desktop\windows activation on samsug computer.txt
2014-06-12 15:52 - 2014-06-12 15:52 - 00000000 ___RD () C:\Users\John\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-06-12 15:46 - 2014-06-12 16:09 - 00000184 _____ () C:\setup.log
2014-06-12 11:33 - 2014-06-12 11:33 - 01064488 _____ (BillP Studios) C:\Users\John\Downloads\wpsetup.exe
2014-06-12 11:33 - 2014-06-12 11:33 - 00001848 _____ () C:\Users\Public\Desktop\Garmin Express.lnk
2014-06-11 22:13 - 2014-06-11 22:13 - 00001029 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Secunia PSI.lnk
2014-06-11 18:04 - 2014-04-24 22:34 - 00801280 _____ (Microsoft Corporation) C:\windows\system32\usp10.dll
2014-06-11 18:04 - 2014-04-24 22:06 - 00626688 _____ (Microsoft Corporation) C:\windows\SysWOW64\usp10.dll
2014-06-11 18:04 - 2014-04-04 22:47 - 01903552 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys
2014-06-11 18:04 - 2014-04-04 22:47 - 00288192 _____ (Microsoft Corporation) C:\windows\system32\Drivers\FWPKCLNT.SYS
2014-06-11 18:04 - 2014-03-26 10:44 - 02002432 _____ (Microsoft Corporation) C:\windows\system32\msxml6.dll
2014-06-11 18:04 - 2014-03-26 10:44 - 01882112 _____ (Microsoft Corporation) C:\windows\system32\msxml3.dll
2014-06-11 18:04 - 2014-03-26 10:41 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\msxml6r.dll
2014-06-11 18:04 - 2014-03-26 10:41 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\msxml3r.dll
2014-06-11 18:04 - 2014-03-26 10:27 - 01389056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml6.dll
2014-06-11 18:04 - 2014-03-26 10:27 - 01237504 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3.dll
2014-06-11 18:04 - 2014-03-26 10:25 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml6r.dll
2014-06-11 18:04 - 2014-03-26 10:25 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3r.dll
2014-06-11 17:40 - 2014-05-08 05:32 - 03178496 _____ (Microsoft Corporation) C:\windows\system32\rdpcorets.dll
2014-06-11 17:40 - 2014-05-08 05:32 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\RdpGroupPolicyExtension.dll
2014-06-11 17:39 - 2014-06-08 05:13 - 00506368 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2014-06-11 17:39 - 2014-06-08 05:08 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2014-06-11 17:31 - 2014-06-11 17:31 - 05329480 _____ (Secunia) C:\Users\John\Desktop\PSISetup.exe
2014-06-11 16:54 - 2014-06-11 16:55 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-06-11 16:54 - 2014-06-11 16:54 - 00002515 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-06-11 16:54 - 2014-06-11 16:54 - 00000000 ____D () C:\ProgramData\Skype
2014-06-11 16:54 - 2014-06-11 16:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-06-11 16:06 - 2014-06-11 16:07 - 01677440 _____ (Skype Technologies S.A.) C:\Users\John\Downloads\SkypeSetup(1).exe
2014-06-11 15:55 - 2014-06-13 12:24 - 00000000 ____D () C:\Users\John\Desktop\repair 3
2014-06-10 16:35 - 2014-06-10 16:36 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-10 13:55 - 2014-06-10 13:55 - 00022290 _____ () C:\Users\John\Documents\cc_20140610_135532.reg
2014-06-10 00:04 - 2014-06-10 00:04 - 00345419 _____ () C:\Users\John\Desktop\Redlight-Cameras.csv
2014-06-09 21:52 - 2014-06-09 21:52 - 00000207 _____ () C:\windows\tweaking.com-regbackup-JOHN-PC-Microsoft-Windows-7-Home-Premium-(64-bit).dat
2014-06-09 21:51 - 2014-06-09 21:51 - 00000000 ____D () C:\RegBackup
2014-06-09 21:33 - 2014-06-09 21:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tweaking.com
2014-06-09 21:31 - 2014-06-09 21:31 - 05461664 _____ () C:\Users\John\Desktop\tweaking.com_windows_repair_aio_setup.exe
2014-06-09 21:07 - 2014-06-09 21:33 - 00002119 _____ () C:\Users\John\Desktop\Tweaking.com - Windows Repair (All in One).lnk
2014-06-09 21:07 - 2014-06-09 21:07 - 00000000 ____D () C:\Users\John\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Tweaking.com
2014-06-09 21:06 - 2014-06-09 21:06 - 00000000 ____D () C:\Program Files (x86)\Tweaking.com
2014-06-09 15:19 - 2014-06-09 15:19 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-06-09 15:13 - 2014-06-11 15:59 - 02081792 _____ (Farbar) C:\Users\John\Desktop\FRST64.exe
2014-06-09 00:22 - 2014-06-09 00:22 - 00046980 _____ () C:\Users\John\Desktop\combo fix.txt
2014-06-09 00:21 - 2014-06-09 00:21 - 00046980 _____ () C:\ComboFix.txt
2014-06-09 00:21 - 2014-06-09 00:21 - 00000000 ____D () C:\Users\Isabel\AppData\Local\temp
2014-06-09 00:21 - 2014-06-09 00:21 - 00000000 ____D () C:\Users\Icedog\AppData\Local\temp
2014-06-09 00:21 - 2014-06-09 00:21 - 00000000 ____D () C:\Users\Default\AppData\Local\temp
2014-06-09 00:21 - 2014-06-09 00:21 - 00000000 ____D () C:\Users\Default User\AppData\Local\temp
2014-06-08 23:42 - 2014-06-09 00:21 - 00000000 ____D () C:\Qoobox
2014-06-08 23:42 - 2011-06-26 02:45 - 00256000 _____ () C:\windows\PEV.exe
2014-06-08 23:42 - 2010-11-07 13:20 - 00208896 _____ () C:\windows\MBR.exe
2014-06-08 23:42 - 2009-04-20 00:56 - 00060416 _____ (NirSoft) C:\windows\NIRCMD.exe
2014-06-08 23:42 - 2000-08-30 20:00 - 00518144 _____ (SteelWerX) C:\windows\SWREG.exe
2014-06-08 23:42 - 2000-08-30 20:00 - 00406528 _____ (SteelWerX) C:\windows\SWSC.exe
2014-06-08 23:42 - 2000-08-30 20:00 - 00098816 _____ () C:\windows\sed.exe
2014-06-08 23:42 - 2000-08-30 20:00 - 00080412 _____ () C:\windows\grep.exe
2014-06-08 23:42 - 2000-08-30 20:00 - 00068096 _____ () C:\windows\zip.exe
2014-06-08 23:38 - 2014-06-08 23:38 - 00003338 _____ () C:\Users\John\Desktop\info net problems.txt
2014-06-08 23:27 - 2014-06-08 23:27 - 00000316 _____ () C:\Users\John\Desktop\unisntall combo fix.txt
2014-06-08 23:05 - 2014-06-08 23:06 - 05205146 ____R (Swearware) C:\Users\John\Desktop\ComboFix.exe
2014-06-07 12:15 - 2014-06-07 12:16 - 00347816 _____ (Microsoft Corporation) C:\Users\John\Downloads\MicrosoftFixit.Skype.RNP.150325588507182794.1.1.Run.exe
2014-06-07 10:35 - 2014-06-07 10:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-06-07 10:35 - 2014-05-07 15:02 - 00098216 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
2014-06-07 10:35 - 2014-05-07 14:59 - 00264616 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe
2014-06-07 10:35 - 2014-05-07 14:59 - 00175528 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe
2014-06-07 10:35 - 2014-05-07 14:58 - 00175528 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe
2014-06-07 10:34 - 2014-06-07 10:35 - 00004341 _____ () C:\windows\SysWOW64\jupdate-1.7.0_60-b19.log
2014-06-07 10:33 - 2014-06-07 10:33 - 00918952 _____ (Oracle Corporation) C:\Users\John\Downloads\jxpiinstall.exe
2014-06-07 01:11 - 2014-06-07 01:11 - 01045896 _____ (AB Media ) C:\Users\John\Downloads\EasyToolbarRemover.exe
2014-06-07 01:03 - 2014-06-07 01:03 - 00006674 _____ () C:\Users\John\Documents\cc_20140607_010348.reg
2014-06-06 13:12 - 2014-06-06 13:12 - 00001124 _____ () C:\Users\John\Desktop\Ipod Music - Shortcut.lnk
2014-06-06 11:44 - 2014-06-06 11:45 - 00000000 ____D () C:\Users\John\Desktop\Florida Vacation 2014
2014-06-06 11:11 - 2014-06-09 15:11 - 00000000 ____D () C:\Users\John\Desktop\Repair 2
2014-06-06 10:47 - 2014-06-12 11:54 - 00000154 _____ () C:\BackupLoader.ini
2014-06-05 12:31 - 2014-06-05 12:34 - 90874184 _____ ( ) C:\Users\John\Downloads\YouCam_3.1.6607.25672_SSPC_Patch_YUC130617-01(1).exe
2014-06-05 10:51 - 2014-06-05 10:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-06-05 10:48 - 2014-06-05 10:50 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-06-05 10:48 - 2014-06-05 10:50 - 00000000 ____D () C:\Program Files\iTunes
2014-06-05 10:48 - 2014-06-05 10:48 - 00000000 ____D () C:\Program Files\iPod
2014-06-05 10:45 - 2014-06-05 10:45 - 00000000 ____D () C:\Users\John\AppData\Local\Apple Computer
2014-06-05 10:36 - 2014-06-05 10:36 - 00000000 ____D () C:\Users\John\AppData\Local\Apple
2014-06-04 21:18 - 2013-09-02 03:58 - 00175528 _____ (Trend Micro Inc.) C:\windows\system32\Drivers\tmcomm.sys
2014-06-04 20:50 - 1999-12-31 20:00 - 00685160 _____ (Realtek ) C:\windows\system32\Drivers\Rt64win7.sys
2014-06-04 20:50 - 1999-12-31 20:00 - 00074344 _____ (Realtek Semiconductor Corporation) C:\windows\system32\RtNicProp64.dll
2014-06-04 19:30 - 2014-06-04 19:30 - 02002080 _____ (PC Drivers HeadQuarters) C:\Users\John\Downloads\DriverDetective.exe
2014-06-04 16:27 - 2014-06-04 16:28 - 02712872 _____ () C:\Users\John\Downloads\spotflux-2.10.7-97.exe
2014-06-04 10:34 - 2014-06-04 10:34 - 00001040 _____ () C:\Users\Public\Desktop\Glary Utilities 5.lnk
2014-06-04 10:33 - 2014-06-04 10:33 - 13567680 _____ () C:\Users\John\Downloads\Glary_Utilities_v5.1.0.4.exe
2014-06-03 22:03 - 2014-06-03 22:03 - 00000000 ____D () C:\windows\ERUNT
2014-06-03 21:25 - 2014-06-03 21:25 - 58084488 _____ (Microsoft Corporation) C:\Users\John\Downloads\EIE11_EN-US_MSE_WIN764.EXE
2014-06-03 21:13 - 2014-06-03 21:13 - 00002117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2014-06-03 21:13 - 2014-06-03 21:13 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-06-03 21:13 - 2014-06-03 21:13 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2014-06-03 15:01 - 2014-06-03 15:01 - 13829304 _____ (Microsoft Corporation) C:\Users\John\Downloads\mseinstall.exe
2014-06-03 13:02 - 2014-06-03 17:37 - 00000000 ____D () C:\Users\John\Desktop\mbar
2014-06-03 11:37 - 2014-06-03 11:38 - 00000000 ____D () C:\Users\John\Desktop\Medical info
2014-06-03 10:57 - 2014-06-03 10:57 - 00000000 ___HD () C:\windows\AxInstSV
2014-06-02 22:18 - 2014-06-02 22:18 - 00000000 ____D () C:\Users\John\AppData\Local\com
2014-06-02 22:16 - 2014-06-02 22:42 - 00000000 ____D () C:\ProgramData\198768042fc4fc9c
2014-06-02 22:15 - 2014-06-02 22:42 - 00000000 ____D () C:\Users\John\AppData\Roaming\Activeris
2014-06-02 22:15 - 2014-06-02 22:15 - 00000000 ____D () C:\Users\John\AppData\Local\Torch
2014-06-02 22:15 - 2014-06-02 22:15 - 00000000 ____D () C:\Users\John\AppData\Local\Packages
2014-06-02 22:15 - 2014-06-02 22:15 - 00000000 ____D () C:\Users\John\AppData\Local\globalUpdate
2014-06-02 22:15 - 2014-06-02 22:15 - 00000000 ____D () C:\Users\John\AppData\Local\Comodo
2014-06-02 22:15 - 2014-06-02 22:15 - 00000000 ____D () C:\Users\John\AppData\Local\Chromatic Browser
2014-06-02 22:15 - 2014-06-02 22:15 - 00000000 ____D () C:\Users\Icedog\AppData\Local\Torch
2014-06-02 22:15 - 2014-06-02 22:15 - 00000000 ____D () C:\Users\Icedog\AppData\Local\Comodo
2014-06-02 22:15 - 2014-06-02 22:15 - 00000000 ____D () C:\Users\Icedog\AppData\Local\Chromatic Browser
2014-06-02 22:14 - 2014-06-02 22:15 - 00000000 ____D () C:\Users\Icedog\AppData\Local\Google
2014-06-02 22:14 - 2014-06-02 22:14 - 00000000 ____D () C:\Users\Guest
2014-06-02 22:13 - 2014-06-02 22:13 - 00000000 ____D () C:\Users\Administrator
2014-06-02 22:10 - 2014-06-02 22:10 - 00003110 _____ () C:\windows\System32\Tasks\{E644A14C-1812-4F03-88EF-5DE33B2BB97B}
2014-06-02 11:43 - 2014-06-02 11:43 - 00000000 ____H () C:\ProgramData\DP45977C.lfl
2014-06-02 11:43 - 2014-06-02 11:43 - 00000000 ____D () C:\windows\SysWOW64\RTCOM
2014-06-02 11:43 - 2014-06-02 11:43 - 00000000 ____D () C:\windows\system32\SRSLabs
2014-06-02 11:43 - 2014-06-02 11:43 - 00000000 ____D () C:\Program Files\Realtek
2014-06-02 11:41 - 1999-12-31 20:00 - 56270848 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RCoRes64.dat
2014-06-02 11:41 - 1999-12-31 20:00 - 07164176 _____ (Dolby Laboratories) C:\windows\system32\R4EEP64A.dll
2014-06-02 11:41 - 1999-12-31 20:00 - 05804772 _____ () C:\windows\system32\Drivers\rtvienna.dat
2014-06-02 11:41 - 1999-12-31 20:00 - 03872984 _____ (Realtek Semiconductor Corp.) C:\windows\system32\Drivers\RTKVHD64.sys
2014-06-02 11:41 - 1999-12-31 20:00 - 02825432 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RtPgEx64.dll
2014-06-02 11:41 - 1999-12-31 20:00 - 02792152 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RtkAPO64.dll
2014-06-02 11:41 - 1999-12-31 20:00 - 02101848 _____ (Waves Audio Ltd.) C:\windows\system32\WavesGUILib64.dll
2014-06-02 11:41 - 1999-12-31 20:00 - 01958616 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RTSnMg64.cpl
2014-06-02 11:41 - 1999-12-31 20:00 - 01286872 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RTCOM64.dll
2014-06-02 11:41 - 1999-12-31 20:00 - 01024216 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RtkApi64.dll
2014-06-02 11:41 - 1999-12-31 20:00 - 00947760 _____ (Sony Corporation) C:\windows\system32\SFSS_APO.dll
2014-06-02 11:41 - 1999-12-31 20:00 - 00946392 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RCoInstII64.dll
2014-06-02 11:41 - 1999-12-31 20:00 - 00757301 _____ () C:\windows\system32\Drivers\RTAIODAT.DAT
2014-06-02 11:41 - 1999-12-31 20:00 - 00662784 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxVolumeSDAPO.dll
2014-06-02 11:41 - 1999-12-31 20:00 - 00624344 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RtDataProc64.dll
2014-06-02 11:41 - 1999-12-31 20:00 - 00518896 _____ (SRS Labs, Inc.) C:\windows\system32\SRSTSX64.dll
2014-06-02 11:41 - 1999-12-31 20:00 - 00434960 _____ (Dolby Laboratories) C:\windows\system32\R4EED64A.dll
2014-06-02 11:41 - 1999-12-31 20:00 - 00375128 _____ (Dolby Laboratories, Inc.) C:\windows\system32\RTEEP64A.dll
2014-06-02 11:41 - 1999-12-31 20:00 - 00331880 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RtlCPAPI64.dll
2014-06-02 11:41 - 1999-12-31 20:00 - 00310104 _____ (Dolby Laboratories, Inc.) C:\windows\system32\RP3DHT64.dll
2014-06-02 11:41 - 1999-12-31 20:00 - 00310104 _____ (Dolby Laboratories, Inc.) C:\windows\system32\RP3DAA64.dll
2014-06-02 11:41 - 1999-12-31 20:00 - 00221024 _____ (Synopsys, Inc.) C:\windows\system32\SFNHK64.dll
2014-06-02 11:41 - 1999-12-31 20:00 - 00211184 _____ (SRS Labs, Inc.) C:\windows\system32\SRSTSH64.dll
2014-06-02 11:41 - 1999-12-31 20:00 - 00204120 _____ (Dolby Laboratories, Inc.) C:\windows\system32\RTEED64A.dll
2014-06-02 11:41 - 1999-12-31 20:00 - 00198896 _____ (SRS Labs, Inc.) C:\windows\system32\SRSHP64.dll
2014-06-02 11:41 - 1999-12-31 20:00 - 00155888 _____ (SRS Labs, Inc.) C:\windows\system32\SRSWOW64.dll
2014-06-02 11:41 - 1999-12-31 20:00 - 00149608 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RtkCfg64.dll
2014-06-02 11:41 - 1999-12-31 20:00 - 00141584 _____ (Dolby Laboratories) C:\windows\system32\R4EEL64A.dll
2014-06-02 11:41 - 1999-12-31 20:00 - 00124176 _____ (Dolby Laboratories) C:\windows\system32\R4EEA64A.dll
2014-06-02 11:41 - 1999-12-31 20:00 - 00101208 _____ (Dolby Laboratories, Inc.) C:\windows\system32\RTEEL64A.dll
2014-06-02 11:41 - 1999-12-31 20:00 - 00081248 _____ (Synopsys, Inc.) C:\windows\system32\SFCOM64.dll
2014-06-02 11:41 - 1999-12-31 20:00 - 00078688 _____ (Synopsys, Inc.) C:\windows\system32\SFAPO64.dll
2014-06-02 11:41 - 1999-12-31 20:00 - 00078680 _____ (Dolby Laboratories, Inc.) C:\windows\system32\RTEEG64A.dll
2014-06-02 11:41 - 1999-12-31 20:00 - 00075024 _____ (Dolby Laboratories) C:\windows\system32\R4EEG64A.dll
2014-06-02 11:41 - 1999-12-31 20:00 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\windows\SysWOW64\SFCOM.dll
2014-06-02 11:41 - 1999-12-31 20:00 - 00014952 _____ (Realtek Semiconductor Corp.) C:\windows\system32\RtkCoLDR64.dll
2014-06-02 11:40 - 1999-12-31 20:00 - 14737496 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxAudioRealtek64.dll
2014-06-02 11:40 - 1999-12-31 20:00 - 02770976 _____ (Fortemedia Corporation) C:\windows\system32\FMAPO64.dll
2014-06-02 11:40 - 1999-12-31 20:00 - 02037336 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxAudioEQ64.dll
2014-06-02 11:40 - 1999-12-31 20:00 - 01756264 _____ (DTS) C:\windows\system32\DTSS2SpeakerDLL64.dll
2014-06-02 11:40 - 1999-12-31 20:00 - 01033304 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxAudioAPOShell64.dll
2014-06-02 11:40 - 1999-12-31 20:00 - 00712296 _____ (DTS) C:\windows\system32\DTSSymmetryDLL64.dll
2014-06-02 11:40 - 1999-12-31 20:00 - 00693352 _____ (DTS) C:\windows\system32\DTSVoiceClarityDLL64.dll
2014-06-02 11:40 - 1999-12-31 20:00 - 00663296 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxAudioAPO30.dll
2014-06-02 11:40 - 1999-12-31 20:00 - 00603984 _____ (Knowles Acoustics ) C:\windows\system32\KAAPORT64.dll
2014-06-02 11:40 - 1999-12-31 20:00 - 00318808 _____ (Waves Audio Ltd.) C:\windows\system32\MaxxAudioAPO20.dll
2014-06-02 11:39 - 1999-12-31 20:00 - 06217904 _____ (Dolby Laboratories) C:\windows\system32\DDPP64A.dll
2014-06-02 11:39 - 1999-12-31 20:00 - 01938608 _____ (Dolby Laboratories) C:\windows\system32\DDPD64A.dll
2014-06-02 11:39 - 1999-12-31 20:00 - 01568360 _____ (DTS) C:\windows\system32\DTSS2HeadphoneDLL64.dll
2014-06-02 11:39 - 1999-12-31 20:00 - 01486952 _____ (DTS) C:\windows\system32\DTSBoostDLL64.dll
2014-06-02 11:39 - 1999-12-31 20:00 - 00728680 _____ (DTS) C:\windows\system32\DTSBassEnhancementDLL64.dll
2014-06-02 11:39 - 1999-12-31 20:00 - 00491112 _____ (DTS) C:\windows\system32\DTSNeoPCDLL64.dll
2014-06-02 11:39 - 1999-12-31 20:00 - 00432744 _____ (DTS) C:\windows\system32\DTSLimiterDLL64.dll
2014-06-02 11:39 - 1999-12-31 20:00 - 00428648 _____ (DTS) C:\windows\system32\DTSGainCompensatorDLL64.dll
2014-06-02 11:39 - 1999-12-31 20:00 - 00313520 _____ (Dolby Laboratories) C:\windows\system32\DDPO64A.dll
2014-06-02 11:39 - 1999-12-31 20:00 - 00260272 _____ (Dolby Laboratories) C:\windows\system32\DDPA64.dll
2014-06-02 11:39 - 1999-12-31 20:00 - 00242792 _____ (DTS) C:\windows\system32\DTSLFXAPO64.dll
2014-06-02 11:39 - 1999-12-31 20:00 - 00242792 _____ (DTS) C:\windows\system32\DTSGFXAPO64.dll
2014-06-02 11:39 - 1999-12-31 20:00 - 00241768 _____ (DTS) C:\windows\system32\DTSGFXAPONS64.dll
2014-06-02 11:39 - 1999-12-31 20:00 - 00209096 _____ (Andrea Electronics Corporation) C:\windows\system32\AERTAC64.dll
2014-06-02 11:39 - 1999-12-31 20:00 - 00113576 _____ (Real Sound Lab SIA) C:\windows\system32\CONEQMSAPOGUILibrary.dll
2014-06-02 11:39 - 1999-12-31 20:00 - 00108640 _____ (Andrea Electronics Corporation) C:\windows\system32\AERTAR64.dll
2014-06-02 10:58 - 2014-06-02 10:58 - 00000000 ____D () C:\Users\John\AppData\Local\AMD
2014-06-02 10:58 - 2014-06-02 10:58 - 00000000 ____D () C:\ProgramData\ATI
2014-06-02 10:52 - 2014-06-02 10:52 - 00000000 ____D () C:\Users\John\AppData\Roaming\library_dir
2014-06-02 10:51 - 2014-06-02 10:51 - 00000000 ____D () C:\Program Files (x86)\AMD AVT
2014-06-02 10:50 - 2014-06-02 10:50 - 00061432 _____ () C:\windows\SysWOW64\CCCInstall_201406021050103591.log
2014-06-02 10:49 - 2014-06-02 10:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2014-06-02 10:47 - 2014-06-02 10:51 - 00000000 ____D () C:\ProgramData\AMD
2014-06-02 10:45 - 2014-06-02 10:45 - 00000000 ____D () C:\Users\John\Downloads\Slim driveres update
2014-06-02 10:33 - 2014-06-02 10:33 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies
2014-06-02 10:30 - 2014-06-02 10:48 - 00000000 ____D () C:\Program Files\ATI Technologies
2014-06-02 01:02 - 2014-06-12 16:50 - 00000408 _____ () C:\windows\Tasks\SlimDrivers Startup.job
2014-06-02 01:02 - 2014-06-12 11:59 - 00002834 _____ () C:\windows\System32\Tasks\SlimDrivers Startup
2014-06-02 01:02 - 2014-06-02 01:02 - 00002467 _____ () C:\Users\Public\Desktop\SlimDrivers.lnk
2014-06-01 21:30 - 2014-06-04 21:00 - 00000000 ____D () C:\Users\John\Desktop\Repair
2014-06-01 21:21 - 2014-06-01 21:22 - 02001368 _____ (Driver Support) C:\Users\John\Downloads\DriverSupport.exe
2014-06-01 15:13 - 2014-06-01 15:13 - 00791552 _____ (AMD) C:\Users\John\Downloads\amddriverdownloader.exe
2014-06-01 14:26 - 2014-06-01 14:26 - 00003142 _____ () C:\windows\System32\Tasks\{FBE866B0-3BA9-4926-ABFC-7AB65076D59F}
2014-06-01 13:24 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\windows\SysWOW64\sqlite3.dll
2014-06-01 13:22 - 2014-06-01 13:26 - 00000000 ____D () C:\AdwCleaner
2014-06-01 13:02 - 2014-06-01 13:05 - 90874184 _____ ( ) C:\Users\John\Downloads\YouCam_3.1.6607.25672_SSPC_Patch_YUC130617-01.exe
2014-05-31 15:26 - 2014-06-13 12:28 - 00000000 ____D () C:\FRST
2014-05-31 15:26 - 2014-05-31 15:33 - 00071151 _____ () C:\Users\John\Downloads\FRST.txt
2014-05-31 15:21 - 2014-05-31 15:21 - 00977392 _____ (SlimWare Utilities, Inc.) C:\Users\John\Downloads\SlimCleanerPlus-setup.exe
2014-05-31 15:17 - 2014-05-31 15:17 - 01940216 _____ (Bleeping Computer, LLC) C:\Users\John\Downloads\rkill.exe
2014-05-27 21:18 - 2014-05-29 17:33 - 00000000 ____D () C:\Users\John\AppData\Roaming\vlc
2014-05-27 21:18 - 2014-05-27 21:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-05-27 19:02 - 2014-05-27 19:02 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-05-23 22:15 - 2014-05-23 22:15 - 00030726 _____ () C:\Users\John\Downloads\Outlook.com.zip
2014-05-23 00:32 - 2014-05-23 00:32 - 00096439 _____ () C:\Users\John\Downloads\shexview-x64.zip
2014-05-22 19:26 - 2014-05-22 19:27 - 00000085 _____ () C:\windows\wininit.ini
2014-05-22 11:21 - 2014-05-22 11:21 - 00000000 ____D () C:\windows\System32\Tasks\Safer-Networking
2014-05-22 11:16 - 2014-05-22 11:18 - 46392680 _____ (Safer-Networking Ltd. ) C:\Users\John\Downloads\spybot-2.3.exe
2014-05-22 10:34 - 2014-06-09 23:21 - 00116272 _____ () C:\Users\John\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-19 00:20 - 2014-05-19 00:20 - 01016261 _____ (Thisisu) C:\Users\John\Downloads\JRT.exe
2014-05-18 22:38 - 2014-05-18 22:39 - 03822364 _____ () C:\Users\John\Downloads\HDDScan-3.3.zip
2014-05-18 18:02 - 2014-05-18 18:02 - 00000000 ____D () C:\Users\John\Downloads\Root Kit scanner
2014-05-18 17:30 - 2014-06-12 11:50 - 00000000 ____D () C:\Users\John\Downloads\Cleaners
2014-05-18 17:26 - 2014-05-18 17:26 - 00000000 ____D () C:\Users\John\Downloads\Portugal
2014-05-18 17:18 - 2014-06-03 17:37 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-05-18 17:16 - 2014-05-18 17:16 - 12589848 _____ (Malwarebytes Corp.) C:\Users\John\Downloads\mbar-1.07.0.1009.exe
2014-05-17 14:46 - 2014-05-17 14:46 - 00000166 _____ () C:\Users\John\Desktop\Glarysoft Freeware.url
2014-05-17 14:39 - 2014-05-17 14:39 - 00000017 _____ () C:\Users\John\AppData\Local\resmon.resmoncfg
2014-05-17 13:14 - 2014-06-02 01:02 - 00000000 ____D () C:\Users\John\AppData\Local\SlimWare Utilities Inc
2014-05-17 13:13 - 2014-06-02 01:02 - 00000000 ____D () C:\Users\Public\Documents\Downloaded Installers
2014-05-16 23:38 - 2014-05-16 23:39 - 29014160 _____ (Mozilla) C:\Users\John\Downloads\Firefox Setup 29.0.1.exe
2014-05-16 22:21 - 2014-05-16 22:24 - 00000000 ____D () C:\Users\John\Downloads\windows scan
2014-05-16 18:53 - 2014-05-14 04:39 - 00118048 _____ (Glarysoft Ltd) C:\windows\system32\BootDefrag.exe
2014-05-16 18:18 - 2014-05-16 18:19 - 104581400 _____ (Microsoft Corporation) C:\Users\John\Downloads\msert.exe
2014-05-16 17:04 - 2014-06-12 11:59 - 00002624 _____ () C:\windows\System32\Tasks\GlaryInitialize 5
2014-05-16 17:04 - 2014-06-04 10:34 - 00002968 _____ () C:\windows\System32\Tasks\GU5SkipUAC
2014-05-16 17:04 - 2014-06-04 10:34 - 00001052 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5.lnk
2014-05-16 17:04 - 2014-05-16 17:04 - 00020672 _____ (Glarysoft Ltd) C:\windows\system32\Drivers\GUBootStartup.sys
2014-05-16 17:04 - 2014-05-16 17:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5
2014-05-16 16:16 - 2014-06-11 17:45 - 00000000 ___SD () C:\windows\system32\CompatTel
2014-05-16 14:44 - 2014-03-24 22:43 - 14175744 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2014-05-16 14:44 - 2014-03-24 22:09 - 12874240 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
2014-05-16 14:43 - 2014-04-11 22:22 - 00155072 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2014-05-16 14:43 - 2014-04-11 22:22 - 00095680 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2014-05-16 14:43 - 2014-04-11 22:19 - 01460736 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2014-05-16 14:43 - 2014-04-11 22:19 - 00136192 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2014-05-16 14:43 - 2014-04-11 22:19 - 00031232 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2014-05-16 14:43 - 2014-04-11 22:19 - 00029184 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2014-05-16 14:43 - 2014-04-11 22:19 - 00028160 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll
2014-05-16 14:43 - 2014-04-11 22:12 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll
2014-05-16 14:43 - 2014-04-11 22:10 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll
2014-05-16 14:43 - 2014-03-04 05:47 - 05550016 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2014-05-16 14:43 - 2014-03-04 05:44 - 00728064 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2014-05-16 14:43 - 2014-03-04 05:44 - 00722944 _____ (Microsoft Corporation) C:\windows\system32\objsel.dll
2014-05-16 14:43 - 2014-03-04 05:44 - 00424960 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2014-05-16 14:43 - 2014-03-04 05:44 - 00340992 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2014-05-16 14:43 - 2014-03-04 05:44 - 00314880 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2014-05-16 14:43 - 2014-03-04 05:44 - 00210944 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2014-05-16 14:43 - 2014-03-04 05:44 - 00086528 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2014-05-16 14:43 - 2014-03-04 05:44 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\wincredprovider.dll
2014-05-16 14:43 - 2014-03-04 05:43 - 00455168 _____ (Microsoft Corporation) C:\windows\system32\winlogon.exe
2014-05-16 14:43 - 2014-03-04 05:43 - 00057344 _____ (Microsoft Corporation) C:\windows\system32\cngprovider.dll
2014-05-16 14:43 - 2014-03-04 05:43 - 00056832 _____ (Microsoft Corporation) C:\windows\system32\adprovider.dll
2014-05-16 14:43 - 2014-03-04 05:43 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\capiprovider.dll
2014-05-16 14:43 - 2014-03-04 05:43 - 00052736 _____ (Microsoft Corporation) C:\windows\system32\dpapiprovider.dll
2014-05-16 14:43 - 2014-03-04 05:43 - 00044544 _____ (Microsoft Corporation) C:\windows\system32\dimsroam.dll
2014-05-16 14:43 - 2014-03-04 05:43 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2014-05-16 14:43 - 2014-03-04 05:20 - 03969984 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe
2014-05-16 14:43 - 2014-03-04 05:20 - 03914176 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe
2014-05-16 14:43 - 2014-03-04 05:17 - 00550912 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2014-05-16 14:43 - 2014-03-04 05:17 - 00538112 _____ (Microsoft Corporation) C:\windows\SysWOW64\objsel.dll
2014-05-16 14:43 - 2014-03-04 05:17 - 00259584 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll
2014-05-16 14:43 - 2014-03-04 05:17 - 00247808 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2014-05-16 14:43 - 2014-03-04 05:17 - 00172032 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdigest.dll
2014-05-16 14:43 - 2014-03-04 05:17 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSpkg.dll
2014-05-16 14:43 - 2014-03-04 05:17 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\cngprovider.dll
2014-05-16 14:43 - 2014-03-04 05:17 - 00049664 _____ (Microsoft Corporation) C:\windows\SysWOW64\adprovider.dll
2014-05-16 14:43 - 2014-03-04 05:17 - 00048128 _____ (Microsoft Corporation) C:\windows\SysWOW64\capiprovider.dll
2014-05-16 14:43 - 2014-03-04 05:17 - 00047616 _____ (Microsoft Corporation) C:\windows\SysWOW64\dpapiprovider.dll
2014-05-16 14:43 - 2014-03-04 05:17 - 00036864 _____ (Microsoft Corporation) C:\windows\SysWOW64\dimsroam.dll
2014-05-16 14:43 - 2014-03-04 05:17 - 00035328 _____ (Microsoft Corporation) C:\windows\SysWOW64\wincredprovider.dll
2014-05-16 14:43 - 2014-03-04 05:17 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\credssp.dll
2014-05-16 14:43 - 2014-03-04 05:16 - 00274944 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2014-05-16 14:00 - 2014-05-16 14:00 - 00000000 ____D () C:\Users\Isabel\AppData\Local\Samsung
2014-05-16 01:24 - 2014-05-16 01:24 - 00000000 ____D () C:\Program Files\Common Files\Bitdefender
2014-05-15 17:51 - 2014-05-15 17:51 - 00000000 ____D () C:\Users\Isabel\AppData\Local\Macromedia
2014-05-14 10:32 - 2014-06-12 11:59 - 00000330 _____ () C:\windows\Tasks\GlaryInitialize 5.job
2014-05-14 10:31 - 2014-06-12 11:55 - 00000000 ____D () C:\Program Files (x86)\Glary Utilities 5

==================== One Month Modified Files and Folders =======

2014-06-13 12:29 - 2014-06-13 12:28 - 00027453 _____ () C:\Users\John\Desktop\FRST.txt
2014-06-13 12:29 - 2012-05-06 15:21 - 00000000 ____D () C:\Users\John\AppData\Local\Temp
2014-06-13 12:28 - 2014-05-31 15:26 - 00000000 ____D () C:\FRST
2014-06-13 12:28 - 2014-04-11 17:46 - 01121861 _____ () C:\windows\WindowsUpdate.log
2014-06-13 12:26 - 2012-05-06 15:57 - 00000000 ____D () C:\Users\John\Documents\John`s Files
2014-06-13 12:24 - 2014-06-11 15:55 - 00000000 ____D () C:\Users\John\Desktop\repair 3
2014-06-13 12:23 - 2014-06-13 12:23 - 00854378 _____ () C:\Users\John\Desktop\SecurityCheck.exe
2014-06-13 12:16 - 2012-05-08 22:27 - 00000000 ____D () C:\Users\John\AppData\Roaming\Skype
2014-06-13 12:15 - 2014-01-14 01:05 - 00003918 _____ () C:\windows\System32\Tasks\User_Feed_Synchronization-{9D2D67AE-66EE-4CC1-9B13-35A7105D1F65}
2014-06-13 12:15 - 2013-02-16 17:11 - 00000830 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-06-13 12:15 - 2013-01-18 20:05 - 00000904 _____ () C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-839072158-3120938179-813264055-1000UA.job
2014-06-13 12:15 - 2012-07-14 18:45 - 00000898 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-06-12 23:42 - 2014-06-12 23:15 - 00000062 _____ () C:\Users\John\Desktop\Drive clean.txt
2014-06-12 16:50 - 2014-06-02 01:02 - 00000408 _____ () C:\windows\Tasks\SlimDrivers Startup.job
2014-06-12 16:35 - 2011-12-23 03:03 - 00000000 ____D () C:\Program Files (x86)\Atheros
2014-06-12 16:34 - 2014-06-12 16:34 - 00000000 ____D () C:\windows\system32\nn-NO
2014-06-12 16:34 - 2014-06-12 16:34 - 00000000 ____D () C:\Program Files (x86)\Cisco
2014-06-12 16:34 - 2009-07-13 23:20 - 00000000 ____D () C:\windows\system32\tr-TR
2014-06-12 16:32 - 2014-06-12 16:20 - 00000083 _____ () C:\Users\John\Desktop\windows activation on samsug computer.txt
2014-06-12 16:29 - 2014-06-12 16:29 - 00000000 ____D () C:\Users\John\Desktop\Wireless LAN Driver_9.2.0.439
2014-06-12 16:25 - 2009-07-14 00:45 - 00021536 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-12 16:25 - 2009-07-14 00:45 - 00021536 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-12 16:09 - 2014-06-12 15:46 - 00000184 _____ () C:\setup.log
2014-06-12 15:52 - 2014-06-12 15:52 - 00000000 ___RD () C:\Users\John\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-06-12 15:52 - 2013-09-24 09:41 - 00000000 ____D () C:\Users\John\Documents\Bluetooth Folder
2014-06-12 15:52 - 2009-07-14 01:13 - 00786662 _____ () C:\windows\system32\PerfStringBackup.INI
2014-06-12 15:18 - 2012-07-14 18:45 - 00000894 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-06-12 11:59 - 2014-06-02 01:02 - 00002834 _____ () C:\windows\System32\Tasks\SlimDrivers Startup
2014-06-12 11:59 - 2014-05-16 17:04 - 00002624 _____ () C:\windows\System32\Tasks\GlaryInitialize 5
2014-06-12 11:59 - 2014-05-14 10:32 - 00000330 _____ () C:\windows\Tasks\GlaryInitialize 5.job
2014-06-12 11:55 - 2014-05-14 10:31 - 00000000 ____D () C:\Program Files (x86)\Glary Utilities 5
2014-06-12 11:54 - 2014-06-06 10:47 - 00000154 _____ () C:\BackupLoader.ini
2014-06-12 11:52 - 2013-12-03 15:55 - 00008192 _____ () C:\windows\SysWOW64\WDPABKP.dat
2014-06-12 11:52 - 2009-07-14 01:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-06-12 11:50 - 2014-05-18 17:30 - 00000000 ____D () C:\Users\John\Downloads\Cleaners
2014-06-12 11:34 - 2013-08-27 18:01 - 00000000 ____D () C:\ProgramData\Package Cache
2014-06-12 11:33 - 2014-06-12 11:33 - 01064488 _____ (BillP Studios) C:\Users\John\Downloads\wpsetup.exe
2014-06-12 11:33 - 2014-06-12 11:33 - 00001848 _____ () C:\Users\Public\Desktop\Garmin Express.lnk
2014-06-12 11:33 - 2013-08-27 18:01 - 00000000 ____D () C:\ProgramData\Garmin
2014-06-12 11:33 - 2012-06-04 12:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
2014-06-12 11:32 - 2014-03-17 13:51 - 00003556 _____ () C:\windows\System32\Tasks\GarminUpdaterTask
2014-06-12 11:32 - 2012-06-04 11:59 - 00000000 ____D () C:\Program Files (x86)\Garmin
2014-06-12 11:27 - 2009-07-13 23:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
2014-06-11 22:13 - 2014-06-11 22:13 - 00001029 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Secunia PSI.lnk
2014-06-11 18:14 - 2013-04-28 23:09 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-11 17:56 - 2013-07-21 05:08 - 00000000 ____D () C:\windows\system32\MRT
2014-06-11 17:49 - 2012-05-07 20:58 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-06-11 17:49 - 2012-05-06 17:41 - 95414520 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-06-11 17:45 - 2014-05-16 16:16 - 00000000 ___SD () C:\windows\system32\CompatTel
2

Link to comment
Share on other sites

Hi Juliet

 

I went to see if the logs are compelt and found that the first log is not complete . It misses som of the last part. I will put here the remaining and the outher logs that did not take.

 

FRST log 2 part last month files:

 

==================== One Month Modified Files and Folders =======

2014-06-13 12:29 - 2014-06-13 12:28 - 00027453 _____ () C:\Users\John\Desktop\FRST.txt
2014-06-13 12:29 - 2012-05-06 15:21 - 00000000 ____D () C:\Users\John\AppData\Local\Temp
2014-06-13 12:28 - 2014-05-31 15:26 - 00000000 ____D () C:\FRST
2014-06-13 12:28 - 2014-04-11 17:46 - 01121861 _____ () C:\windows\WindowsUpdate.log
2014-06-13 12:26 - 2012-05-06 15:57 - 00000000 ____D () C:\Users\John\Documents\John`s Files
2014-06-13 12:24 - 2014-06-11 15:55 - 00000000 ____D () C:\Users\John\Desktop\repair 3
2014-06-13 12:23 - 2014-06-13 12:23 - 00854378 _____ () C:\Users\John\Desktop\SecurityCheck.exe
2014-06-13 12:16 - 2012-05-08 22:27 - 00000000 ____D () C:\Users\John\AppData\Roaming\Skype
2014-06-13 12:15 - 2014-01-14 01:05 - 00003918 _____ () C:\windows\System32\Tasks\User_Feed_Synchronization-{9D2D67AE-66EE-4CC1-9B13-35A7105D1F65}
2014-06-13 12:15 - 2013-02-16 17:11 - 00000830 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-06-13 12:15 - 2013-01-18 20:05 - 00000904 _____ () C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-839072158-3120938179-813264055-1000UA.job
2014-06-13 12:15 - 2012-07-14 18:45 - 00000898 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-06-12 23:42 - 2014-06-12 23:15 - 00000062 _____ () C:\Users\John\Desktop\Drive clean.txt
2014-06-12 16:50 - 2014-06-02 01:02 - 00000408 _____ () C:\windows\Tasks\SlimDrivers Startup.job
2014-06-12 16:35 - 2011-12-23 03:03 - 00000000 ____D () C:\Program Files (x86)\Atheros
2014-06-12 16:34 - 2014-06-12 16:34 - 00000000 ____D () C:\windows\system32\nn-NO
2014-06-12 16:34 - 2014-06-12 16:34 - 00000000 ____D () C:\Program Files (x86)\Cisco
2014-06-12 16:34 - 2009-07-13 23:20 - 00000000 ____D () C:\windows\system32\tr-TR
2014-06-12 16:32 - 2014-06-12 16:20 - 00000083 _____ () C:\Users\John\Desktop\windows activation on samsug computer.txt
2014-06-12 16:29 - 2014-06-12 16:29 - 00000000 ____D () C:\Users\John\Desktop\Wireless LAN Driver_9.2.0.439
2014-06-12 16:25 - 2009-07-14 00:45 - 00021536 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-12 16:25 - 2009-07-14 00:45 - 00021536 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-12 16:09 - 2014-06-12 15:46 - 00000184 _____ () C:\setup.log
2014-06-12 15:52 - 2014-06-12 15:52 - 00000000 ___RD () C:\Users\John\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-06-12 15:52 - 2013-09-24 09:41 - 00000000 ____D () C:\Users\John\Documents\Bluetooth Folder
2014-06-12 15:52 - 2009-07-14 01:13 - 00786662 _____ () C:\windows\system32\PerfStringBackup.INI
2014-06-12 15:18 - 2012-07-14 18:45 - 00000894 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-06-12 11:59 - 2014-06-02 01:02 - 00002834 _____ () C:\windows\System32\Tasks\SlimDrivers Startup
2014-06-12 11:59 - 2014-05-16 17:04 - 00002624 _____ () C:\windows\System32\Tasks\GlaryInitialize 5
2014-06-12 11:59 - 2014-05-14 10:32 - 00000330 _____ () C:\windows\Tasks\GlaryInitialize 5.job
2014-06-12 11:55 - 2014-05-14 10:31 - 00000000 ____D () C:\Program Files (x86)\Glary Utilities 5
2014-06-12 11:54 - 2014-06-06 10:47 - 00000154 _____ () C:\BackupLoader.ini
2014-06-12 11:52 - 2013-12-03 15:55 - 00008192 _____ () C:\windows\SysWOW64\WDPABKP.dat
2014-06-12 11:52 - 2009-07-14 01:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-06-12 11:50 - 2014-05-18 17:30 - 00000000 ____D () C:\Users\John\Downloads\Cleaners
2014-06-12 11:34 - 2013-08-27 18:01 - 00000000 ____D () C:\ProgramData\Package Cache
2014-06-12 11:33 - 2014-06-12 11:33 - 01064488 _____ (BillP Studios) C:\Users\John\Downloads\wpsetup.exe
2014-06-12 11:33 - 2014-06-12 11:33 - 00001848 _____ () C:\Users\Public\Desktop\Garmin Express.lnk
2014-06-12 11:33 - 2013-08-27 18:01 - 00000000 ____D () C:\ProgramData\Garmin
2014-06-12 11:33 - 2012-06-04 12:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
2014-06-12 11:32 - 2014-03-17 13:51 - 00003556 _____ () C:\windows\System32\Tasks\GarminUpdaterTask
2014-06-12 11:32 - 2012-06-04 11:59 - 00000000 ____D () C:\Program Files (x86)\Garmin
2014-06-12 11:27 - 2009-07-13 23:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
2014-06-11 22:13 - 2014-06-11 22:13 - 00001029 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Secunia PSI.lnk
2014-06-11 18:14 - 2013-04-28 23:09 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-11 17:56 - 2013-07-21 05:08 - 00000000 ____D () C:\windows\system32\MRT
2014-06-11 17:49 - 2012-05-07 20:58 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-06-11 17:49 - 2012-05-06 17:41 - 95414520 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-06-11 17:45 - 2014-05-16 16:16 - 00000000 ___SD () C:\windows\system32\CompatTel
2014-06-11 17:35 - 2013-02-16 17:11 - 00699056 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2014-06-11 17:35 - 2013-02-16 17:11 - 00071344 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-06-11 17:35 - 2013-02-16 17:11 - 00003768 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater
2014-06-11 17:31 - 2014-06-11 17:31 - 05329480 _____ (Secunia) C:\Users\John\Desktop\PSISetup.exe
2014-06-11 17:22 - 2012-06-15 09:43 - 00000000 ____D () C:\windows\SysWOW64\Adobe
2014-06-11 16:55 - 2014-06-11 16:54 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-06-11 16:54 - 2014-06-11 16:54 - 00002515 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-06-11 16:54 - 2014-06-11 16:54 - 00000000 ____D () C:\ProgramData\Skype
2014-06-11 16:54 - 2014-06-11 16:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-06-11 16:07 - 2014-06-11 16:06 - 01677440 _____ (Skype Technologies S.A.) C:\Users\John\Downloads\SkypeSetup(1).exe
2014-06-11 15:59 - 2014-06-09 15:13 - 02081792 _____ (Farbar) C:\Users\John\Desktop\FRST64.exe
2014-06-10 16:36 - 2014-06-10 16:35 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-10 15:13 - 2013-01-18 20:05 - 00000852 _____ () C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-839072158-3120938179-813264055-1000Core.job
2014-06-10 13:55 - 2014-06-10 13:55 - 00022290 _____ () C:\Users\John\Documents\cc_20140610_135532.reg
2014-06-10 00:04 - 2014-06-10 00:04 - 00345419 _____ () C:\Users\John\Desktop\Redlight-Cameras.csv
2014-06-09 23:30 - 2009-07-13 23:20 - 00000000 ____D () C:\windows\system32\NDF
2014-06-09 23:21 - 2014-05-22 10:34 - 00116272 _____ () C:\Users\John\AppData\Local\GDIPFONTCACHEV1.DAT
2014-06-09 23:21 - 2009-07-14 00:45 - 03030064 _____ () C:\windows\system32\FNTCACHE.DAT
2014-06-09 23:12 - 2009-07-13 22:34 - 00000537 _____ () C:\windows\win.ini
2014-06-09 23:06 - 2012-10-01 14:39 - 00000435 _____ () C:\windows\system32\Drivers\etc\hosts.ics
2014-06-09 21:52 - 2014-06-09 21:52 - 00000207 _____ () C:\windows\tweaking.com-regbackup-JOHN-PC-Microsoft-Windows-7-Home-Premium-(64-bit).dat
2014-06-09 21:51 - 2014-06-09 21:51 - 00000000 ____D () C:\RegBackup
2014-06-09 21:33 - 2014-06-09 21:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tweaking.com
2014-06-09 21:33 - 2014-06-09 21:07 - 00002119 _____ () C:\Users\John\Desktop\Tweaking.com - Windows Repair (All in One).lnk
2014-06-09 21:31 - 2014-06-09 21:31 - 05461664 _____ () C:\Users\John\Desktop\tweaking.com_windows_repair_aio_setup.exe
2014-06-09 21:21 - 2013-10-29 17:00 - 00000000 ____D () C:\Users\John\AppData\Roaming\DiskDefrag
2014-06-09 21:07 - 2014-06-09 21:07 - 00000000 ____D () C:\Users\John\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Tweaking.com
2014-06-09 21:06 - 2014-06-09 21:06 - 00000000 ____D () C:\Program Files (x86)\Tweaking.com
2014-06-09 15:19 - 2014-06-09 15:19 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-06-09 15:11 - 2014-06-06 11:11 - 00000000 ____D () C:\Users\John\Desktop\Repair 2
2014-06-09 00:22 - 2014-06-09 00:22 - 00046980 _____ () C:\Users\John\Desktop\combo fix.txt
2014-06-09 00:21 - 2014-06-09 00:21 - 00046980 _____ () C:\ComboFix.txt
2014-06-09 00:21 - 2014-06-09 00:21 - 00000000 ____D () C:\Users\Isabel\AppData\Local\temp
2014-06-09 00:21 - 2014-06-09 00:21 - 00000000 ____D () C:\Users\Icedog\AppData\Local\temp
2014-06-09 00:21 - 2014-06-09 00:21 - 00000000 ____D () C:\Users\Default\AppData\Local\temp
2014-06-09 00:21 - 2014-06-09 00:21 - 00000000 ____D () C:\Users\Default User\AppData\Local\temp
2014-06-09 00:21 - 2014-06-08 23:42 - 00000000 ____D () C:\Qoobox
2014-06-09 00:13 - 2012-06-14 22:54 - 00000000 ____D () C:\windows\ERDNT
2014-06-09 00:12 - 2009-07-13 22:34 - 00000215 _____ () C:\windows\system.ini
2014-06-08 23:38 - 2014-06-08 23:38 - 00003338 _____ () C:\Users\John\Desktop\info net problems.txt
2014-06-08 23:32 - 2014-04-01 12:46 - 00122584 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2014-06-08 23:27 - 2014-06-08 23:27 - 00000316 _____ () C:\Users\John\Desktop\unisntall combo fix.txt
2014-06-08 23:06 - 2014-06-08 23:05 - 05205146 ____R (Swearware) C:\Users\John\Desktop\ComboFix.exe
2014-06-08 05:13 - 2014-06-11 17:39 - 00506368 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2014-06-08 05:08 - 2014-06-11 17:39 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2014-06-07 12:16 - 2014-06-07 12:15 - 00347816 _____ (Microsoft Corporation) C:\Users\John\Downloads\MicrosoftFixit.Skype.RNP.150325588507182794.1.1.Run.exe
2014-06-07 10:35 - 2014-06-07 10:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-06-07 10:35 - 2014-06-07 10:34 - 00004341 _____ () C:\windows\SysWOW64\jupdate-1.7.0_60-b19.log
2014-06-07 10:35 - 2013-09-17 23:10 - 00000000 ____D () C:\ProgramData\Oracle
2014-06-07 10:35 - 2013-03-18 14:52 - 00000000 ____D () C:\Program Files (x86)\Java
2014-06-07 10:33 - 2014-06-07 10:33 - 00918952 _____ (Oracle Corporation) C:\Users\John\Downloads\jxpiinstall.exe
2014-06-07 01:11 - 2014-06-07 01:11 - 01045896 _____ (AB Media ) C:\Users\John\Downloads\EasyToolbarRemover.exe
2014-06-07 01:03 - 2014-06-07 01:03 - 00006674 _____ () C:\Users\John\Documents\cc_20140607_010348.reg
2014-06-06 13:12 - 2014-06-06 13:12 - 00001124 _____ () C:\Users\John\Desktop\Ipod Music - Shortcut.lnk
2014-06-06 11:45 - 2014-06-06 11:44 - 00000000 ____D () C:\Users\John\Desktop\Florida Vacation 2014
2014-06-06 11:42 - 2013-01-21 01:42 - 00000000 ____D () C:\Users\John\Desktop\text files
2014-06-06 11:16 - 2012-05-11 23:30 - 00000000 ____D () C:\Users\John\AppData\Local\CrashDumps
2014-06-06 11:14 - 2013-11-21 11:32 - 00000000 ____D () C:\Users\John\Desktop\ATF Cleaner
2014-06-05 13:19 - 2013-12-16 19:29 - 00000000 ____D () C:\Users\John\Documents\Youcam
2014-06-05 13:01 - 2011-12-21 22:03 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-06-05 12:34 - 2014-06-05 12:31 - 90874184 _____ ( ) C:\Users\John\Downloads\YouCam_3.1.6607.25672_SSPC_Patch_YUC130617-01(1).exe
2014-06-05 10:51 - 2014-06-05 10:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-06-05 10:50 - 2014-06-05 10:48 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-06-05 10:50 - 2014-06-05 10:48 - 00000000 ____D () C:\Program Files\iTunes
2014-06-05 10:50 - 2013-09-19 15:59 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-06-05 10:48 - 2014-06-05 10:48 - 00000000 ____D () C:\Program Files\iPod
2014-06-05 10:45 - 2014-06-05 10:45 - 00000000 ____D () C:\Users\John\AppData\Local\Apple Computer
2014-06-05 10:36 - 2014-06-05 10:36 - 00000000 ____D () C:\Users\John\AppData\Local\Apple
2014-06-04 22:14 - 2012-11-04 14:16 - 01147549 _____ () C:\Users\John\AppData\Local\census.cache
2014-06-04 22:13 - 2012-11-04 14:16 - 00119213 _____ () C:\Users\John\AppData\Local\ars.cache
2014-06-04 21:24 - 2014-03-25 22:20 - 00000010 _____ () C:\Users\John\AppData\Local\sponge.last.runtime.cache
2014-06-04 21:00 - 2014-06-01 21:30 - 00000000 ____D () C:\Users\John\Desktop\Repair
2014-06-04 20:50 - 2011-12-21 22:03 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-06-04 19:30 - 2014-06-04 19:30 - 02002080 _____ (PC Drivers HeadQuarters) C:\Users\John\Downloads\DriverDetective.exe
2014-06-04 16:28 - 2014-06-04 16:27 - 02712872 _____ () C:\Users\John\Downloads\spotflux-2.10.7-97.exe
2014-06-04 13:25 - 2014-03-08 16:17 - 00000000 ____D () C:\ProgramData\regid.2010-12.com.spotflux
2014-06-04 10:34 - 2014-06-04 10:34 - 00001040 _____ () C:\Users\Public\Desktop\Glary Utilities 5.lnk
2014-06-04 10:34 - 2014-05-16 17:04 - 00002968 _____ () C:\windows\System32\Tasks\GU5SkipUAC
2014-06-04 10:34 - 2014-05-16 17:04 - 00001052 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5.lnk
2014-06-04 10:33 - 2014-06-04 10:33 - 13567680 _____ () C:\Users\John\Downloads\Glary_Utilities_v5.1.0.4.exe
2014-06-03 22:03 - 2014-06-03 22:03 - 00000000 ____D () C:\windows\ERUNT
2014-06-03 21:29 - 2013-11-21 00:09 - 00000000 ___HD () C:\windows\msdownld.tmp
2014-06-03 21:25 - 2014-06-03 21:25 - 58084488 _____ (Microsoft Corporation) C:\Users\John\Downloads\EIE11_EN-US_MSE_WIN764.EXE
2014-06-03 21:13 - 2014-06-03 21:13 - 00002117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2014-06-03 21:13 - 2014-06-03 21:13 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-06-03 21:13 - 2014-06-03 21:13 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2014-06-03 21:13 - 2012-05-06 17:54 - 00001945 _____ () C:\windows\epplauncher.mif
2014-06-03 17:37 - 2014-06-03 13:02 - 00000000 ____D () C:\Users\John\Desktop\mbar
2014-06-03 17:37 - 2014-05-18 17:18 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-06-03 16:38 - 2013-04-20 10:28 - 00000000 ____D () C:\Users\John\Downloads\Malwarebytes
2014-06-03 16:35 - 2013-03-28 01:11 - 00000000 ____D () C:\Users\John\Downloads\Windows update
2014-06-03 15:01 - 2014-06-03 15:01 - 13829304 _____ (Microsoft Corporation) C:\Users\John\Downloads\mseinstall.exe
2014-06-03 14:23 - 2013-10-11 16:30 - 00000000 ____D () C:\Users\John\Downloads\Free Hide IP
2014-06-03 11:38 - 2014-06-03 11:37 - 00000000 ____D () C:\Users\John\Desktop\Medical info
2014-06-03 10:57 - 2014-06-03 10:57 - 00000000 ___HD () C:\windows\AxInstSV
2014-06-02 23:33 - 2012-05-06 15:28 - 00000000 ____D () C:\Users\John\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-06-02 23:15 - 2012-05-06 15:21 - 00000000 ____D () C:\Users\John
2014-06-02 23:03 - 2013-10-17 21:46 - 00000000 ____D () C:\Users\Icedog
2014-06-02 23:03 - 2009-07-13 23:20 - 00000000 ____D () C:\windows\registration
2014-06-02 22:42 - 2014-06-02 22:16 - 00000000 ____D () C:\ProgramData\198768042fc4fc9c
2014-06-02 22:42 - 2014-06-02 22:15 - 00000000 ____D () C:\Users\John\AppData\Roaming\Activeris
2014-06-02 22:18 - 2014-06-02 22:18 - 00000000 ____D () C:\Users\John\AppData\Local\com
2014-06-02 22:15 - 2014-06-02 22:15 - 00000000 ____D () C:\Users\John\AppData\Local\Torch
2014-06-02 22:15 - 2014-06-02 22:15 - 00000000 ____D () C:\Users\John\AppData\Local\Packages
2014-06-02 22:15 - 2014-06-02 22:15 - 00000000 ____D () C:\Users\John\AppData\Local\globalUpdate
2014-06-02 22:15 - 2014-06-02 22:15 - 00000000 ____D () C:\Users\John\AppData\Local\Comodo
2014-06-02 22:15 - 2014-06-02 22:15 - 00000000 ____D () C:\Users\John\AppData\Local\Chromatic Browser
2014-06-02 22:15 - 2014-06-02 22:15 - 00000000 ____D () C:\Users\Icedog\AppData\Local\Torch
2014-06-02 22:15 - 2014-06-02 22:15 - 00000000 ____D () C:\Users\Icedog\AppData\Local\Comodo
2014-06-02 22:15 - 2014-06-02 22:15 - 00000000 ____D () C:\Users\Icedog\AppData\Local\Chromatic Browser
2014-06-02 22:15 - 2014-06-02 22:14 - 00000000 ____D () C:\Users\Icedog\AppData\Local\Google
2014-06-02 22:15 - 2012-05-09 00:14 - 00000000 ____D () C:\Users\John\AppData\Local\Google
2014-06-02 22:14 - 2014-06-02 22:14 - 00000000 ____D () C:\Users\Guest
2014-06-02 22:13 - 2014-06-02 22:13 - 00000000 ____D () C:\Users\Administrator
2014-06-02 22:10 - 2014-06-02 22:10 - 00003110 _____ () C:\windows\System32\Tasks\{E644A14C-1812-4F03-88EF-5DE33B2BB97B}
2014-06-02 11:45 - 2011-12-21 22:03 - 00000000 ___HD () C:\Program Files (x86)\Temp
2014-06-02 11:43 - 2014-06-02 11:43 - 00000000 ____H () C:\ProgramData\DP45977C.lfl
2014-06-02 11:43 - 2014-06-02 11:43 - 00000000 ____D () C:\windows\SysWOW64\RTCOM
2014-06-02 11:43 - 2014-06-02 11:43 - 00000000 ____D () C:\windows\system32\SRSLabs
2014-06-02 11:43 - 2014-06-02 11:43 - 00000000 ____D () C:\Program Files\Realtek
2014-06-02 10:58 - 2014-06-02 10:58 - 00000000 ____D () C:\Users\John\AppData\Local\AMD
2014-06-02 10:58 - 2014-06-02 10:58 - 00000000 ____D () C:\ProgramData\ATI
2014-06-02 10:52 - 2014-06-02 10:52 - 00000000 ____D () C:\Users\John\AppData\Roaming\library_dir
2014-06-02 10:51 - 2014-06-02 10:51 - 00000000 ____D () C:\Program Files (x86)\AMD AVT
2014-06-02 10:51 - 2014-06-02 10:47 - 00000000 ____D () C:\ProgramData\AMD
2014-06-02 10:50 - 2014-06-02 10:50 - 00061432 _____ () C:\windows\SysWOW64\CCCInstall_201406021050103591.log
2014-06-02 10:50 - 2011-12-21 22:01 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies
2014-06-02 10:49 - 2014-06-02 10:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2014-06-02 10:48 - 2014-06-02 10:30 - 00000000 ____D () C:\Program Files\ATI Technologies
2014-06-02 10:45 - 2014-06-02 10:45 - 00000000 ____D () C:\Users\John\Downloads\Slim driveres update
2014-06-02 10:36 - 2011-12-21 22:03 - 00000000 ____D () C:\Program Files\AMD
2014-06-02 10:33 - 2014-06-02 10:33 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies
2014-06-02 10:27 - 2012-05-06 22:39 - 00000000 ____D () C:\AMD
2014-06-02 01:02 - 2014-06-02 01:02 - 00002467 _____ () C:\Users\Public\Desktop\SlimDrivers.lnk
2014-06-02 01:02 - 2014-05-17 13:14 - 00000000 ____D () C:\Users\John\AppData\Local\SlimWare Utilities Inc
2014-06-02 01:02 - 2014-05-17 13:13 - 00000000 ____D () C:\Users\Public\Documents\Downloaded Installers
2014-06-01 21:22 - 2014-06-01 21:21 - 02001368 _____ (Driver Support) C:\Users\John\Downloads\DriverSupport.exe
2014-06-01 15:13 - 2014-06-01 15:13 - 00791552 _____ (AMD) C:\Users\John\Downloads\amddriverdownloader.exe
2014-06-01 14:26 - 2014-06-01 14:26 - 00003142 _____ () C:\windows\System32\Tasks\{FBE866B0-3BA9-4926-ABFC-7AB65076D59F}
2014-06-01 13:26 - 2014-06-01 13:22 - 00000000 ____D () C:\AdwCleaner
2014-06-01 13:14 - 2011-12-21 23:25 - 00003150 _____ () C:\windows\System32\Tasks\MirageAgent
2014-06-01 13:07 - 2011-12-21 23:14 - 00000000 ____D () C:\ProgramData\Temp
2014-06-01 13:05 - 2014-06-01 13:02 - 90874184 _____ ( ) C:\Users\John\Downloads\YouCam_3.1.6607.25672_SSPC_Patch_YUC130617-01.exe
2014-06-01 12:47 - 2012-07-05 18:19 - 00000000 ____D () C:\Users\John\AppData\Local\CRE
2014-05-31 15:33 - 2014-05-31 15:26 - 00071151 _____ () C:\Users\John\Downloads\FRST.txt
2014-05-31 15:21 - 2014-05-31 15:21 - 00977392 _____ (SlimWare Utilities, Inc.) C:\Users\John\Downloads\SlimCleanerPlus-setup.exe
2014-05-31 15:17 - 2014-05-31 15:17 - 01940216 _____ (Bleeping Computer, LLC) C:\Users\John\Downloads\rkill.exe
2014-05-30 16:56 - 2012-05-08 16:00 - 00000000 ____D () C:\Users\John\AppData\Roaming\GlarySoft
2014-05-29 17:33 - 2014-05-27 21:18 - 00000000 ____D () C:\Users\John\AppData\Roaming\vlc
2014-05-29 00:36 - 2013-10-27 01:04 - 00000935 _____ () C:\Users\John\Desktop\Portugal new poi gathering.txt
2014-05-27 21:18 - 2014-05-27 21:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-05-27 21:18 - 2014-04-01 12:46 - 00001062 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-05-27 21:18 - 2014-04-01 12:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-05-27 21:18 - 2014-04-01 12:45 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-05-27 21:17 - 2013-04-17 22:26 - 00000000 ____D () C:\Program Files\VideoLAN
2014-05-27 19:02 - 2014-05-27 19:02 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-05-27 19:02 - 2012-05-09 00:16 - 00000000 ____D () C:\Program Files\CCleaner
2014-05-25 21:47 - 2012-05-12 01:15 - 00000000 ____D () C:\ProgramData\ZoomBrowser
2014-05-23 22:15 - 2014-05-23 22:15 - 00030726 _____ () C:\Users\John\Downloads\Outlook.com.zip
2014-05-23 00:32 - 2014-05-23 00:32 - 00096439 _____ () C:\Users\John\Downloads\shexview-x64.zip
2014-05-22 19:27 - 2014-05-22 19:26 - 00000085 _____ () C:\windows\wininit.ini
2014-05-22 11:21 - 2014-05-22 11:21 - 00000000 ____D () C:\windows\System32\Tasks\Safer-Networking
2014-05-22 11:18 - 2014-05-22 11:16 - 46392680 _____ (Safer-Networking Ltd. ) C:\Users\John\Downloads\spybot-2.3.exe
2014-05-19 17:22 - 2009-07-13 23:20 - 00000000 ____D () C:\windows\Globalization
2014-05-19 00:20 - 2014-05-19 00:20 - 01016261 _____ (Thisisu) C:\Users\John\Downloads\JRT.exe
2014-05-18 23:42 - 2013-04-28 23:09 - 00001119 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-05-18 22:39 - 2014-05-18 22:38 - 03822364 _____ () C:\Users\John\Downloads\HDDScan-3.3.zip
2014-05-18 18:02 - 2014-05-18 18:02 - 00000000 ____D () C:\Users\John\Downloads\Root Kit scanner
2014-05-18 17:29 - 2013-11-09 15:32 - 00000000 ____D () C:\Users\John\Downloads\Glary utilities older files
2014-05-18 17:26 - 2014-05-18 17:26 - 00000000 ____D () C:\Users\John\Downloads\Portugal
2014-05-18 17:26 - 2012-11-04 14:38 - 00000000 ____D () C:\Users\John\Downloads\Highjack this files
2014-05-18 17:16 - 2014-05-18 17:16 - 12589848 _____ (Malwarebytes Corp.) C:\Users\John\Downloads\mbar-1.07.0.1009.exe
2014-05-18 17:15 - 2012-06-12 11:55 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-18 16:37 - 2013-04-25 17:36 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-05-18 12:33 - 2012-05-06 16:00 - 00000000 ____D () C:\Users\John\Documents\TurboTax
2014-05-17 22:12 - 2013-03-02 13:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TurboTax
2014-05-17 21:57 - 2013-03-02 13:23 - 00000000 ____D () C:\Program Files (x86)\TurboTax 2012
2014-05-17 21:13 - 2014-04-20 11:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC-HC
2014-05-17 21:13 - 2014-04-20 11:45 - 00000000 ____D () C:\Program Files (x86)\MPC-HC
2014-05-17 14:49 - 2014-03-10 15:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader
2014-05-17 14:46 - 2014-05-17 14:46 - 00000166 _____ () C:\Users\John\Desktop\Glarysoft Freeware.url
2014-05-17 14:39 - 2014-05-17 14:39 - 00000017 _____ () C:\Users\John\AppData\Local\resmon.resmoncfg
2014-05-17 14:34 - 2009-07-13 23:20 - 00000000 ____D () C:\windows\rescache
2014-05-17 13:25 - 2013-11-01 00:09 - 00000000 ____D () C:\ProgramData\install_clap
2014-05-17 13:25 - 2012-07-04 15:38 - 00000000 ____D () C:\Users\John\AppData\Roaming\dvdcss
2014-05-17 13:25 - 2011-02-11 15:57 - 00000000 ____D () C:\windows\Panther
2014-05-16 23:39 - 2014-05-16 23:38 - 29014160 _____ (Mozilla) C:\Users\John\Downloads\Firefox Setup 29.0.1.exe
2014-05-16 22:24 - 2014-05-16 22:21 - 00000000 ____D () C:\Users\John\Downloads\windows scan
2014-05-16 19:48 - 2013-02-19 13:03 - 00000000 ____D () C:\Users\John\AppData\Roaming\QuickScan
2014-05-16 18:19 - 2014-05-16 18:18 - 104581400 _____ (Microsoft Corporation) C:\Users\John\Downloads\msert.exe
2014-05-16 17:54 - 2014-03-16 11:58 - 00000000 ____D () C:\Users\John\AppData\Roaming\.spotflux
2014-05-16 17:11 - 2013-04-26 22:42 - 00000000 ____D () C:\ProgramData\InstallMate
2014-05-16 17:11 - 2013-03-27 22:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPatrol
2014-05-16 17:04 - 2014-05-16 17:04 - 00020672 _____ (Glarysoft Ltd) C:\windows\system32\Drivers\GUBootStartup.sys
2014-05-16 17:04 - 2014-05-16 17:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5
2014-05-16 16:35 - 2012-05-06 15:28 - 00000000 ____D () C:\Users\John\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-16 15:08 - 2013-01-18 20:05 - 00003872 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-839072158-3120938179-813264055-1000UA
2014-05-16 15:08 - 2013-01-18 20:05 - 00003476 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-839072158-3120938179-813264055-1000Core
2014-05-16 14:32 - 2012-07-14 18:45 - 00003894 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-05-16 14:32 - 2012-07-14 18:45 - 00003642 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-05-16 14:26 - 2014-05-12 00:19 - 00000000 ____D () C:\Users\Isabel
2014-05-16 14:19 - 2011-12-21 22:13 - 00000000 ____D () C:\windows\SysWOW64\Macromed
2014-05-16 14:18 - 2014-05-12 00:19 - 00000000 ___RD () C:\Users\Isabel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-05-16 14:18 - 2014-05-12 00:19 - 00000000 ____D () C:\Users\Isabel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-05-16 14:18 - 2014-05-04 22:52 - 00000000 ____D () C:\Program Files\TAP-Windows
2014-05-16 14:18 - 2014-03-24 16:01 - 00000000 ____D () C:\Program Files (x86)\TurboTax 2013
2014-05-16 14:18 - 2013-02-02 19:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-05-16 14:18 - 2012-05-09 13:09 - 00000000 ____D () C:\windows\system32\Macromed
2014-05-16 14:18 - 2012-05-09 00:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-05-16 14:18 - 2012-05-06 16:51 - 00000000 ____D () C:\ProgramData\pdf995
2014-05-16 14:18 - 2011-12-21 22:39 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-05-16 14:18 - 2011-12-21 22:23 - 00000000 ____D () C:\ProgramData\WinClon
2014-05-16 14:18 - 2011-12-21 22:05 - 00000000 ____D () C:\ProgramData\Atheros
2014-05-16 14:18 - 2009-07-13 23:20 - 00000000 ____D () C:\windows\AppCompat
2014-05-16 14:00 - 2014-05-16 14:00 - 00000000 ____D () C:\Users\Isabel\AppData\Local\Samsung
2014-05-16 13:29 - 2014-05-12 00:20 - 00000000 ____D () C:\Users\Isabel\Documents\Bluetooth Folder
2014-05-16 01:24 - 2014-05-16 01:24 - 00000000 ____D () C:\Program Files\Common Files\Bitdefender
2014-05-15 17:51 - 2014-05-15 17:51 - 00000000 ____D () C:\Users\Isabel\AppData\Local\Macromedia
2014-05-14 10:32 - 2013-10-24 15:54 - 00000000 ____D () C:\ProgramData\GlarySoft
2014-05-14 04:39 - 2014-05-16 18:53 - 00118048 _____ (Glarysoft Ltd) C:\windows\system32\BootDefrag.exe

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-06-08 19:42

==================== End Of Log ============================

 

 

Addition log:

 

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-06-2014 01
Ran by John at 2014-06-13 12:32:13
Running from C:\Users\John\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}

==================== Installed Programs ======================

Update for Microsoft Office 2007 (KB2508958) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version: - Microsoft)
„Windows Live Essentials“ (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
„Windows Live Mail“ (x32 Version: 16.4.3522.0110 - „Microsoft Corporation“) Hidden
„Windows Live Messenger“ (x32 Version: 16.4.3522.0110 - „Microsoft Corporation“) Hidden
Absolute Uninstaller 2.9.0.722 (HKLM-x32\...\Absolute Uninstaller_is1) (Version: - Glarysoft.com)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 14.0.0.110 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 14.0.0.110 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 14 ActiveX (HKLM-x32\...\{1F5E5F2E-5E61-431D-B796-58CCC6B68E28}) (Version: 14.0.0.125 - Adobe Systems Incorporated)
Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.125 - Adobe Systems Incorporated)
Adobe Media Player (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.1 - Adobe Systems Incorporated)
Adobe Media Player (x32 Version: 0.0.0 - Adobe Systems Incorporated) Hidden
Adobe Reader XI (11.0.07) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM-x32\...\{0099B484-C24C-4D5F-8167-B0F6DF196E72}) (Version: 12.0.3.133 - Adobe Systems, Inc)
Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.0.150 - Adobe Systems, Inc.)
AMD Accelerated Video Transcoding (Version: 13.30.100.40417 - Advanced Micro Devices, Inc.) Hidden
AMD APP SDK Runtime (Version: 2.5.793.1 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Control Center (x32 Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden
AMD Catalyst Install Manager (HKLM\...\{6119B3A6-3603-9695-0398-CDF2AF0A13F8}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Fuel (Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden
AMD Steady Video Plug-In (Version: 2.02.0000 - AMD) Hidden
AMD Steady Video Plug-In (Version: 2.07.0000 - AMD) Hidden
AMD Wireless Display v3.0 (Version: 1.0.0.15 - Advanced Micro Devices, Inc.) Hidden
ANT Drivers Installer x64 (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden
Apple Application Support (HKLM-x32\...\{D9DAD0FF-495A-472B-9F10-BAE430A26682}) (Version: 3.0.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 9.0 - Atheros)
Bluetooth Win7 Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.3.0.120 - Atheros Communications)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Canon MOV Decoder (HKLM-x32\...\Canon MOV Decoder) (Version: 1.4.0.15 - Canon Inc.)
Canon MovieEdit Task for ZoomBrowser EX (HKLM-x32\...\MovieEditTask) (Version: 3.3.0.15 - Canon Inc.)
Canon Utilities CameraWindow (HKLM-x32\...\CameraWindowLauncher) (Version: 7.3.0.4 - Canon Inc.)
Canon Utilities Digital Photo Professional 3.7 (HKLM-x32\...\DPP) (Version: 3.7.1.1 - Canon Inc.)
Canon Utilities EOS Utility (HKLM-x32\...\EOS Utility) (Version: 2.7.1.0 - Canon Inc.)
Canon Utilities MyCamera (HKLM-x32\...\MyCamera) (Version: 7.3.0.5 - Canon Inc.)
Canon Utilities PhotoStitch (HKLM-x32\...\PhotoStitch) (Version: 3.1.22.46 - Canon Inc.)
Canon Utilities Picture Style Editor (HKLM-x32\...\Picture Style Editor) (Version: 1.6.0.0 - Canon Inc.)
Canon Utilities WFT-E1/E2/E3/E4/E5 Utility (HKLM-x32\...\WFTK) (Version: 3.4.0.2 - Canon Inc.)
Canon Utilities ZoomBrowser EX (HKLM-x32\...\ZoomBrowser EX) (Version: 6.4.1.11 - Canon Inc.)
Canon ZoomBrowser EX Memory Card Utility (HKLM-x32\...\ZoomBrowser EX Memory Card Utility) (Version: 1.2.2.11 - Canon Inc.)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.14 - Piriform)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
CSVed 2.2.2a (HKLM-x32\...\CSVed_is1) (Version: 2.2.2a - Sam Francke)
CyberLink Media Suite (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 8.0.2227 - CyberLink Corp.)
CyberLink Media Suite 11 (HKLM-x32\...\InstallShield_{8F14AA37-5193-4A14-BD5B-BDF9B361AEF7}) (Version: 11.0 - CyberLink Corp.)
CyberLink Media+ Player10 (HKLM-x32\...\InstallShield_{34FBC7C4-CD31-4D93-A428-0E524EAC4586}) (Version: 10.0.1110.00 - CyberLink Corp.)
CyberLink Media+ Player10 (x32 Version: 10.0.1110.00 - CyberLink Corp.) Hidden
CyberLink MediaShow (HKLM-x32\...\InstallShield_{80E158EA-7181-40FE-A701-301CE6BE64AB}) (Version: 5.0.1130a - CyberLink Corp.)
CyberLink MediaShow (x32 Version: 5.0.1130a - CyberLink Corp.) Hidden
CyberLink Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.3802 - CyberLink Corp.)
CyberLink Power2Go (x32 Version: 6.1.3802 - CyberLink Corp.) Hidden
CyberLink PowerDirector (HKLM-x32\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 8.0.3306 - CyberLink Corp.)
CyberLink PowerDirector (x32 Version: 8.0.3306 - CyberLink Corp.) Hidden
CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.1.6607 - CyberLink Corp.)
CyberLink YouCam (x32 Version: 3.1.6607 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Easy File Share (HKLM-x32\...\{12F81925-F3C1-40DB-91F7-777817974319}) (Version: 1.3.1 - Samsung Electronics CO., LTD.)
Easy Migration (HKLM-x32\...\{AD86049C-3D9C-43E1-BE73-643F57D83D50}) (Version: 1.0 - Samsung Electronics Co., Ltd.)
Easy Settings (HKLM-x32\...\{17283B95-21A8-4996-97DA-547A48DB266F}) (Version: 1.1 - Samsung Electronics CO., LTD.)
Easy Support Center (HKLM\...\{0738F5F1-8E70-49A6-8692-F5722E1E5A4D}) (Version: 1.2.32 - Samsung Electronics CO., LTD.)
Elevated Installer (x32 Version: 3.2.7.0 - Garmin Ltd or its subsidiaries) Hidden
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
ETDWare PS/2-X64 10.0.7.3_WHQL (HKLM\...\Elantech) (Version: 10.0.7.3 - ELAN Microelectronic Corp.)
Fotoattēlu galerija (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Fotogaléria (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Fotogalerie (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Fotogalerija (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Foto-galerija (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Fotogalleri (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Fotogalleriet (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Fotoğraf Galerisi (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Fotótár (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 6.2.0.429 - Foxit Corporation)
Galeria de Fotografias (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Galeria de Fotos (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Galería de fotos (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Galeria fotografii (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Galerie de photos (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Galerie foto (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Galerija fotografija (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Garmin BaseCamp (HKLM-x32\...\{EBAC8FD4-28EC-46F7-BF9E-89D6E6673001}) (Version: 4.2.5 - Garmin Ltd or its subsidiaries)
Garmin City Navigator North America NT 2014.40 Update (HKLM-x32\...\{82B42DF2-2ECF-4C4B-B939-A275664028E2}) (Version: 17.40.0.0 - Garmin Ltd or its subsidiaries)
Garmin Communicator Plugin (HKLM-x32\...\{647BB978-2876-487B-9B0E-FDB73F0EA4A2}) (Version: 4.0.4 - Garmin Ltd or its subsidiaries)
Garmin Communicator Plugin x64 (HKLM\...\{237D687E-9E50-4A30-B810-262764CC491B}) (Version: 4.0.4 - Garmin Ltd or its subsidiaries)
Garmin Express (HKLM-x32\...\{55ae01f2-f0a8-4342-a9cc-a0327cdaa811}) (Version: 3.2.7.0 - Garmin Ltd or its subsidiaries)
Garmin Express (x32 Version: 3.2.7.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin Express Tray (x32 Version: 3.2.7.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin MapSource (HKLM-x32\...\{AFBAB9A0-DDE8-49AE-8C17-A01B61BEE64B}) (Version: 6.16.3 - Garmin Ltd or its subsidiaries)
Garmin POI Loader (HKLM-x32\...\{3213ED5E-7BBE-4613-BE69-8B1E4FE520DD}) (Version: 2.7.3 - Garmin Ltd or its subsidiaries)
Garmin Training Center (HKLM-x32\...\{7D542452-84EB-47C0-97BA-735C523AB555}) (Version: 3.6.5 - Garmin Ltd or its subsidiaries)
Garmin USB Drivers (HKLM-x32\...\{3D5D6CFC-3097-425A-8D8F-7EAF5D57641D}) (Version: 2.3.1.0 - Garmin Ltd or its subsidiaries)
Glary Utilities 5.1 (HKLM-x32\...\Glary Utilities 5) (Version: 5.1.0.4 - Glarysoft Ltd)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 35.0.1916.153 - Google Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Talk Plugin (HKLM-x32\...\{43AC7CBC-1D6A-3B5B-81B1-A0C166FE48F4}) (Version: 4.8.2.15856 - Google)
HiJackThis (HKLM-x32\...\{45A66726-69BC-466B-A7A4-12FCBA4883D7}) (Version: 1.0.0 - Trend Micro)
HydraVision (x32 Version: 4.2.252.0 - Advanced Micro Devices, Inc.) Hidden
iTunes (HKLM\...\{5A68A656-979F-4168-8795-E2E368AA4DC2}) (Version: 11.2.2.3 - Apple Inc.)
Java 7 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.600 - Oracle)
Java Auto Updater (x32 Version: 2.1.60.19 - Oracle, Inc.) Hidden
JavaFX 2.1.1 (HKLM-x32\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)
Junk Mail filter update (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
K-Lite Codec Pack 10.4.4 Full (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.4.4 - )
Launch Manager (HKLM-x32\...\LManager) (Version: 2.0.01 - Gateway)
Malwarebytes Anti-Malware version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Access MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Access Setup Metadata MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Groove MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove Setup Metadata MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0401-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0402-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0404-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0405-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0406-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0407-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0408-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0409-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-040B-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-040C-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-040D-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-040E-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0410-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0412-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0413-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0414-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0415-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0416-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0418-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0419-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-041A-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-041B-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-041D-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-041E-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-041F-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0424-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0426-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0427-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0804-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0816-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-081A-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0C0A-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Spanish) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (English) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden
Microsoft Office Publisher MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared Setup Metadata MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKCU\...\OneDriveSetup.exe) (Version: 17.0.4029.0217 - Microsoft Corporation)
Microsoft Security Client (Version: 4.5.0216.0 - Microsoft Corporation) Hidden
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.5.216.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Movie Maker (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Mozilla Firefox 30.0 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 30.0 (x86 en-US)) (Version: 30.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MPC-HC 1.7.4 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.4 - MPC-HC Team)
MPC-HC 1.7.5 (HKLM-x32\...\{2624B969-7135-4EB1-B0F6-2D8C397B45F7}_is1) (Version: 1.7.5 - MPC-HC Team)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
OLYMPUS Digital Camera Updater (HKLM-x32\...\{2A9E8F56-C31B-4DBB-BFE2-0F4EC8192355}) (Version: 1.0.3 - OLYMPUS IMAGING CORP.)
OLYMPUS Viewer 2 (HKLM-x32\...\{AEE39224-92BE-4389-9493-E57FF73BB96A}) (Version: 1.3.1 - OLYMPUS IMAGING CORP.)
Pdf995 (HKLM-x32\...\Pdf995) (Version: - )
Photo Common (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Photo Gallery (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Poczta usługi Windows Live (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Pošta Windows Live (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
Raccolta foto (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.54.309.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7183 - Realtek Semiconductor Corp.)
S Agent (Version: 1.1.45 - Samsung Electronics CO., LTD.) Hidden
Samsung Recovery Solution 5 (HKLM-x32\...\{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}) (Version: 5.6.0.2 - Samsung Electronics CO., LTD.)
Samsung Universal Scan Driver (HKLM-x32\...\Samsung Universal Scan Driver) (Version: 1.2.6.0 - Samsung Electronics Co., Ltd.)
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.3.1400.0 - SAMSUNG Electronics Co., Ltd.)
Secunia PSI (3.0.0.9016) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.9016 - Secunia)
Skype Click to Call (HKLM-x32\...\{BB285C9F-C821-4770-8970-56C4AB52C87E}) (Version: 7.2.15747.10003 - Microsoft Corporation)
Skype™ 6.16 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.)
SlimDrivers (HKLM-x32\...\{A5457401-D56A-43F2-9524-78E54A7FC07A}) (Version: 2.2.32705 - SlimWare Utilities, Inc.)
Software Launcher (HKLM-x32\...\{B750B5C2-CC17-4967-905B-29F4EB986131}) (Version: 1.0.2 - Samsung)
SW Update (HKLM-x32\...\{DA06101F-FD76-4BF0-88BD-B26A197005E3}) (Version: 2.1.21 - Samsung Electronics CO., LTD.)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TurboTax 2013 (HKLM-x32\...\{1E0FF98D-4AE4-46CC-B624-E771ABD5EA11}) (Version: 1.00.0000 - Intuit Canada)
Tweaking.com - Windows Repair (All in One) (HKLM-x32\...\Tweaking.com - Windows Repair (All in One)) (Version: 2.7.5 - Tweaking.com)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update for Microsoft Office 2007 Help for Common Features (KB963673) (HKLM-x32\...\{90120000-006E-0409-0000-0000000FF1CE}_ENTERPRISE_{AB365889-0395-4FAD-B702-CA5985D53D42}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft)
Update for Microsoft Office Access 2007 Help (KB963663) (HKLM-x32\...\{90120000-0015-0409-0000-0000000FF1CE}_ENTERPRISE_{6B76A18A-AA1E-42AB-A7AD-6C84BBB43987}) (Version: - Microsoft)
Update for Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0409-0000-0000000FF1CE}_ENTERPRISE_{199DF7B6-169C-448C-B511-1054101BE9C9}) (Version: - Microsoft)
Update for Microsoft Office Infopath 2007 Help (KB963662) (HKLM-x32\...\{90120000-0044-0409-0000-0000000FF1CE}_ENTERPRISE_{716B81B8-B13C-41DF-8EAC-7A2F656CAB63}) (Version: - Microsoft)
Update for Microsoft Office OneNote 2007 Help (KB963670) (HKLM-x32\...\{90120000-00A1-0409-0000-0000000FF1CE}_ENTERPRISE_{2744EF05-38E1-4D5D-B333-E021EDAEA245}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0409-0000-0000000FF1CE}_ENTERPRISE_{ED38F8A3-4F61-494E-8BCA-E3AC7760C924}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{53DEC068-4690-4F6B-9946-7D21EF02236B}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0409-0000-0000000FF1CE}_ENTERPRISE_{0451F231-E3E3-4943-AB9F-58EB96171784}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2881065) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{B7EF38F7-1D58-4085-A9A4-0F6C69A5AA1E}) (Version: - Microsoft)
Update for Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0409-0000-0000000FF1CE}_ENTERPRISE_{397B1D4F-ED7B-4ACA-A637-43B670843876}) (Version: - Microsoft)
Update for Microsoft Office Publisher 2007 Help (KB963667) (HKLM-x32\...\{90120000-0019-0409-0000-0000000FF1CE}_ENTERPRISE_{2E40DE55-B289-4C8B-8901-5D369B16814F}) (Version: - Microsoft)
Update for Microsoft Office Script Editor Help (KB963671) (HKLM-x32\...\{90120000-006E-0409-0000-0000000FF1CE}_ENTERPRISE_{CD11C6A2-FFC6-4271-8EAB-79C3582F505C}) (Version: - Microsoft)
Update for Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0409-0000-0000000FF1CE}_ENTERPRISE_{80E762AA-C921-4839-9D7D-DB62A72C0726}) (Version: - Microsoft)
User Guide (HKLM-x32\...\{BAE68339-B0F6-4D33-9554-5A3DB2DFF5DA}) (Version: 1.3 - )
Valokuvavalikoima (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Veetle TV (HKLM-x32\...\Veetle TV) (Version: 0.9.19 - Veetle, Inc)
VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)
VLC media player 2.1.4 (HKLM\...\VLC media player) (Version: 2.1.4 - VideoLAN)
WD Drive Utilities (HKLM-x32\...\{7431ED5D-9247-4F17-91C9-702D9B36FAC4}) (Version: 1.0.7.3 - Western Digital Technologies, Inc.)
WD Quick View (HKLM-x32\...\{63911503-7EA4-4685-B2FD-D391EF622FB9}) (Version: 2.3.0.20 - Western Digital Technologies, Inc.)
WD Security (HKLM-x32\...\{90C3D9C7-2F83-4399-8E28-A00228CFFDF8}) (Version: 1.0.7.3 - Western Digital Technologies, Inc.)
WD SmartWare (HKLM\...\{34C6812E-E231-4B13-9DAC-21E06ECA864A}) (Version: 2.3.0.20 - Western Digital Technologies, Inc.)
WD SmartWare Installer (HKLM-x32\...\{1ec9e03a-452b-48fb-8e1b-27ee0477985f}) (Version: 2.3.0.20 - Western Digital Technologies, Inc.)
Windows Driver Package - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.)
Windows Driver Package - Garmin (grmnusb) GARMIN Devices (04/19/2012 2.3.1.0) (HKLM\...\98157A226B40B173301B0F53C8E98C47805D5152) (Version: 04/19/2012 2.3.1.0 - Garmin)
Windows Driver Package - OLYMPUS IMAGING CORP. Camera Communication Driver Package (09/09/2009 1.0.0.0) (HKLM\...\2C1C2F29FADF39F533CEEE67B90F07A5306A4BDB) (Version: 09/09/2009 1.0.0.0 - OLYMPUS IMAGING CORP.)
Windows Driver Package - Silicon Labs Software (DSI_SiUSBXp_3_1) USB (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software)
Windows Live (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3522.0110 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live Family Safety (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live Fotogalleri (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 16.4.3522.0110 - společnost Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft

Link to comment
Share on other sites

Hi Juliet

 

I realized that addition is to big to be together with others.. I am going to put Addition log here alone and the checkup in another.

 

 

Addition log:

 

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-06-2014 01
Ran by John at 2014-06-13 12:32:13
Running from C:\Users\John\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}

==================== Installed Programs ======================

Update for Microsoft Office 2007 (KB2508958) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version: - Microsoft)
„Windows Live Essentials“ (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
„Windows Live Mail“ (x32 Version: 16.4.3522.0110 - „Microsoft Corporation“) Hidden
„Windows Live Messenger“ (x32 Version: 16.4.3522.0110 - „Microsoft Corporation“) Hidden
Absolute Uninstaller 2.9.0.722 (HKLM-x32\...\Absolute Uninstaller_is1) (Version: - Glarysoft.com)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 14.0.0.110 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 14.0.0.110 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 14 ActiveX (HKLM-x32\...\{1F5E5F2E-5E61-431D-B796-58CCC6B68E28}) (Version: 14.0.0.125 - Adobe Systems Incorporated)
Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.125 - Adobe Systems Incorporated)
Adobe Media Player (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.1 - Adobe Systems Incorporated)
Adobe Media Player (x32 Version: 0.0.0 - Adobe Systems Incorporated) Hidden
Adobe Reader XI (11.0.07) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM-x32\...\{0099B484-C24C-4D5F-8167-B0F6DF196E72}) (Version: 12.0.3.133 - Adobe Systems, Inc)
Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.0.150 - Adobe Systems, Inc.)
AMD Accelerated Video Transcoding (Version: 13.30.100.40417 - Advanced Micro Devices, Inc.) Hidden
AMD APP SDK Runtime (Version: 2.5.793.1 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Control Center (x32 Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden
AMD Catalyst Install Manager (HKLM\...\{6119B3A6-3603-9695-0398-CDF2AF0A13F8}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Fuel (Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden
AMD Steady Video Plug-In (Version: 2.02.0000 - AMD) Hidden
AMD Steady Video Plug-In (Version: 2.07.0000 - AMD) Hidden
AMD Wireless Display v3.0 (Version: 1.0.0.15 - Advanced Micro Devices, Inc.) Hidden
ANT Drivers Installer x64 (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden
Apple Application Support (HKLM-x32\...\{D9DAD0FF-495A-472B-9F10-BAE430A26682}) (Version: 3.0.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 9.0 - Atheros)
Bluetooth Win7 Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.3.0.120 - Atheros Communications)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Canon MOV Decoder (HKLM-x32\...\Canon MOV Decoder) (Version: 1.4.0.15 - Canon Inc.)
Canon MovieEdit Task for ZoomBrowser EX (HKLM-x32\...\MovieEditTask) (Version: 3.3.0.15 - Canon Inc.)
Canon Utilities CameraWindow (HKLM-x32\...\CameraWindowLauncher) (Version: 7.3.0.4 - Canon Inc.)
Canon Utilities Digital Photo Professional 3.7 (HKLM-x32\...\DPP) (Version: 3.7.1.1 - Canon Inc.)
Canon Utilities EOS Utility (HKLM-x32\...\EOS Utility) (Version: 2.7.1.0 - Canon Inc.)
Canon Utilities MyCamera (HKLM-x32\...\MyCamera) (Version: 7.3.0.5 - Canon Inc.)
Canon Utilities PhotoStitch (HKLM-x32\...\PhotoStitch) (Version: 3.1.22.46 - Canon Inc.)
Canon Utilities Picture Style Editor (HKLM-x32\...\Picture Style Editor) (Version: 1.6.0.0 - Canon Inc.)
Canon Utilities WFT-E1/E2/E3/E4/E5 Utility (HKLM-x32\...\WFTK) (Version: 3.4.0.2 - Canon Inc.)
Canon Utilities ZoomBrowser EX (HKLM-x32\...\ZoomBrowser EX) (Version: 6.4.1.11 - Canon Inc.)
Canon ZoomBrowser EX Memory Card Utility (HKLM-x32\...\ZoomBrowser EX Memory Card Utility) (Version: 1.2.2.11 - Canon Inc.)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.14 - Piriform)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
CSVed 2.2.2a (HKLM-x32\...\CSVed_is1) (Version: 2.2.2a - Sam Francke)
CyberLink Media Suite (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 8.0.2227 - CyberLink Corp.)
CyberLink Media Suite 11 (HKLM-x32\...\InstallShield_{8F14AA37-5193-4A14-BD5B-BDF9B361AEF7}) (Version: 11.0 - CyberLink Corp.)
CyberLink Media+ Player10 (HKLM-x32\...\InstallShield_{34FBC7C4-CD31-4D93-A428-0E524EAC4586}) (Version: 10.0.1110.00 - CyberLink Corp.)
CyberLink Media+ Player10 (x32 Version: 10.0.1110.00 - CyberLink Corp.) Hidden
CyberLink MediaShow (HKLM-x32\...\InstallShield_{80E158EA-7181-40FE-A701-301CE6BE64AB}) (Version: 5.0.1130a - CyberLink Corp.)
CyberLink MediaShow (x32 Version: 5.0.1130a - CyberLink Corp.) Hidden
CyberLink Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.3802 - CyberLink Corp.)
CyberLink Power2Go (x32 Version: 6.1.3802 - CyberLink Corp.) Hidden
CyberLink PowerDirector (HKLM-x32\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 8.0.3306 - CyberLink Corp.)
CyberLink PowerDirector (x32 Version: 8.0.3306 - CyberLink Corp.) Hidden
CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.1.6607 - CyberLink Corp.)
CyberLink YouCam (x32 Version: 3.1.6607 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Easy File Share (HKLM-x32\...\{12F81925-F3C1-40DB-91F7-777817974319}) (Version: 1.3.1 - Samsung Electronics CO., LTD.)
Easy Migration (HKLM-x32\...\{AD86049C-3D9C-43E1-BE73-643F57D83D50}) (Version: 1.0 - Samsung Electronics Co., Ltd.)
Easy Settings (HKLM-x32\...\{17283B95-21A8-4996-97DA-547A48DB266F}) (Version: 1.1 - Samsung Electronics CO., LTD.)
Easy Support Center (HKLM\...\{0738F5F1-8E70-49A6-8692-F5722E1E5A4D}) (Version: 1.2.32 - Samsung Electronics CO., LTD.)
Elevated Installer (x32 Version: 3.2.7.0 - Garmin Ltd or its subsidiaries) Hidden
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
ETDWare PS/2-X64 10.0.7.3_WHQL (HKLM\...\Elantech) (Version: 10.0.7.3 - ELAN Microelectronic Corp.)
Fotoattēlu galerija (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Fotogaléria (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Fotogalerie (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Fotogalerija (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Foto-galerija (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Fotogalleri (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Fotogalleriet (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Fotoğraf Galerisi (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Fotótár (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 6.2.0.429 - Foxit Corporation)
Galeria de Fotografias (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Galeria de Fotos (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Galería de fotos (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Galeria fotografii (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Galerie de photos (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Galerie foto (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Galerija fotografija (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Garmin BaseCamp (HKLM-x32\...\{EBAC8FD4-28EC-46F7-BF9E-89D6E6673001}) (Version: 4.2.5 - Garmin Ltd or its subsidiaries)
Garmin City Navigator North America NT 2014.40 Update (HKLM-x32\...\{82B42DF2-2ECF-4C4B-B939-A275664028E2}) (Version: 17.40.0.0 - Garmin Ltd or its subsidiaries)
Garmin Communicator Plugin (HKLM-x32\...\{647BB978-2876-487B-9B0E-FDB73F0EA4A2}) (Version: 4.0.4 - Garmin Ltd or its subsidiaries)
Garmin Communicator Plugin x64 (HKLM\...\{237D687E-9E50-4A30-B810-262764CC491B}) (Version: 4.0.4 - Garmin Ltd or its subsidiaries)
Garmin Express (HKLM-x32\...\{55ae01f2-f0a8-4342-a9cc-a0327cdaa811}) (Version: 3.2.7.0 - Garmin Ltd or its subsidiaries)
Garmin Express (x32 Version: 3.2.7.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin Express Tray (x32 Version: 3.2.7.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin MapSource (HKLM-x32\...\{AFBAB9A0-DDE8-49AE-8C17-A01B61BEE64B}) (Version: 6.16.3 - Garmin Ltd or its subsidiaries)
Garmin POI Loader (HKLM-x32\...\{3213ED5E-7BBE-4613-BE69-8B1E4FE520DD}) (Version: 2.7.3 - Garmin Ltd or its subsidiaries)
Garmin Training Center (HKLM-x32\...\{7D542452-84EB-47C0-97BA-735C523AB555}) (Version: 3.6.5 - Garmin Ltd or its subsidiaries)
Garmin USB Drivers (HKLM-x32\...\{3D5D6CFC-3097-425A-8D8F-7EAF5D57641D}) (Version: 2.3.1.0 - Garmin Ltd or its subsidiaries)
Glary Utilities 5.1 (HKLM-x32\...\Glary Utilities 5) (Version: 5.1.0.4 - Glarysoft Ltd)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 35.0.1916.153 - Google Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Talk Plugin (HKLM-x32\...\{43AC7CBC-1D6A-3B5B-81B1-A0C166FE48F4}) (Version: 4.8.2.15856 - Google)
HiJackThis (HKLM-x32\...\{45A66726-69BC-466B-A7A4-12FCBA4883D7}) (Version: 1.0.0 - Trend Micro)
HydraVision (x32 Version: 4.2.252.0 - Advanced Micro Devices, Inc.) Hidden
iTunes (HKLM\...\{5A68A656-979F-4168-8795-E2E368AA4DC2}) (Version: 11.2.2.3 - Apple Inc.)
Java 7 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.600 - Oracle)
Java Auto Updater (x32 Version: 2.1.60.19 - Oracle, Inc.) Hidden
JavaFX 2.1.1 (HKLM-x32\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)
Junk Mail filter update (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
K-Lite Codec Pack 10.4.4 Full (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.4.4 - )
Launch Manager (HKLM-x32\...\LManager) (Version: 2.0.01 - Gateway)
Malwarebytes Anti-Malware version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Access MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Access Setup Metadata MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Groove MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove Setup Metadata MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0401-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0402-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0404-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0405-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0406-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0407-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0408-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0409-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-040B-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-040C-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-040D-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-040E-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0410-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0412-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0413-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0414-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0415-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0416-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0418-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0419-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-041A-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-041B-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-041D-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-041E-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-041F-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0424-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0426-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0427-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0804-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0816-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-081A-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0C0A-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Spanish) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (English) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden
Microsoft Office Publisher MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared Setup Metadata MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKCU\...\OneDriveSetup.exe) (Version: 17.0.4029.0217 - Microsoft Corporation)
Microsoft Security Client (Version: 4.5.0216.0 - Microsoft Corporation) Hidden
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.5.216.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Movie Maker (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Mozilla Firefox 30.0 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 30.0 (x86 en-US)) (Version: 30.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MPC-HC 1.7.4 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.4 - MPC-HC Team)
MPC-HC 1.7.5 (HKLM-x32\...\{2624B969-7135-4EB1-B0F6-2D8C397B45F7}_is1) (Version: 1.7.5 - MPC-HC Team)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
OLYMPUS Digital Camera Updater (HKLM-x32\...\{2A9E8F56-C31B-4DBB-BFE2-0F4EC8192355}) (Version: 1.0.3 - OLYMPUS IMAGING CORP.)
OLYMPUS Viewer 2 (HKLM-x32\...\{AEE39224-92BE-4389-9493-E57FF73BB96A}) (Version: 1.3.1 - OLYMPUS IMAGING CORP.)
Pdf995 (HKLM-x32\...\Pdf995) (Version: - )
Photo Common (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Photo Gallery (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Poczta usługi Windows Live (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Pošta Windows Live (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
Raccolta foto (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.54.309.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7183 - Realtek Semiconductor Corp.)
S Agent (Version: 1.1.45 - Samsung Electronics CO., LTD.) Hidden
Samsung Recovery Solution 5 (HKLM-x32\...\{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}) (Version: 5.6.0.2 - Samsung Electronics CO., LTD.)
Samsung Universal Scan Driver (HKLM-x32\...\Samsung Universal Scan Driver) (Version: 1.2.6.0 - Samsung Electronics Co., Ltd.)
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.3.1400.0 - SAMSUNG Electronics Co., Ltd.)
Secunia PSI (3.0.0.9016) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.9016 - Secunia)
Skype Click to Call (HKLM-x32\...\{BB285C9F-C821-4770-8970-56C4AB52C87E}) (Version: 7.2.15747.10003 - Microsoft Corporation)
Skype™ 6.16 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.)
SlimDrivers (HKLM-x32\...\{A5457401-D56A-43F2-9524-78E54A7FC07A}) (Version: 2.2.32705 - SlimWare Utilities, Inc.)
Software Launcher (HKLM-x32\...\{B750B5C2-CC17-4967-905B-29F4EB986131}) (Version: 1.0.2 - Samsung)
SW Update (HKLM-x32\...\{DA06101F-FD76-4BF0-88BD-B26A197005E3}) (Version: 2.1.21 - Samsung Electronics CO., LTD.)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TurboTax 2013 (HKLM-x32\...\{1E0FF98D-4AE4-46CC-B624-E771ABD5EA11}) (Version: 1.00.0000 - Intuit Canada)
Tweaking.com - Windows Repair (All in One) (HKLM-x32\...\Tweaking.com - Windows Repair (All in One)) (Version: 2.7.5 - Tweaking.com)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update for Microsoft Office 2007 Help for Common Features (KB963673) (HKLM-x32\...\{90120000-006E-0409-0000-0000000FF1CE}_ENTERPRISE_{AB365889-0395-4FAD-B702-CA5985D53D42}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft)
Update for Microsoft Office Access 2007 Help (KB963663) (HKLM-x32\...\{90120000-0015-0409-0000-0000000FF1CE}_ENTERPRISE_{6B76A18A-AA1E-42AB-A7AD-6C84BBB43987}) (Version: - Microsoft)
Update for Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0409-0000-0000000FF1CE}_ENTERPRISE_{199DF7B6-169C-448C-B511-1054101BE9C9}) (Version: - Microsoft)
Update for Microsoft Office Infopath 2007 Help (KB963662) (HKLM-x32\...\{90120000-0044-0409-0000-0000000FF1CE}_ENTERPRISE_{716B81B8-B13C-41DF-8EAC-7A2F656CAB63}) (Version: - Microsoft)
Update for Microsoft Office OneNote 2007 Help (KB963670) (HKLM-x32\...\{90120000-00A1-0409-0000-0000000FF1CE}_ENTERPRISE_{2744EF05-38E1-4D5D-B333-E021EDAEA245}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0409-0000-0000000FF1CE}_ENTERPRISE_{ED38F8A3-4F61-494E-8BCA-E3AC7760C924}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{53DEC068-4690-4F6B-9946-7D21EF02236B}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0409-0000-0000000FF1CE}_ENTERPRISE_{0451F231-E3E3-4943-AB9F-58EB96171784}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2881065) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{B7EF38F7-1D58-4085-A9A4-0F6C69A5AA1E}) (Version: - Microsoft)
Update for Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0409-0000-0000000FF1CE}_ENTERPRISE_{397B1D4F-ED7B-4ACA-A637-43B670843876}) (Version: - Microsoft)
Update for Microsoft Office Publisher 2007 Help (KB963667) (HKLM-x32\...\{90120000-0019-0409-0000-0000000FF1CE}_ENTERPRISE_{2E40DE55-B289-4C8B-8901-5D369B16814F}) (Version: - Microsoft)
Update for Microsoft Office Script Editor Help (KB963671) (HKLM-x32\...\{90120000-006E-0409-0000-0000000FF1CE}_ENTERPRISE_{CD11C6A2-FFC6-4271-8EAB-79C3582F505C}) (Version: - Microsoft)
Update for Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0409-0000-0000000FF1CE}_ENTERPRISE_{80E762AA-C921-4839-9D7D-DB62A72C0726}) (Version: - Microsoft)
User Guide (HKLM-x32\...\{BAE68339-B0F6-4D33-9554-5A3DB2DFF5DA}) (Version: 1.3 - )
Valokuvavalikoima (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Veetle TV (HKLM-x32\...\Veetle TV) (Version: 0.9.19 - Veetle, Inc)
VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)
VLC media player 2.1.4 (HKLM\...\VLC media player) (Version: 2.1.4 - VideoLAN)
WD Drive Utilities (HKLM-x32\...\{7431ED5D-9247-4F17-91C9-702D9B36FAC4}) (Version: 1.0.7.3 - Western Digital Technologies, Inc.)
WD Quick View (HKLM-x32\...\{63911503-7EA4-4685-B2FD-D391EF622FB9}) (Version: 2.3.0.20 - Western Digital Technologies, Inc.)
WD Security (HKLM-x32\...\{90C3D9C7-2F83-4399-8E28-A00228CFFDF8}) (Version: 1.0.7.3 - Western Digital Technologies, Inc.)
WD SmartWare (HKLM\...\{34C6812E-E231-4B13-9DAC-21E06ECA864A}) (Version: 2.3.0.20 - Western Digital Technologies, Inc.)
WD SmartWare Installer (HKLM-x32\...\{1ec9e03a-452b-48fb-8e1b-27ee0477985f}) (Version: 2.3.0.20 - Western Digital Technologies, Inc.)
Windows Driver Package - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.)
Windows Driver Package - Garmin (grmnusb) GARMIN Devices (04/19/2012 2.3.1.0) (HKLM\...\98157A226B40B173301B0F53C8E98C47805D5152) (Version: 04/19/2012 2.3.1.0 - Garmin)
Windows Driver Package - OLYMPUS IMAGING CORP. Camera Communication Driver Package (09/09/2009 1.0.0.0) (HKLM\...\2C1C2F29FADF39F533CEEE67B90F07A5306A4BDB) (Version: 09/09/2009 1.0.0.0 - OLYMPUS IMAGING CORP.)
Windows Driver Package - Silicon Labs Software (DSI_SiUSBXp_3_1) USB (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software)
Windows Live (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3522.0110 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live Family Safety (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live Fotogalleri (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 16.4.3522.0110 - společnost Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 16.4.3522.0110 - společnost Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 16.4.3522.0110 - Корпорация Майкрософт) Hidden
Windows Live MIME IFilter (Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live Pošta (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live Temel Parçalar (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live 메일 (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live 필수 패키지 (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live 程式集 (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Live 软件包 (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Liven peruspaketti (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Liven sähköposti (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
WinPatrol (HKLM\...\{84481A87-2316-4923-8FAB-3BA8CA29323D}) (Version: 30.9.2014.0 - BillP Studios)
WinRAR 5.01 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
Συλλογή φωτογραφιών (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Почта Windows Live (x32 Version: 16.4.3522.0110 - Корпорация Майкрософт) Hidden
Фотоальбом (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Фотогалерия (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
Фотографии (общедоступная версия) (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
גלריית התמונות (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
بريد Windows Live (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
معرض الصور (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
사진 갤러리 (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
影像中心 (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden
照片库 (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden

==================== Restore Points =========================

11-06-2014 04:48:45 Windows Update
11-06-2014 20:27:52 Removed Skype™ 6.16
11-06-2014 20:29:12 Removed Skype Web Plugin
11-06-2014 20:30:09 Removed Skype Click to Call
11-06-2014 21:41:01 Windows Update
12-06-2014 02:08:53 Windows Update
12-06-2014 15:31:11 Garmin Express
12-06-2014 15:34:03 Garmin Express

==================== Hosts content: ==========================

2009-07-13 22:34 - 2013-04-24 15:53 - 00000027 ____A C:\windows\system32\Drivers\etc\hosts
127.0.0.1 localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {072F3E3A-CE36-432B-8E2D-0F53FC39B471} - System32\Tasks\EasySupportCenter => C:\Program Files\Samsung\Easy Support Center\SamoyedAgent.exe [2013-01-22] (Samsung Electronics CO., LTD.)
Task: {094D334B-D96E-4E5A-9953-89B3AB6E6634} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {0F6B0F45-02B9-4369-9E42-02C02930EBAB} - System32\Tasks\{2DDD8DB6-B5EB-47E9-AB08-C638D4506E7F} => F:\SecureII\Windows\SecureII.exe
Task: {0FEF4D83-316C-410A-8A7E-15DB6E5D416B} - System32\Tasks\{293E998D-374A-4BA9-AADC-A955229EA3F8} => F:\SecureII\Windows\SecureII.exe
Task: {164C30F7-1F8C-4E15-8960-648DF5F1BD8C} - System32\Tasks\advSRS5 => C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe [2012-10-30] (SEC)
Task: {1BEE5D7E-F95A-484F-8207-9A489D488BC3} - System32\Tasks\{96692BE2-8D16-4AED-A88E-6EE2F657C3A6} => F:\SecureII\Windows\SecureII.exe
Task: {26AA7CA9-442B-4A72-9973-495E92EBFACC} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-839072158-3120938179-813264055-1000Core => C:\Users\John\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-20] (Google Inc.)
Task: {368B7095-9EB1-4BA7-A095-76A90AA12EE9} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-839072158-3120938179-813264055-1000 => C:\Users\John\RealDownloader\recordingmanager.exe
Task: {371C1C2A-5D39-4475-A532-8FCF1F846731} - System32\Tasks\EasyPartitionManager => C:\Windows\MSetup\BA46-12225A02\EPM.exe
Task: {3C83CEDC-D405-4278-A8FF-628DF8D0265F} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [2013-06-07] (CyberLink)
Task: {3E718F0E-EA6F-49F7-89D3-878203EF8CFD} - System32\Tasks\{87F0F20D-8C34-4943-8757-454B635706FF} => Firefox.exe
Task: {3F3205C1-3F2C-440A-9324-CD2DD13F1FD2} - \ProtectedSearch\Protected Search No Task File <==== ATTENTION
Task: {4ED05F26-DB2C-49C1-B437-0B339F3135A7} - System32\Tasks\{B4601D62-355A-450F-9F82-B10CF9BB4C31} => F:\SecureII\Windows\SecureII.exe
Task: {525588FD-A11D-4154-88D6-76CC98A61783} - System32\Tasks\{387AED43-AA15-4055-80B9-3FC4893B7471} => C:\Users\John\Desktop\SecureII.exe
Task: {52DE81CB-E9B6-4834-A0E7-3ABCCB8CDF64} - System32\Tasks\EasyDisplayMgr => C:\Program Files (x86)\Samsung\Easy Settings\dmhkcore.exe [2012-05-30] (Samsung Electronics Co., Ltd.)
Task: {53B1284B-EE69-48A6-9108-27BB9A53B493} - System32\Tasks\{B12D4C09-1673-48CB-B165-AAC9B1246710} => F:\SecureII\Windows\SecureII.exe
Task: {5A009AE0-A9B8-4E67-BF46-A2F05B8EE484} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {678CDEB7-B14B-46B6-A2FF-D30A932C17A1} - System32\Tasks\WLANStartup => C:\Program Files (x86)\Samsung\Easy Settings\WLANStartup.exe [2012-04-03] (Samsung Electronics)
Task: {724ED6F0-687C-4300-B778-EA9C280C0062} - System32\Tasks\{A5ACE93C-3DB9-4B2E-80A5-1EF7B1A24A30} => Firefox.exe http://ui.skype.com/ui/0/6.1.0.129.272/en/abandoninstall?source=lightinstaller&page=tsMain
Task: {7736A7FE-C03E-4BE0-A544-A87BB50427EF} - System32\Tasks\EasySpeedUpManager => C:\Program Files (x86)\Samsung\Easy Settings\EasySpeedUpManager.exe [2011-09-28] (Samsung Electronics)
Task: {7A300E36-4BE6-4219-8FF3-AFB1BDC038DD} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-839072158-3120938179-813264055-1000UA => C:\Users\John\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-20] (Google Inc.)
Task: {885D56FD-ABB7-40D6-A4EE-DBB47B67838B} - System32\Tasks\{2DA6309B-DA3D-4B67-92CC-9136D5C5CFCB} => F:\SecureII\Windows\SecureII.exe
Task: {89541022-2EA2-430E-BB61-8E9119013713} - System32\Tasks\{FBE866B0-3BA9-4926-ABFC-7AB65076D59F} => Firefox.exe http://ui.skype.com/ui/0/6.16.0.105/en/abandoninstall?source=lightinstaller&page=tsInstall
Task: {92A57884-BCB8-4E50-A2B9-F6021AAFDB42} - System32\Tasks\{8180B7DB-67A9-4492-A80C-7B1CAA6FF1F9} => Firefox.exe
Task: {9817F1B5-09F9-4581-8DB8-242F36E1A6BC} - System32\Tasks\{A585B692-133A-4A27-82D0-7D2284063CDB} => C:\Users\John\Desktop\SecureII.exe
Task: {9C65CD11-F3D4-4A74-BA0D-FC3769375076} - \SystemSockets\SystemSockets No Task File <==== ATTENTION
Task: {A17FA2A5-6BE0-49BF-A690-4C4E55467614} - System32\Tasks\{8CB26D52-3176-4CD3-A161-83615ED1683B} => C:\Program Files (x86)\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe
Task: {ABDAA038-B3B0-402A-985F-437403D9164B} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-05-20] (Piriform Ltd)
Task: {B97AC3BB-6DDD-4698-B41A-89FDD23698C0} - System32\Tasks\{15E4DBDF-C69C-42F7-A924-DC91AF9DD1FD} => F:\SecureII\Windows\SecureII.exe
Task: {BCDD8F36-1441-4F04-8AC2-4B2F2DDDB6A1} - System32\Tasks\{203CA771-98EC-4C28-8D74-8E3F5DE45900} => F:\SecureII\Windows\SecureII.exe
Task: {C1D65423-A8FB-4344-B7E3-CBF4A05D3194} - System32\Tasks\{76FAF8C7-0D04-4E4C-BBF4-B935E924D60A} => F:\SecureII\SecureII\Windows\SecureII.exe
Task: {C6084E60-403C-4E69-B3BF-513DCA0F0FC1} - System32\Tasks\EasyBatteryManager => C:\Program Files (x86)\Samsung\Easy Settings\EBM\EasyBatteryMgr4.exe [2011-11-18] (SAMSUNG Electronics co., LTD.)
Task: {C7171C48-1611-4CF6-9C53-8A5456F1507F} - System32\Tasks\SAgent => C:\Program Files\Samsung\S Agent\CommonAgent.exe [2013-10-16] (Samsung Electronics CO., LTD.)
Task: {C904099A-64F2-4DE7-954E-EDFE9EC71622} - System32\Tasks\{9DCBB893-A87F-4C04-A899-5677109E044B} => Firefox.exe
Task: {C9890195-1CEE-42B1-B93C-B65DB1EFB37B} - System32\Tasks\SCCSpeedBoot => C:\Program Files (x86)\Samsung\Easy Settings\SCCSpeedBoot.exe [2012-03-27] (Samsung Electronics Co., Ltd.)
Task: {CCB6E1F3-95CC-442A-BF60-B2826F2F4196} - \Browser Updater\Browser Updater No Task File <==== ATTENTION
Task: {CF41AFC2-5E6F-4C49-98B8-011A28C915FA} - System32\Tasks\{103F8BB8-773A-4528-8AD9-EA196D1C61F1} => C:\Users\John\Desktop\Windows\SecureII.exe [2007-01-05] (Lexar Media, Inc.)
Task: {D0B318BF-45C3-47E6-B584-0CCF9A5C2B4C} - System32\Tasks\{CB12BCD4-7B5E-44DB-9C71-48FFF5D76CAC} => F:\SecureII\Windows\SecureII.exe
Task: {D90676F2-8DF4-488B-A49F-19AD0D8E97A5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-06-28] (Google Inc.)
Task: {D9E2E61D-ADB6-4694-AB32-96C59F84E1C9} - System32\Tasks\MovieColorEnhancer => C:\Program Files (x86)\Samsung\Easy Settings\MovieColorEnhancer.exe [2012-04-25] (Samsung Electronics Co., Ltd.)
Task: {DDD792AC-BF4C-4251-A295-AFBD0B8D500F} - System32\Tasks\{5870D18C-A202-4577-9352-FDA847C2976B} => F:\SecureII\Windows\SecureII.exe
Task: {E1296FF3-F348-49F0-B393-CE6C23494587} - System32\Tasks\{CD2E07DE-FA12-4BF2-B375-79B0046D61A1} => C:\Users\John\Desktop\SecureII\SecureII.exe
Task: {E1B64A06-1495-453D-926A-C34AA0C50EB0} - System32\Tasks\SlimDrivers Startup => C:\Program Files (x86)\SlimDrivers\SlimDrivers.exe [2013-09-24] (SlimWare Utilities, Inc.)
Task: {E36F65B1-807F-4EF2-8EC0-A219D5B2F7F8} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express Self Updater\ExpressSelfUpdater.exe [2014-06-09] ()
Task: {E6AC6579-4614-4AB0-AC85-94DDFCCC02F3} - System32\Tasks\{17B0ADEC-7339-475E-B1A4-0E95202F4489} => F:\SecureII\Windows\SecureII.exe
Task: {E6E3095F-8370-462F-BEB8-0DE42907D972} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-06-11] (Adobe Systems Incorporated)
Task: {E8516029-EA31-4221-A8C9-0ADEAAB86881} - System32\Tasks\GU5SkipUAC => C:\Program Files (x86)\Glary Utilities 5\Integrator.exe [2014-06-02] (Glarysoft Ltd)
Task: {E925A52E-303D-43F5-BB40-654ADA115BF9} - System32\Tasks\GlaryInitialize 5 => C:\Program Files (x86)\Glary Utilities 5\Initialize.exe [2014-06-02] (Glarysoft Ltd)
Task: {EA93FBD8-6CA2-4416-BA1E-505361BAF94C} - System32\Tasks\SmartSetting => C:\Program Files (x86)\Samsung\Easy Settings\SmartSetting.exe [2012-05-02] (Samsung Electronics Co., Ltd.)
Task: {EC5B8945-9AFC-4C79-BDAC-EA64D507EC41} - System32\Tasks\{4E8D3AAA-A130-45D6-909A-2F573231E9E3} => F:\SecureII\Windows\SecureII.exe
Task: {F4026B40-E238-49AA-AD27-E5D110891C15} - System32\Tasks\{0846B95F-7412-4F47-ABEB-38DA3184288E} => C:\Users\John\Desktop\SecureII\SecureII.exe
Task: {F7A86771-2A48-435A-8A17-F6A32E5C4679} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-06-28] (Google Inc.)
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\GlaryInitialize 5.job => C:\Program Files (x86)\Glary Utilities 5\Initialize.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-839072158-3120938179-813264055-1000Core.job => C:\Users\John\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-839072158-3120938179-813264055-1000UA.job => C:\Users\John\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\SlimDrivers Startup.job => C:\Program Files (x86)\SlimDrivers\SlimDrivers.exe

==================== Loaded Modules (whitelisted) =============

2012-05-06 16:51 - 2012-04-26 15:51 - 00040448 _____ () C:\windows\System32\pdf995mon64.dll
2014-04-17 22:29 - 2014-04-17 22:29 - 00214528 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.PerformanceTuning.dll
2014-02-11 07:08 - 2014-02-11 07:08 - 00817152 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll
2014-02-11 07:08 - 2014-02-11 07:08 - 03650560 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Platform.dll
2014-04-17 22:29 - 2014-04-17 22:29 - 00127488 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll
2011-12-21 23:19 - 2009-12-01 03:21 - 00244904 _____ () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
2012-07-10 00:39 - 2012-02-13 15:02 - 00031624 _____ () C:\Program Files (x86)\Samsung\Easy Settings\SamsungDeviceConfiguration.exe
2011-01-27 15:28 - 2011-01-27 15:28 - 00706048 _____ () C:\windows\system32\SnMinDrv.dll
2014-04-17 22:29 - 2014-04-17 22:29 - 00102400 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2014-01-20 14:17 - 2014-01-20 14:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-01-20 14:16 - 2014-01-20 14:16 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2012-07-05 00:28 - 2006-08-12 12:48 - 00049152 _____ () C:\Program Files (x86)\Samsung\Easy Settings\HookDllPS2.dll
2014-03-25 22:58 - 2014-03-25 22:58 - 00000000 _____ () C:\windows\system32\atipdlxx.dll
2011-12-21 22:09 - 2011-02-17 01:03 - 00203776 _____ () C:\Program Files (x86)\Samsung\Easy Settings\WinCRT.dll
2014-04-11 18:42 - 2014-04-22 14:39 - 00645592 _____ () C:\Program Files (x86)\BillP Studios\WinPatrol\sqlite3.dll
2014-06-02 21:26 - 2014-06-02 21:26 - 00080160 _____ () C:\Program Files (x86)\Glary Utilities 5\zlib1.dll
2014-03-25 22:58 - 2014-03-25 22:58 - 00000000 _____ () C:\windows\system32\olepro32.dll
2012-11-08 22:37 - 2011-09-08 20:40 - 01645056 _____ () C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\Resdll.dll
2014-03-30 00:51 - 2014-03-30 00:51 - 00000000 _____ () C:\windows\system32\aticfx32.dll
2014-03-30 00:51 - 2014-03-30 00:51 - 00000000 _____ () C:\windows\system32\atiu9pag.dll
2014-03-30 00:51 - 2014-03-30 00:51 - 00000000 _____ () C:\windows\system32\atiumdag.dll
2014-03-30 00:51 - 2014-03-30 00:51 - 00000000 _____ () C:\windows\system32\atiumdva.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== EXE Association (whitelisted) =============


==================== MSCONFIG/TASK MANAGER disabled items =========

MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: BingDesktop => C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe /fromkey
MSCONFIG\startupreg: GarminExpressTrayApp => "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe"
MSCONFIG\startupreg: Google Update => "C:\Users\John\AppData\Local\Google\Update\GoogleUpdate.exe" /c
MSCONFIG\startupreg: GUDelayStartup => "C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe" -delayrun
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: SkyDrive => "C:\Users\John\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background
MSCONFIG\startupreg: WD Quick View => C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe
MSCONFIG\startupreg: YouCam Tray => "C:\Program Files (x86)\CyberLink\YouCam\YouCam.exe" /s

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (06/13/2014 00:15:57 PM) (Source: MsiInstaller) (EventID: 11714) (User: John-PC)
Description: Product: Google Talk Plugin -- Error 1714. The older version of Google Talk Plugin cannot be removed. Contact your technical support group. System Error 1612.

Error: (06/13/2014 00:12:53 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2854

Error: (06/13/2014 00:12:53 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 2854

Error: (06/13/2014 00:12:53 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (06/12/2014 10:57:38 PM) (Source: MsiInstaller) (EventID: 11714) (User: John-PC)
Description: Product: Google Talk Plugin -- Error 1714. The older version of Google Talk Plugin cannot be removed. Contact your technical support group. System Error 1612.

Error: (06/12/2014 06:48:01 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 9127

Error: (06/12/2014 06:48:01 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 9127

Error: (06/12/2014 06:48:01 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (06/12/2014 06:48:00 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 8113

Error: (06/12/2014 06:48:00 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 8113


System errors:
=============
Error: (06/12/2014 11:52:55 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
70844403
xbrmb

Error: (06/12/2014 11:52:51 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Secure II Driver service failed to start due to the following error:
%%1275

Error: (06/12/2014 11:52:51 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\windows\SysWow64\Drivers\LxrSII1d.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.

Error: (06/12/2014 11:50:47 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}

Error: (06/12/2014 11:32:23 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Garmin Core Update Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.

Error: (06/12/2014 08:21:11 AM) (Source: BTHUSB) (EventID: 17) (User: )
Description: The local Bluetooth adapter has failed in an undetermined manner and will not be used. The driver has been unloaded.

Error: (06/11/2014 10:28:49 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: The Windows Search service hung on starting.

Error: (06/11/2014 10:21:47 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
70844403
xbrmb

Error: (06/11/2014 10:21:43 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Secure II Driver service failed to start due to the following error:
%%1275

Error: (06/11/2014 10:21:43 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\windows\SysWow64\Drivers\LxrSII1d.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.


Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
Date: 2013-04-24 15:43:35.468
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2013-04-24 15:43:35.358
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2012-11-08 10:28:41.366
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2012-11-08 10:28:41.335
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2012-09-18 10:11:44.956
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\usbaapl64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2012-09-18 10:11:44.925
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\usbaapl64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Memory info ===========================

Percentage of memory in use: 46%
Total physical RAM: 5611.8 MB
Available physical RAM: 2988.11 MB
Total Pagefile: 11221.78 MB
Available Pagefile: 8171.87 MB
Total Virtual: 8192 MB
Available Virtual: 8191.85 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:231 GB) (Free:80.3 GB) NTFS
Drive d: () (Fixed) (Total:345.47 GB) (Free:268.55 GB) NTFS
Drive f: (U3 System) (CDROM) (Total:0.01 GB) (Free:0 GB) CDFS
Drive g: () (Removable) (Total:3.8 GB) (Free:0.01 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 596 GB) (Disk ID: 674EF893)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=231 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=345 GB) - (Type=OF Extended)
Partition 4: (Not Active) - (Size=20 GB) - (Type=27)

========================================================
Disk: 1 (Size: 4 GB) (Disk ID: 00000000)

Partition: GPT Partition Type.

==================== End Of Log ============================

Link to comment
Share on other sites

Hi Juliet

 

I realized that some logs are longer and I did mar in green and when checked for the marks I could not see them. Thank you for your attention and help.

 

 

 

checkup log:

 

Results of screen317's Security Check version 0.99.84
Windows 7 Service Pack 1 x64 (UAC is enabled)
Internet Explorer 10 Out of date!
``````````````Antivirus/Firewall Check:``````````````
Windows Firewall Enabled!
Microsoft Security Essentials
Antivirus up to date!
`````````Anti-malware/Other Utilities Check:`````````
Secunia PSI (3.0.0.9016)
JavaFX 2.1.1
Java 7 Update 60
Adobe Flash Player 14.0.0.125
Adobe Reader XI
Mozilla Firefox (30.0)
Google Chrome 35.0.1916.114
Google Chrome 35.0.1916.153
````````Process Check: objlist.exe by Laurent````````
Microsoft Security Essentials MSMpEng.exe
Microsoft Security Essentials msseces.exe
WinPatrol winpatrol.exe
BillP Studios WinPatrol WinPatrol.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: 0%
````````````````````End of Log``````````````````````

Link to comment
Share on other sites

Thank you for taking the time to post the entire logs, I know at times it can be quite a head ache.

 

Logs over all look good now.

ComboFix has a couple executable files we'll remove when I give you an all clear, and I see you haven't downloaded and installed the latest version of IE, need to consider doing that since it is the most updated version.

 

We removed all visible malware that has now left behind a few task with no files.

Since we're cleaning out let's get it out of there since an antivirus scan in the future might locate those. And since your becoming an old pro at this too!

 

If you would, run this new script and then let me know how the computer is at the moment.

 

Open notepad. Please copy the contents of the quote box below. To do this highlight the contents of the box and right click on it and select copy.

Paste this into the open notepad. save it to the Desktop as fixlist.txt

NOTE. It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work.

It needs to be saved Next to the "Farbar Recovery Scan Tool" (FRST) program (If asked to overwrite existing one please allow)

 

start

Task: {3F3205C1-3F2C-440A-9324-CD2DD13F1FD2} - \ProtectedSearch\Protected Search No Task File <==== ATTENTION

Task: {9C65CD11-F3D4-4A74-BA0D-FC3769375076} - \SystemSockets\SystemSockets No Task File <==== ATTENTION

Task: {CCB6E1F3-95CC-442A-BF60-B2826F2F4196} - \Browser Updater\Browser Updater No Task File <==== ATTENTION

end

Run FRST/FRST64 and press the Fix button just once and wait.

If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.

When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.

Link to comment
Share on other sites

Hi Juliet

 

I am happy to know that may system is going better. You said for me to download the latest IE. I have IE 10. I did download IE 11 and installed it and asked to restart the system. I did restart and went to see and I still have IE 10 installed. I under if I uninstall IE and re-install IE 11.

 

I go to IE and click on the internet options and does not appear. What shows up is this in a small window:

 

CCC.exe - Ordinal Not Found

The original 592 could not be located in the dynamic link library iertutil.dll
.

 

and this:

 

RunDLL

There was a problem starting C:\windows\system32\inetcpl.cpl

The operating system cannot run %1.

 

Sometimes there are 4 or 5 small windows with the same say.

 

I did the scan you said:

 

 

Fixlog:

 

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-06-2014 01
Ran by John at 2014-06-14 20:55:57 Run:5
Running from C:\Users\John\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Quote

start
Task: {3F3205C1-3F2C-440A-9324-CD2DD13F1FD2} - \ProtectedSearch\Protected Search No Task File <==== ATTENTION
Task: {9C65CD11-F3D4-4A74-BA0D-FC3769375076} - \SystemSockets\SystemSockets No Task File <==== ATTENTION
Task: {CCB6E1F3-95CC-442A-BF60-B2826F2F4196} - \Browser Updater\Browser Updater No Task File <==== ATTENTION
end
*****************

'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{3F3205C1-3F2C-440A-9324-CD2DD13F1FD2}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3F3205C1-3F2C-440A-9324-CD2DD13F1FD2}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ProtectedSearch\Protected Search' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{9C65CD11-F3D4-4A74-BA0D-FC3769375076}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9C65CD11-F3D4-4A74-BA0D-FC3769375076}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SystemSockets\SystemSockets' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{CCB6E1F3-95CC-442A-BF60-B2826F2F4196}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CCB6E1F3-95CC-442A-BF60-B2826F2F4196}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Browser Updater\Browser Updater' => Key deleted successfully.

==== End of Fixlog ====

 

 

 

 

 

 

 

Link to comment
Share on other sites

Hi Juliet

 

I did download internet 11, try to install and said fail to install. I went to see if it is install and it is installed. This problem makes me nervous. IE does not let me open internet options. I go on tools and does not open. I don`t know if I can uninstall IE, I did not see where it can be uninstall.

Link to comment
Share on other sites

Hi Juliet

 

I did go to the link for internet explorer repair and uninstall. I downloaded IE 11 and when through and at the end nothing happened. I went to see if IE 11 was the one installed. When I press a window open and shows internet explorer 10, but when I try to install IE 10 could not proceed because it said that a newer version was already installed.

 

I did go to fix it..and did not repair. When I do the windows update.. shows that internet explorer is to be updated, but the download end installation fail. Said, some updates not installed.

Link to comment
Share on other sites

Sounds as though it may have partially downloaded or was corrupted, no idea why it does these things.

 

A good link to read try for troubleshooting.

http://support.microsoft.com/kb/2820688

 

******************

Also please download Windows Repair (all in one) from here

 

Install the program then go to step 4 and create a new system restore point and new registry backup.

 

step-4-tab.jpg

 

Go to Step 2 and allow it to run CheckDisk by clicking on Do It button:

 

p22001645.gif

 

 

 

Once that is done then go to Step 3 and allow it to run System File Check by clicking on Do It button:

 

p22001646.gif

 

 

Go to Step 4 and under "System Restore" click on Create button:

 

p22001644.gif

 

 

Go to Start Repairs tab and click Start button.

 

p22001166.gif

 

 

 

On the the Start Repairs tab => Click the Start

 

start-repairs-tab.jpg

 

Click on the Select All button and then click on Start

 

 

 

Please select and check these boxes.

Select the following items and tick restart system when finished

 

Reset Registry Permissions

Reset File Permissions

Register System Files

Repair WMI

Repair Windows Firewall

Repair Internet Explorer

Repair Hosts File

Remove Policies Set By Infections

Repair Missing Start menu Icons

Repair Icons

Repair Winsock & DNS Cache

Remove Temp Files

Repair Proxy Settings

Unhide Non System Files

Repair Windows Updates

Set windows Services To Default

Repair MSI (windows Installer)

Repair File Associations

 

DON'T use the computer while each scan is in progress.

 

Restart may be needed to finish the repair procedure.

Link to comment
Share on other sites

Hi Juliet

 

I appreciate all your efforts to help me. I have been looking at solutions for some of the errors for what I have in here.

 

I do the windows update and the there is IE10 to update. When I click to install the update it try and fail and this is the code: "WindowsUpdate_8024001F" "WindowsUpdate_dt000"

 

and this one:
Code 9C48

 

I read about it and I don`t know what to do.

 

When I go to view installed updates I can not see IE 10 on installed updates.

 

What is there is IE11.

 

Why the update comes to update one program that is not showing.

 

You are helping me and I am appreciative for what you have done and will do to solve my problems.

Link to comment
Share on other sites

I am so sorry your having all these problems.

Let's try to do troubleshooting.

 

Close all Internet Explorer windows then, open Windows Task Manager to end the running processes in background.

Press Windows 7 Start orb button and go to Control Panel.

Click Programs and choose the View installed updates instead.

Locate Windows Internet Explorer 11 or you can type "Internet Explorer" for a quick search.

Choose the Yes option from the following "Uninstall an update"

Please wait while Windows Internet Explorer 10 is being restored and reconfigured automatically.

Follow the Microsoft Windows wizard to restart your system.

 

It's possible your computer wasn't ready or didn't have the system spec's ready to install IE 11

 

http://windows.microsoft.com/en-us/windows7/what-is-the-system-update-readiness-tool

System Update Readiness Tool

 

 

We may need to do a system restore back before the update was downloaded and installed.

Link to comment
Share on other sites

Hi Juliet

 

I am glad you keep helping.

 

I did go to the control panel. I looked for IE11 and clicked on uninstalled. After sometime a message show on a small window saying: An error has occurred. Not all of the updates were successfully uninstalled.

 

After, I went and open IE10 and pressed on internet options and it opened right away.

 

You posted this: http://windows.micro...-readiness-tool what do I have to do with this. Do I run this?

 

I can see after the scan from Tweaking.com - Windows Repair (All in One) bit of the difference for the better.

 

I did a scan with ccleaner and this was what showed up. I think the invalid firewall rules has to do something with the problem. I don`t know but something is.

 

ActiveX/COM Issue InProcServer32\C:\windows\system32\wuaucpl.cpl HKCR\CLSID\{5F327514-6C5E-4d60-8F16-D07FA08A78ED}
Application Paths Issue C:\Users\John\Desktop\Wireless LAN Driver_9.2.0.439\setup.exe HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted
Invalid firewall rule NetPres-In-TCP-NoScope - %SystemRoot%\system32\netproj.exe HKLM\SYSTEM\ControlSet001\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules
Invalid firewall rule NetPres-Out-TCP-NoScope - %SystemRoot%\system32\netproj.exe HKLM\SYSTEM\ControlSet001\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules
Invalid firewall rule NetPres-WSD-In-UDP - %SystemRoot%\system32\netproj.exe HKLM\SYSTEM\ControlSet001\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules
Invalid firewall rule NetPres-WSD-Out-UDP - %SystemRoot%\system32\netproj.exe HKLM\SYSTEM\ControlSet001\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules
Invalid firewall rule NetPres-In-TCP - %SystemRoot%\system32\netproj.exe HKLM\SYSTEM\ControlSet001\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules
Invalid firewall rule NetPres-Out-TCP - %SystemRoot%\system32\netproj.exe HKLM\SYSTEM\ControlSet001\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules
Invalid firewall rule NetPres-In-TCP-NoScope - %SystemRoot%\system32\netproj.exe HKLM\SYSTEM\ControlSet002\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules
Invalid firewall rule NetPres-Out-TCP-NoScope - %SystemRoot%\system32\netproj.exe HKLM\SYSTEM\ControlSet002\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules
Invalid firewall rule NetPres-WSD-In-UDP - %SystemRoot%\system32\netproj.exe HKLM\SYSTEM\ControlSet002\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules
Invalid firewall rule NetPres-WSD-Out-UDP - %SystemRoot%\system32\netproj.exe HKLM\SYSTEM\ControlSet002\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules
Invalid firewall rule NetPres-In-TCP - %SystemRoot%\system32\netproj.exe HKLM\SYSTEM\ControlSet002\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules
Invalid firewall rule NetPres-Out-TCP - %SystemRoot%\system32\netproj.exe HKLM\SYSTEM\ControlSet002\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules

 

 

I think it is a good lesson for me how to navigate and look for solutions. I think you also have been hard at work and finding many ways to solve many problems.

Link to comment
Share on other sites

I am glad you keep helping. I think it is a good lesson for me how to navigate and look for solutions. I think you also have been hard at work and finding many ways to solve many problems.

Yes, I have been working to help you solve the problems, and I am also glad to help :)

 

You posted this: http://windows.micro...-readiness-tool what do I have to do with this. Do I run this?

Yes, I think in order for IE 11 to install properly you should run the tool to see what might be needed to ensure it goes correctly.

I had to do this. I had to go to Intel website to update needed drivers, I had to go to Dell web sites for updates, then proceed again to update to IE 11 and to download SP1 for Windows 7.

My computer is Windows 7 32 bit. Without all the needed updates I could not get the downloads. And they actually never showed in my windows update panel.

 

I did a scan with ccleaner and this was what showed up. I think the invalid firewall rules has to do something with the problem. I don`t know but something is.

Please don't use CCleaner to edit out anything in your registry. Registry cleaners can do more harm then good.

When it comes to the registry I'm always apprehensive (unless it's malware).

Edited by Juliet
typo
Link to comment
Share on other sites

Hi Juliet

 

Thank you for the info about ccleaner. I did not know that was a problem running registry cleaner.

 

I did download this: http://windows.micro...-readiness-tool and installed. Now I can not see a place from where I can run this. I went to see if it it was in programs and did not see it. After finished install I restarted the system.

 

 

I did click on the update windows : and this one: Code 9C48 showed again.

 

I am feeling frustrated, because so much info and no solutions.

Link to comment
Share on other sites

It should be on the machine we'll just have to find it.

Click on the blue Windows ORB

In the empty box that opens at the bottom, type in Readiness Tool

This should show you where it downloaded to.

 

Could it had gone into your Downloads?

 

Also, to ensure downloads go to desktop:

 

For the latest version of Firefox

Look at the top of the web page, clcik on the 3 bar icon tool.(Don't know what you really call it looks like 3 skinny lines)

At the top click on the General tab

scroll to the Downloads indicator, then check the box for "Save files to", here you can choose where to save. I use Desktop because it's the easiest to find things later.

 

 

For older versions of Firefox:

you press the orange Firefox button in the top left corner >> Options

Beneath where it shows homepage, click on save files to desktop

 

Chrome --

Press the Customize and Control Google button (three horizontal lines in top right corner of screen) >> Settings >> Show Advanced Settings >> Downloads, Download location, click on save to desktop

Edited by Juliet
typo
Link to comment
Share on other sites

 Share


×
×
  • Create New...