Jump to content

Change Mode

Can't get rid of browser virus

Bayman

By Bayman,
in Solved Malware Logs

 Share

Recommended Posts

Bayman Newbie

Bayman

Posted
  • Author
Posted

z downloaded the reimage pc repair too setup, when I ran it on my computer, I got the following error message:

-Error while downloading, please check your internet connection... apparently all files aren't in the file I downloaded. is there any way to get the complete file for me to load onto my computer....

Link to comment
Share on other sites
Bayman Newbie

Bayman

Posted
  • Author
Posted

Log:

Tweaking.com - Windows Repair v3.8.7

────────────────────────────────────────────────────────────────────────────────

 

System Variables

────────────────────────────────────────────────────────────────────────────────

OS: Windows 7 Professional

OS Architecture: 64-bit

OS Version: 6.1.7601

OS Service Pack: Service Pack 1

Computer Name: SAMSMITH-PC

Windows Drive: C:\

Windows Path: C:\Windows

Program Files: C:\Program Files

Program Files (x86): C:\Program Files (x86)

Current Profile: C:\Users\SamSmith

Current Profile SID: S-1-5-21-159066257-559054521-1285519716-1000

Current Profile Classes: S-1-5-21-159066257-559054521-1285519716-1000_Classes

Profiles Location: C:\Users

Profiles Location 2: C:\Windows\ServiceProfiles

Local Settings AppData: C:\Users\SamSmith\AppData\Local

────────────────────────────────────────────────────────────────────────────────

 

System Information

────────────────────────────────────────────────────────────────────────────────

System Up Time: 0 Days 00:13:26

 

Process Count: 71

Commit Total: 2.19 GB

Commit Limit: 31.40 GB

Commit Peak: 2.85 GB

Handle Count: 23461

Kernel Total: 451.51 MB

Kernel Paged: 349.48 MB

Kernel Non Paged: 102.03 MB

System Cache: 2.27 GB

Thread Count: 927

────────────────────────────────────────────────────────────────────────────────

 

Memory Before Cleaning with CleanMem

────────────────────────────────────────────────────────────────────────────────

Memory Total: 15.70 GB

Memory Used: 2.19 GB(13.9382%)

Memory Avail.: 13.51 GB

────────────────────────────────────────────────────────────────────────────────

 

Cleaning Memory Before Starting Repairs...

 

Memory After Cleaning with CleanMem

────────────────────────────────────────────────────────────────────────────────

Memory Total: 15.70 GB

Memory Used: 1.93 GB(12.2948%)

Memory Avail.: 13.77 GB

────────────────────────────────────────────────────────────────────────────────

 

Starting Repairs...

Started at (5/7/2016 2:28:18 PM)

 

Setting Any Missing 'InstallDate' From Uninstall Sections Before Running Repair...

Total Missing 'InstallDate' Fixed: 226

 

01 - Reset Registry Permissions

Restore Windows 7/8/10 Default Registry Permissions

Start (5/7/2016 2:28:20 PM)

 

 

Decompressing & Updating Windows Permission File C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\files\permissions\7\hku.7z

Done, 0.16 seconds.

 

 

Decompressing & Updating Windows Permission File C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\files\permissions\7\hklm.7z

Done, 1.25 seconds.

 

Running Repair Under System Account

Done (5/7/2016 2:33:11 PM)

 

Reset File Permissions: C:

C: & Sub Folders

Start (5/7/2016 2:33:11 PM)

 

Running Repair Under Current User Account

Done (5/7/2016 3:28:09 PM)

 

Reset File Permissions

Restore Windows 7/8/10 Default File Permissions

Start (5/7/2016 3:28:09 PM)

 

 

Decompressing & Updating Windows Permission File C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\files\permissions\7\default.7z

Done, 0.14 seconds.

 

 

Decompressing & Updating Windows Permission File C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\files\permissions\7\profile.7z

Done, 0.14 seconds.

 

 

Decompressing & Updating Windows Permission File C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\files\permissions\7\program_files.7z

Done, 0.67 seconds.

 

 

Decompressing & Updating Windows Permission File C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\files\permissions\7\program_files_x86.7z

Done, 0.14 seconds.

 

 

Decompressing & Updating Windows Permission File C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\files\permissions\7\programdata.7z

Done, 0.14 seconds.

 

 

Decompressing & Updating Windows Permission File C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\files\permissions\7\windows.7z

Done, 1.02 seconds.

 

Running Repair Under Current User Account

Done (5/7/2016 3:52:33 PM)

 

Reset File Permissions: Cleanup

Repairing Restricted Folders Permissions To Avoid Infinite Loops

Start (5/7/2016 3:52:33 PM)

 

Running Repair Under Current User Account

Running Repair Under System Account

Done (5/7/2016 3:52:42 PM)

 

03 - Reset Service Permissions

Start (5/7/2016 3:52:42 PM)

 

Running Repair Under Current User Account

Running Repair Under System Account

Done (5/7/2016 3:55:39 PM)

 

04 - Register System Files

Start (5/7/2016 3:55:39 PM)

Running Repair Under Current User Account

Running Repair Under System Account

Done (5/7/2016 3:57:52 PM)

 

05 - Repair WMI

Start (5/7/2016 3:57:52 PM)

 

Starting Security Center So We Can Export The Security Info.

 

Exporting Antivirus Info...

PC Matic Super Shield Exported.

 

Exporting AntiSpyware Info...

PC Matic Super Shield Exported.

Windows Defender Exported.

 

Exporting 3rd Party Firewall Info...

No Firewall Products Reported.

 

Running Repair Under Current User Account

Done (5/7/2016 4:03:24 PM)

 

06 - Repair Windows Firewall

Start (5/7/2016 4:03:24 PM)

 

Decompressing & Updating Windows Permission File C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\files\permissions\7\services.7z

Done, 0.16 seconds.

 

Running Repair Under Current User Account

Running Repair Under System Account

Done (5/7/2016 4:04:09 PM)

 

07 - Repair Internet Explorer

Start (5/7/2016 4:04:09 PM)

Running Repair Under Current User Account

Running Repair Under System Account

Done (5/7/2016 4:05:03 PM)

 

08 - Repair MDAC/MS Jet

Start (5/7/2016 4:05:03 PM)

Running Repair Under Current User Account

Running Repair Under System Account

Done (5/7/2016 4:05:28 PM)

 

09 - Repair Hosts File

Start (5/7/2016 4:05:28 PM)

Running Repair Under System Account

Done (5/7/2016 4:05:29 PM)

 

10 - Remove Policies Set By Infections

Start (5/7/2016 4:05:29 PM)

Running Repair Under Current User Account

Running Repair Under System Account

Done (5/7/2016 4:05:32 PM)

 

11 - Repair Start Menu Icons Removed By Infections

Start (5/7/2016 4:05:32 PM)

Running Repair Under System Account

Done (5/7/2016 4:05:33 PM)

 

12 - Repair Icons

Start (5/7/2016 4:05:33 PM)

Running Repair Under Current User Account

Done (5/7/2016 4:05:34 PM)

 

13 - Repair Network

Start (5/7/2016 4:05:35 PM)

 

Decompressing & Updating Windows Permission File C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\files\permissions\7\services.7z

Done, 0.14 seconds.

 

Running Repair Under Current User Account

Running Repair Under System Account

Done (5/7/2016 4:06:03 PM)

 

14 - Remove Temp Files

Start (5/7/2016 4:06:03 PM)

Running Repair Under System Account

Done (5/7/2016 4:06:04 PM)

 

15 - Repair Proxy Settings

Start (5/7/2016 4:06:04 PM)

Running Repair Under Current User Account

Running Repair Under System Account

Done (5/7/2016 4:06:07 PM)

 

17 - Repair Windows Updates

Start (5/7/2016 4:06:07 PM)

 

Decompressing & Updating Windows Permission File C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\files\permissions\7\services.7z

Done, 0.14 seconds.

 

Running Repair Under Current User Account

Running Repair Under System Account

Setting Windows Updates Files That Are In Use To Be Removed At Next Boot.

Done (5/7/2016 4:06:49 PM)

 

18 - Repair CD/DVD Missing/Not Working

Start (5/7/2016 4:06:49 PM)

iTunes or GEARAspiWDM.sys not found, not applying UpperFilters iTunes Reg Key

Done (5/7/2016 4:06:49 PM)

 

19 - Repair Volume Shadow Copy Service

Start (5/7/2016 4:06:49 PM)

 

Decompressing & Updating Windows Permission File C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\files\permissions\7\services.7z

Done, 0.14 seconds.

 

Running Repair Under Current User Account

Running Repair Under System Account

Done (5/7/2016 4:07:15 PM)

 

20 - Repair Windows Sidebar/Gadgets

Start (5/7/2016 4:07:15 PM)

Running Repair Under Current User Account

Running Repair Under System Account

Done (5/7/2016 4:07:20 PM)

 

21 - Repair MSI (Windows Installer)

Start (5/7/2016 4:07:20 PM)

 

Decompressing & Updating Windows Permission File C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\files\permissions\7\services.7z

Done, 0.14 seconds.

 

Running Repair Under Current User Account

Running Repair Under System Account

Done (5/7/2016 4:07:35 PM)

 

22 - Repair Windows Snipping Tool

Start (5/7/2016 4:07:35 PM)

Running Repair Under Current User Account

Running Repair Under System Account

Done (5/7/2016 4:07:37 PM)

 

23.01 - Repair bat Association

Start (5/7/2016 4:07:37 PM)

Running Repair Under Current User Account

Running Repair Under System Account

Done (5/7/2016 4:07:39 PM)

 

23.02 - Repair cmd Association

Start (5/7/2016 4:07:39 PM)

Running Repair Under Current User Account

Running Repair Under System Account

Done (5/7/2016 4:07:41 PM)

 

23.03 - Repair com Association

Start (5/7/2016 4:07:41 PM)

Running Repair Under Current User Account

Running Repair Under System Account

Done (5/7/2016 4:07:44 PM)

 

23.04 - Repair Directory Association

Start (5/7/2016 4:07:44 PM)

Running Repair Under Current User Account

Running Repair Under System Account

Done (5/7/2016 4:07:46 PM)

 

23.05 - Repair Drive Association

Start (5/7/2016 4:07:46 PM)

Running Repair Under Current User Account

Running Repair Under System Account

Done (5/7/2016 4:07:48 PM)

 

23.06 - Repair exe Association

Start (5/7/2016 4:07:48 PM)

Running Repair Under Current User Account

Running Repair Under System Account

Done (5/7/2016 4:07:50 PM)

 

23.07 - Repair Folder Association

Start (5/7/2016 4:07:50 PM)

Running Repair Under Current User Account

Running Repair Under System Account

Done (5/7/2016 4:07:52 PM)

 

23.08 - Repair inf Association

Start (5/7/2016 4:07:53 PM)

Running Repair Under Current User Account

Running Repair Under System Account

Done (5/7/2016 4:07:55 PM)

 

23.09 - Repair lnk (Shortcuts) Association

Start (5/7/2016 4:07:55 PM)

Running Repair Under Current User Account

Running Repair Under System Account

Done (5/7/2016 4:07:57 PM)

 

23.10 - Repair msc Association

Start (5/7/2016 4:07:57 PM)

Running Repair Under Current User Account

Running Repair Under System Account

Done (5/7/2016 4:07:59 PM)

 

23.11 - Repair reg Association

Start (5/7/2016 4:07:59 PM)

Running Repair Under Current User Account

Running Repair Under System Account

Done (5/7/2016 4:08:01 PM)

 

23.12 - Repair scr Association

Start (5/7/2016 4:08:01 PM)

Running Repair Under Current User Account

Running Repair Under System Account

Done (5/7/2016 4:08:04 PM)

 

24 - Repair Windows Safe Mode

Start (5/7/2016 4:08:04 PM)

Running Repair Under Current User Account

Running Repair Under System Account

Done (5/7/2016 4:08:06 PM)

 

25 - Repair Print Spooler

Start (5/7/2016 4:08:06 PM)

 

Decompressing & Updating Windows Permission File C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\files\permissions\7\services.7z

Done, 0.14 seconds.

 

Running Repair Under Current User Account

Running Repair Under System Account

Done (5/7/2016 4:08:22 PM)

 

26 - Restore Important Windows Services

Start (5/7/2016 4:08:22 PM)

 

Decompressing & Updating Windows Permission File C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\files\permissions\7\services.7z

Done, 0.19 seconds.

 

Running Repair Under Current User Account

Running Repair Under System Account

Done (5/7/2016 4:08:36 PM)

 

27 - Set Windows Services To Default Startup

Start (5/7/2016 4:08:36 PM)

Running Repair Under Current User Account

Running Repair Under System Account

Done (5/7/2016 4:08:54 PM)

 

Skipping Repair.

Repair is for Windows v6.2 (Windows 8 & Newer) or higher.

Current version: 6.1.7601

 

Skipping Repair.

Repair is for Windows v6.2 (Windows 8 & Newer) or higher.

Current version: 6.1.7601

 

Skipping Repair.

Repair is for Windows v6.2 (Windows 8 & Newer) or higher.

Current version: 6.1.7601

 

31 - Repair Windows 'New' Submenu

Start (5/7/2016 4:08:55 PM)

Running Repair Under Current User Account

Running Repair Under System Account

Done (5/7/2016 4:08:57 PM)

 

32 - Restore UAC (User Account Control) Settings

Start (5/7/2016 4:08:57 PM)

Running Repair Under Current User Account

Running Repair Under System Account

Done (5/7/2016 4:08:59 PM)

 

33 - Repair Performance Counters

Start (5/7/2016 4:08:59 PM)

Running Repair Under Current User Account

Done (5/7/2016 4:09:50 PM)

 

Cleaning up empty logs...

 

All Selected Repairs Done.

Done at (5/7/2016 4:09:50 PM)

Total Repair Time: 01:41:34

 

 

...YOU MUST RESTART YOU

Link to comment
Share on other sites
Juliet Rookie

Juliet

Posted
Posted (edited)

Since you haven't posted you can connect to the internet, can you try to temporarily disable PC Matic Super Shield, then try to connect a browser?

I'm going to list several things to try
*****
Power off your ISP modem/router and your wireless router(if any) for a couple of minutes.
Turn the computer off.
Then power on the ISP modem/router. Wait for all lights to stop blinking, then turn the computer back on.

Check to see if you have a connection now.

 

**********
Type the commands one at a time into an elevated command prompt, hit enter after each one then reboot the machine.

Type

netsh winsock reset all
netsh int ip reset resetlog.txt

What happens?

*************
Go to Control Panel/Internet Options/Connections/LAN Settings.
Make sure all of the boxes are unchecked.

Now go to Control Panel/Network Connections Right click the Local Area Connection and make sure it is Enabled.

Now choose Properties Scroll down to Internet Protocol IPv4 and IPv6/Properties. make sure Obtain an IP Address and DNS server address Automatically are both checked.
Now go back to the command prompt and type ipconfig /release and hit enter.
The ip address should now read 0.0.0.0 now type ipconfig /flushdns and hit enter.

now type ipconfig /renew hit enter
You may get the message that Local Area Connection is disabled.

Now search for wireless networks and choose your router, and connect.
*****************

Have you tried Safe Mode with Networking?

Edited by Juliet
Link to comment
Share on other sites
Bayman Newbie

Bayman

Posted
  • Author
Posted

After I ran the Fix in FRST64 I was unable to connect to the internet, how about if I undo manually what the Fix did.....

 

Are we to the point where it is better to install Windows 7 again, and start over......if so is there an easy way to get the list of programs installed on my computer without having to write them all down....

Link to comment
Share on other sites
Bayman Newbie

Bayman

Posted
  • Author
Posted

When I ran the malware, it came up with 79 threats, I had them quarantined and for some reason I lost the internet connection,.....I then took them out of quarantine and it restored my internet connection....

 

I am attaching the threats, as I had to use snagit to capture them....First 21 threats.pdf22 to 43 threats.pdf44 to 63 threats.pdf64 to 79 threats.pdf79 Threats Detected.txt

Link to comment
Share on other sites
Juliet Rookie

Juliet

Posted
Posted (edited)

Did you go back and try the suggestions I listed in post #32?

Removing quarantined files from the FRST folder might not work and possibly make things worse and I'd like to do that as a last resort.

~~~~~~~~~~~~~~~~~~~~~~~~`


Run RogueKiller again and click Scan

When the scan completes > click on the Registry tab
Put a check next to all of these

[PUP] (X64) HKEY_LOCAL_MACHINE\Software\DNSUnlocker -> Found
[PUP] (X64) HKEY_LOCAL_MACHINE\Software\EasyDriverPro -> Found
[PUP] (X64) HKEY_LOCAL_MACHINE\Software\ParetoLogic -> Found
[PUP] (X64) HKEY_LOCAL_MACHINE\Software\SmartDNS -> Found
[PUP] (X64) HKEY_LOCAL_MACHINE\Software\TUTORIALS -> Found
[PUP] (X64) HKEY_LOCAL_MACHINE\Software\Uniblue -> Found
[PUP] (X64) HKEY_LOCAL_MACHINE\Software\WebBar -> Found
[PUP] (X64) HKEY_LOCAL_MACHINE\Software\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9} -> Found
[PUM.StartMenu] (X64) HKEY_USERS\S-1-5-21-159066257-559054521-1285519716-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyGames : 0 -> Found
[PUM.StartMenu] (X86) HKEY_USERS\S-1-5-21-159066257-559054521-1285519716-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyGames : 0 -> Found
[PUP][Folder] C:\Program Files (x86)\1ED023C0-1452561467-11DD-BB03-C86000BE45E4 -> Found
[PUP][CHROME:Addon] Default : MetaProducts Offline Explorer integration [pkijdmeepjhpenmighhaodgfoogncnlk] -> Found
[PUM.Proxy] (X64) HKEY_USERS\S-1-5-21-159066257-559054521-1285519716-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings | AutoConfigUrl : http://unstops.net/wpad.dat?6adc6c51ec556157456f69b95746bd5d9059748-> Found

Now click Delete on the right hand column under Options and post the log it produces.

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~`

check Internet Options:

Please go to the Windows Control Panel and in the upper right change the View from Category to Small icons, then click on Internet Options>Connections>LAN Settings and verify that there is not a check mark in the box to use a proxy server. If there is a checkmark, remove it and click on Apply, OK, etc.

Also, while in the Control Panel click on Network and Sharing Center>Change adapter settings (upper left) then right-click on the Local Area connection and select Properties. Click on Internet Protocol
Version 4 to highlight it, then click on the Properties button. When the Properties sheet opens, make sure that both "Obtain IP address automatically" and "Obtain DNS Server address automatically" have the dot in front of them. If they do not, move the dot to those selections and click on Apply, OK, etc.
~~~~~~~~~~~~~~~~~~~~~~~~~`

 

 

 

****************************
Please download MiniToolBox http://www.bleepingcomputer.com/download/minitoolbox/
save it to your desktop and run it.

Checkmark the following check-boxes:

Flush DNS
Report IE Proxy Settings
Reset IE Proxy Settings
Report FF Proxy Settings
Reset FF Proxy Settings
List content of Hosts
List IP configuration
List Winsock Entries
List last 10 Event Viewer log
List Installed Programs
List Devices
List Users, Partitions and Memory size.
List Minidump Files

Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run.

Note: When using Reset FF Proxy Settings option Firefox should be closed.

Edited by Juliet
Link to comment
Share on other sites
Juliet Rookie

Juliet

Posted
Posted

HKrIue4.pngComplete Internet Repair

  • Please download Complete Internet Repair and save the file to your Desktop.
  • Double-click comintrep.zip to run the programme.
  • Click Extract.
  • Double-click the Complete Internet Repair folder on your Desktop.
  • Double-click CIntRep.exe / CIntRep_x64.exe.
  • Place a checkmark next to the following items:
    • Reset Internet Protocol (TCP/IP)
    • Repair Winsock (Reset Catalog)
    • Renew Internet Connections
    • Flush DNS Resolver Cache
    • Repair SSL / HTTPS / Cryptography
    • Reset Windows Firewall Configuration
    • Restore the default hosts file
  • ​Click Go!.
  • Note: Ignore any error messages.
  • Click OK to reboot your computer.
  • Check your Internet access.
*******************

MgeHyNE.pngInternet Flush

  • Press the Windows Key pdKOQKY.png + r on your keyboard at the same time. Type Notepad and click OK.
  • Copy the entire contents of the codebox below and paste into the Notepad document.

    @echo off
ipconfig /release
ipconfig /renew
ipconfig /flushdns
nbtstat -R
nbtstat -RR
netsh winsock reset all
netsh int ipv4 reset
netsh int ipv6 reset
shutdown -r -t 1
del %0
  • Click Format. Ensure Wordwrap is unchecked.
  • Click File, Save As and name the file flush.bat.
  • Select All Files as the Save as type.
  • Save the file to your Desktop.
  • Locate flush.bat lmRDSkT.png on your Desktop. Right-click the icon and click AVOiBNU.jpgRun as administrator.
  • Your computer will reboot. If not, please manually reboot.
Link to comment
Share on other sites
Bayman Newbie

Bayman

Posted
  • Author
Posted

MiniToolBox by Farbar Version: 07-02-2016 01
Ran by SamSmith (administrator) on 08-05-2016 at 12:00:12
Running from "C:\1 Malware Removal\Post 37\Post 37"
Microsoft Windows 7 Professional Service Pack 1 (X64)
Model: System Product Name Manufacturer: System manufacturer
Boot Mode: Normal
***************************************************************************

========================= Flush DNS: ===================================

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========================= IE Proxy Settings: ==============================

Proxy is not enabled.
No Proxy Server is set.

"Reset IE Proxy Settings": IE Proxy Settings were reset.

========================= FF Proxy Settings: ==============================

"network.proxy.type", 0

"Reset FF Proxy Settings": Firefox Proxy settings were reset.

========================= Hosts content: =================================
127.0.0.1 localhost
========================= IP Configuration: ================================

Realtek PCIe GBE Family Controller = Local Area Connection (Connected)
TAP-Windows Adapter V9 = Local Area Connection 2 (Media disconnected)
Bluetooth Device (Personal Area Network) = Bluetooth Network Connection (Media disconnected)


# ----------------------------------
# IPv4 Configuration
# ----------------------------------
pushd interface ipv4

reset
set global icmpredirects=enabled


popd
# End of IPv4 configuration



Windows IP Configuration

Host Name . . . . . . . . . . . . : SamSmith-PC
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection 2:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : TAP-Windows Adapter V9
Physical Address. . . . . . . . . : 00-FF-9F-E1-85-64
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes

Ethernet adapter Bluetooth Network Connection:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Bluetooth Device (Personal Area Network)
Physical Address. . . . . . . . . : 5C-F3-70-60-90-9F
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes

Ethernet adapter Local Area Connection* 9:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Anchorfree HSS VPN Adapter
Physical Address. . . . . . . . . : 00-FF-6C-96-99-18
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Realtek PCIe GBE Family Controller
Physical Address. . . . . . . . . : C8-60-00-BE-45-E4
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 192.168.1.105(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : Sunday, May 08, 2016 11:48:57 AM
Lease Expires . . . . . . . . . . : Monday, May 09, 2016 11:48:57 AM
Default Gateway . . . . . . . . . : 192.168.1.1
DHCP Server . . . . . . . . . . . : 192.168.1.1
DNS Servers . . . . . . . . . . . : 192.168.1.1
0.0.0.0
NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter isatap.{31BC85D1-C759-4BDB-A5AB-134EFD1D5521}:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Teredo Tunneling Pseudo-Interface:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter isatap.{FACEF14E-4B81-4F9E-A4DE-691BBB6816EB}:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter #3
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
DNS request timed out.
timeout was 2 seconds.
Server: UnKnown
Address: 192.168.1.1

DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
Ping request could not find host google.com. Please check the name and try again.
DNS request timed out.
timeout was 2 seconds.
Server: UnKnown
Address: 192.168.1.1

DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
Ping request could not find host yahoo.com. Please check the name and try again.

Pinging 127.0.0.1 with 32 bytes of data:
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Ping statistics for 127.0.0.1:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
===========================================================================
Interface List
18...00 ff 9f e1 85 64 ......TAP-Windows Adapter V9
16...5c f3 70 60 90 9f ......Bluetooth Device (Personal Area Network)
14...00 ff 6c 96 99 18 ......Anchorfree HSS VPN Adapter
11...c8 60 00 be 45 e4 ......Realtek PCIe GBE Family Controller
1...........................Software Loopback Interface 1
20...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
12...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
13...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #3
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.105 20
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
192.168.1.0 255.255.255.0 On-link 192.168.1.105 276
192.168.1.105 255.255.255.255 On-link 192.168.1.105 276
192.168.1.255 255.255.255.255 On-link 192.168.1.105 276
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 192.168.1.105 276
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 192.168.1.105 276
===========================================================================
Persistent Routes:
None

IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination Gateway
1 306 ::1/128 On-link
1 306 ff00::/8 On-link
===========================================================================
Persistent Routes:
None
========================= Winsock entries =====================================

Catalog5 01 C:\Windows\SysWOW64\NLAapi.dll [52224] (Microsoft Corporation)
Catalog5 02 C:\Windows\SysWOW64\napinsp.dll [52224] (Microsoft Corporation)
Catalog5 03 C:\Windows\SysWOW64\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 04 C:\Windows\SysWOW64\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 05 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog5 06 C:\Windows\SysWOW64\winrnr.dll [20992] (Microsoft Corporation)
Catalog5 07 C:\Windows\SysWOW64\wshbth.dll [36352] (Microsoft Corporation)
Catalog5 08 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [] ()
Catalog5 09 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [] ()
Catalog9 01 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 02 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 03 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 04 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 05 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 06 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 07 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 08 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 09 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 10 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 11 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)
x64-Catalog5 01 C:\Windows\System32\NLAapi.dll [70656] (Microsoft Corporation)
x64-Catalog5 02 C:\Windows\System32\napinsp.dll [68096] (Microsoft Corporation)
x64-Catalog5 03 C:\Windows\System32\pnrpnsp.dll [86016] (Microsoft Corporation)
x64-Catalog5 04 C:\Windows\System32\pnrpnsp.dll [86016] (Microsoft Corporation)
x64-Catalog5 05 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog5 06 C:\Windows\System32\winrnr.dll [28672] (Microsoft Corporation)
x64-Catalog5 07 C:\Windows\System32\wshbth.dll [47104] (Microsoft Corporation)
x64-Catalog5 08 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [File Not found] ()
x64-Catalog5 09 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [File Not found] ()
x64-Catalog9 01 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 02 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 03 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 04 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 05 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 06 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 07 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 08 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 09 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 10 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)
x64-Catalog9 11 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)

========================= Event log errors: ===============================

Application errors:
==================
Error: (05/07/2016 05:57:39 PM) (Source: .NET Runtime Optimization Service) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_64) - Tried to start a service that wasn't the latest version of CLR Optimization service. Will shutdown

Error: (05/07/2016 05:57:36 PM) (Source: .NET Runtime Optimization Service) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Tried to start a service that wasn't the latest version of CLR Optimization service. Will shutdown

Error: (05/07/2016 04:09:47 PM) (Source: Microsoft-Windows-LoadPerf) (User: SamSmith-PC)
Description: Installing the performance counter strings for service .NET Data Provider for Oracle () failed. The first DWORD in the Data section contains the error code.

Error: (05/07/2016 03:59:34 PM) (Source: WinMgmt) (User: )
Description: 0x8004100aC:\PROGRAM FILES (X86)\MICROSOFT SQL SERVER\90\SHARED\SQLMGMPROVIDERXPSP2UP.MOF

Error: (05/07/2016 03:59:11 PM) (Source: WinMgmt) (User: )
Description: 0x8004401eC:\WINDOWS\SYSTEM32\WBEM\EN-US\AACLIENT.MFL

Error: (05/07/2016 03:58:51 PM) (Source: WinMgmt) (User: )
Description: 0x8004401eC:\WINDOWS\SYSTEM32\WBEM\AACLIENT.MOF

Error: (05/07/2016 02:16:52 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/07/2016 02:01:33 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/07/2016 01:33:30 PM) (Source: VSS) (User: )
Description: Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x80040154, Class not registered
.


Operation:
Instantiating VSS server

Error: (05/07/2016 01:33:30 PM) (Source: VSS) (User: )
Description: Volume Shadow Copy Service error: A critical component required by the Volume Shadow Copy service is not registered.
This might happened if an error occurred during Windows setup or during installation of a Shadow Copy provider.
The error returned from CoCreateInstance on class with CLSID {e579ab5f-1cc4-44b4-bed9-de0991ff0623} and Name IVssCoordinatorEx2 is [0x80040154, Class not registered
].


Operation:
Instantiating VSS server


System errors:
=============
Error: (05/08/2016 12:00:17 PM) (Source: DCOM) (User: NT AUTHORITY)
Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)

Error: (05/08/2016 11:50:18 AM) (Source: DCOM) (User: NT AUTHORITY)
Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)

Error: (05/08/2016 11:49:03 AM) (Source: Service Control Manager) (User: )
Description: The ESET Service service failed to start due to the following error:
%%2

Error: (05/08/2016 11:38:23 AM) (Source: DCOM) (User: NT AUTHORITY)
Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)

Error: (05/08/2016 11:28:23 AM) (Source: DCOM) (User: NT AUTHORITY)
Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)

Error: (05/08/2016 11:18:23 AM) (Source: DCOM) (User: NT AUTHORITY)
Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)

Error: (05/08/2016 11:08:23 AM) (Source: DCOM) (User: NT AUTHORITY)
Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)

Error: (05/08/2016 10:58:23 AM) (Source: DCOM) (User: NT AUTHORITY)
Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)

Error: (05/08/2016 10:48:23 AM) (Source: DCOM) (User: NT AUTHORITY)
Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)

Error: (05/08/2016 10:38:23 AM) (Source: DCOM) (User: NT AUTHORITY)
Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)


Microsoft Office Sessions:
=========================

=========================== Installed Programs ============================

7-Zip 15.14 (x64) (HKLM\...\7-Zip) (Version: 15.14 - Igor Pavlov)
7-Zip 9.38 beta (HKLM-x32\...\7-Zip) (Version: - )
Active Desktop Calendar 7.96 (HKLM-x32\...\Active Desktop Calendar_is1) (Version: - XemiComputers)
Adobe Acrobat XI Pro (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-000000000006}) (Version: 11.0.00 - Adobe Systems)
Adobe CMM (HKLM-x32\...\Adobe_b7572144686c889e4039b734b60fbbd) (Version: 1.0 - Adobe Systems Incorporated)
Adobe Flash Player 21 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 21.0.0.213 - Adobe Systems Incorporated)
Adobe Photoshop CC 2015 (HKLM-x32\...\{793C2BF7-A4FE-4608-91C9-9282C5801C21}) (Version: 16.0 - Adobe Systems Incorporated)
ANT Drivers Installer x64 (HKLM\...\{2C9AD0D9-3340-4CB2-92AE-7BCBB9B6C33F}) (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
AVS Document Converter 3.0.1 (HKLM-x32\...\AVS Document Converter_is1) (Version: 3.0.1.237 - Online Media Technologies Ltd.)
Beyond Compare Version 3.1.3 (HKLM-x32\...\BeyondCompare3_is1) (Version: - Scooter Software)
BitComet 1.37 64-bit (HKLM-x32\...\BitComet_x64) (Version: 1.37 - CometNetwork)
BitComet 1.40 (HKLM-x32\...\BitComet) (Version: 1.40 - CometNetwork)
Brother Driver Deployment Wizard (HKLM-x32\...\{0ED38503-B69A-44B4-98BE-21BFF284A9B6}) (Version: 1.09.000 - Brother)
Brother HL-3045CN (HKLM-x32\...\{031152BB-2275-4110-A132-1F91CECFBDE6}) (Version: 1.00 - Brother)
Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.5.0.0 - Canon Inc.)
Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: - Canon Inc.)
Canon MG2500 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG2500_series) (Version: 1.00 - Canon Inc.)
Canon MG2500 series On-screen Manual (HKLM-x32\...\Canon MG2500 series On-screen Manual) (Version: 7.6.1 - Canon Inc.)
Canon My Image Garden (HKLM-x32\...\Canon My Image Garden) (Version: 2.0.1 - Canon Inc.)
Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 2.0.0 - Canon Inc.)
Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: 3.1.0 - Canon Inc.)
Canon Quick Menu (HKLM-x32\...\CanonQuickMenu) (Version: 2.2.1 - Canon Inc.)
Corel Graphics - Windows Shell Extension (HKLM-x32\...\_{F2F3159D-0717-4E4E-909E-07D11ADF9D3E}) (Version: 17.2.0.688 - Corel Corporation)
Corel Graphics - Windows Shell Extension (HKLM-x32\...\{F2F3159D-0717-4E4E-909E-07D11ADF9D3E}) (Version: 17.2.688 - Corel Corporation) Hidden
Corel Graphics - Windows Shell Extension 64 Bit (HKLM\...\{7A23D9EF-59C5-41E1-AB00-084D9FDFB71A}) (Version: 17.2.688 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - Capture (HKLM-x32\...\{EDB98D5A-A6FB-425C-BFB7-51A0924B762D}) (Version: 15.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - Common (HKLM-x32\...\{CA3861BA-1D96-4D66-B577-318E1602C4F3}) (Version: 15.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - Connect (HKLM-x32\...\{54B8F4A1-02B0-4D32-8F37-925526C0EEC6}) (Version: 15.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - Custom Data (HKLM-x32\...\{24D9A3E0-D086-4B62-AF93-63CF6B05CB48}) (Version: 15.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - Draw (HKLM-x32\...\{62978C1C-FE2E-4A4E-851D-3EB406C9EBC2}) (Version: 15.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - EN (HKLM-x32\...\{E34C6AA4-AE8E-4677-912A-92FC2E039DD9}) (Version: 15.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - Filters (HKLM-x32\...\{3472C84E-2FD0-439F-B27F-C290C1E4CD8B}) (Version: 15.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - FontNav (HKLM-x32\...\{983F7145-CABF-4EDD-9F3D-E06B2F024BD3}) (Version: 15.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - IPM (HKLM-x32\...\{DE6CBC04-8673-4DBA-BA81-07F1639CEB5F}) (Version: 15.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - PHOTO-PAINT (HKLM-x32\...\{A1B04B6B-25BB-48AD-8BD9-D31A86E89F3E}) (Version: 15.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - Photozoom Plugin (HKLM-x32\...\{D642FF8D-438D-4545-A1D5-2EDB4BCAE3BA}) (Version: 15.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - Redist (HKLM-x32\...\{59123CCF-FED2-46FF-9293-D1DC80042219}) (Version: 15.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - Setup Files (HKLM-x32\...\{CE54DCE1-E00A-4D91-ACB9-A2D916C24051}) (Version: 15.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - VBA (HKLM-x32\...\{57400C1E-BC51-4ECE-AD2A-A6096204DDEC}) (Version: 15.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - VideoBrowser (HKLM-x32\...\{FE4B83DE-85CF-4DE5-90CE-A2735A0E1F21}) (Version: 15.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - VSTA (HKLM-x32\...\{260ED378-2B8C-4831-ADAE-D0712D119AC5}) (Version: 15.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - Windows Shell Extension 64 Bit (HKLM\...\{66C10F29-31F0-4A9B-B2CF-465F488AE086}) (Version: 15.0.487 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - WT (HKLM-x32\...\{9244E956-5939-4B88-930C-0699D4AB2B95}) (Version: 15.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 (HKLM-x32\...\{B399C91E-96F2-4265-9884-1C9A10E9FCF4}) (Version: 15.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Capture (HKLM-x32\...\{5D0275EA-F3CE-450A-A5A3-F852E30CA46F}) (Version: 17.2 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Common (HKLM-x32\...\{994F3055-8433-46A7-8E1F-6CC7B68B01F0}) (Version: 17.2 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Connect (HKLM-x32\...\{EFB8E269-0619-475B-8C5B-96F98551AA33}) (Version: 17.2 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Custom Data (HKLM-x32\...\{84749C5C-FA80-4779-BD96-544165A8CD31}) (Version: 17.2 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Draw (HKLM-x32\...\{30FAE453-9F77-4F70-928E-042BEF00D011}) (Version: 17.2 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - EN (HKLM-x32\...\{41263A64-D276-484F-9056-AD58C8995E35}) (Version: 17.2 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Filters (HKLM-x32\...\{8DADD35F-49CE-4D18-AE6D-135DD150E74F}) (Version: 17.2 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - FontNav (HKLM-x32\...\{7F5DE3F2-5865-4D4A-89D1-AAEFE1F96E50}) (Version: 17.2 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - IPM Content (HKLM-x32\...\{657EAD32-8E7A-43C0-A794-3BB31B00DC34}) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - IPM T (HKLM-x32\...\{D29A4F85-0FB7-4E54-B591-044652C4295F}) (Version: 17.2 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - PHOTO-PAINT (HKLM-x32\...\{0A0143FF-ECB5-4960-A2E0-DC3150ABBBE0}) (Version: 17.2 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Photozoom Plugin (HKLM-x32\...\{950055ED-DC61-4874-8EDB-E5CDE1D218CD}) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Redist (HKLM-x32\...\{F3286FA3-DF68-4948-8D1D-ED3A539077B3}) (Version: 17.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Setup Files (HKLM-x32\...\{C5D9CECB-A66F-473F-B406-5C8C2DCA4DF0}) (Version: 17.2 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - VBA (HKLM-x32\...\{877522BE-A318-4603-9B00-DF319C6FA2B1}) (Version: 17.2 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - VideoBrowser (HKLM-x32\...\{4C614BD3-607E-4289-BB51-4D87EC7BBD62}) (Version: 17.2 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 - Writing Tools (HKLM-x32\...\{246FE426-2661-4DD6-9603-DF2E6832387C}) (Version: 17.2 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X7 (HKLM-x32\...\_{C5D9CECB-A66F-473F-B406-5C8C2DCA4DF0}) (Version: 17.2.0.688 - Corel Corporation)
CorelDRAW Graphics Suite X7 (HKLM-x32\...\{08A60D9D-C206-46BF-9602-1F2616878CF7}) (Version: 17.2 - Corel Corporation) Hidden
CorelDRAW® Graphics Suite X5 (HKLM-x32\...\_{CE54DCE1-E00A-4D91-ACB9-A2D916C24051}) (Version: 15.0.0.486 - Corel Corporation)
Coyote Stencil Shop 3.0 (HKLM-x32\...\{7D18042B-FDC2-49E6-88C0-3156EC2DAD75}) (Version: 3.00.0000 - Carving Technologies, LLC)
DNS Unlocker (HKLM\...\DNSUnlocker.ns) (Version: - )
Dragon NaturallySpeaking 13 (HKLM-x32\...\{33EA20FB-5389-4938-BA59-2BCD9BB68F41}) (Version: 13.00.000 - Nuance Communications Inc.)
DVDFab 9.1.9.9 (28/04/2015) (HKLM-x32\...\DVDFab 9_is1) (Version: - Fengtao Software Inc.)
Elevated Installer (HKLM-x32\...\{56E5E9C5-5E50-4610-99E6-F8608A85D610}) (Version: 4.0.21.0 - Garmin Ltd or its subsidiaries) Hidden
Enfocus PitStop Pro (HKLM-x32\...\{406077C2-FE28-4B10-802E-047293E07AB6}) (Version: 13.0 - Enfocus) Hidden
Epubor Ultimate (HKLM-x32\...\Epubor Ultimate) (Version: 3.0.4.22 - Epubor Inc.)
FileZilla Client 3.16.1 (HKLM-x32\...\FileZilla Client) (Version: 3.16.1 - Tim Kosse)
FM PDF To JPG Converter Pro 2.0 (HKLM-x32\...\FM PDF To JPG Converter Pro_is1) (Version: 2.0 - )
FontLab ScanFont 5 (HKLM-x32\...\{4424b048-5725-11dc-8314-0800200c9a66}) (Version: 5.0.0 - FontLab)
Fontlab Studio 5 (HKLM-x32\...\Studio 5.2_is1) (Version: 5.2 - FontLab)
Fontlab TransType4 (HKLM-x32\...\TransType4.0_is1) (Version: 4.0 - FontLab)
FontLab TypeTool 3 (HKLM-x32\...\{e4e53a40-2180-11db-a98b-0800200c9a66}) (Version: 3.0.0 - FontLab)
Foxit PhantomPDF Business (HKLM-x32\...\{8A601904-4113-40FE-9DCC-7A38CE1A8032}) (Version: 7.0.6.1126 - Foxit Software Inc.)
Freemake Video Downloader (HKLM-x32\...\Freemake Video Downloader_is1) (Version: 3.7.1 - Ellora Assets Corporation)
Garmin City Navigator North America NT 2015.40 (HKLM-x32\...\{502AF3EA-34FA-4BD9-BAEF-3F8D8C5E3CCC}) (Version: 2.0.0.0 - Garmin Ltd or its subsidiaries)
Garmin Communicator Plugin (HKLM-x32\...\{71DBFBF2-F7EB-4268-8485-9471D83C4E66}) (Version: 4.2.0 - Garmin Ltd or its subsidiaries)
Garmin Communicator Plugin x64 (HKLM\...\{70A381F1-C161-4D61-A20C-BE12FC6777DF}) (Version: 4.2.0 - Garmin Ltd or its subsidiaries)
Garmin Express (HKLM-x32\...\{6CA7F8F1-11D3-4534-9C25-B8A55540B31A}) (Version: 4.0.21.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin Express (HKLM-x32\...\{f12fdb52-c810-4ca6-a78c-032686527928}) (Version: 4.0.21.0 - Garmin Ltd or its subsidiaries)
Garmin Express Tray (HKLM-x32\...\{3F212073-9A8D-4A04-AF10-BAC1A22DA9D3}) (Version: 4.0.21.0 - Garmin Ltd or its subsidiaries) Hidden
GetDataBack for NTFS (HKLM-x32\...\{56582EEA-3AEF-4D84-8B9D-C87A3CD9250F}) (Version: 4.00.000 - Runtime Software)
Google Chrome (HKLM-x32\...\{A29ED7D5-3D50-35AC-A6B7-1C5F735D926D}) (Version: 50.0.2661.94 - Google, Inc.)
Google Toolbar for Internet Explorer (HKLM-x32\...\{18455581-E099-4BA8-BC6B-F34B2F06600C}) (Version: 1.0.0 - Google Inc.) Hidden
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.7619.1252 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.29.5 - Google Inc.) Hidden
ICA (HKLM-x32\...\{85C69B9B-F9BD-4A60-BD83-F2B7E081ED39}) (Version: 18.0.0.124 - Corel Corporation) Hidden
Inkscape 0.91 (HKLM\...\{81922150-317E-4BB0-A31D-FF1C14F707C5}) (Version: 0.91 - inkscape.org)
inSSIDer 4 (HKLM-x32\...\{068F709E-5BA2-4C2F-84E9-B2DFF374F366}) (Version: 4.2.0.12 - MetaGeek, LLC)
Intel® C++ Redistributables for Windows* on Intel® 64 (HKLM-x32\...\{D2437C5C-2D8C-40D2-8059-689AD7239FA3}) (Version: 11.1.048 - Intel Corporation)
Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.1.1399 - Intel Corporation)
Intel® OpenCL CPU Runtime (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: - Intel Corporation)
Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.4229 - Intel Corporation)
Intel® USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.1.209 - Intel Corporation)
Intel® Trusted Connect Service Client (HKLM\...\{538B98C3-773F-4F20-9C66-802D104DCBE2}) (Version: 1.23.219.2 - Intel Corporation)
IPM_PSP_COM64 (HKLM\...\{842A3E2E-15B2-4D49-A50F-05964CA93374}) (Version: 18.0.0.124 - Corel Corporation) Hidden
Jasc Paint Shop Pro 9 (HKLM-x32\...\{F843C6A3-224D-4615-94F8-3C461BD9AEA0}) (Version: 9.00.0000 - Jasc Software Inc)
Kindle PC Converter (HKLM-x32\...\KindleConverter) (Version: - http://www.ebook-converter.com)
Licensing Service Install (HKLM-x32\...\{AF72E557-0647-4DE5-ACDA-ECFB38D5D732}) (Version: 2.0.1.141 - Protexis Inc.)
Malwarebytes Anti-Malware version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
marvell 91xx driver (HKLM-x32\...\MagniDriver) (Version: 1.0.0.1051 - Marvell)
MetaProducts Offline Explorer Pro (HKLM-x32\...\MetaProducts Offline Explorer Pro) (Version: - )
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft SOAP Toolkit 3.0 (HKLM-x32\...\{BCB4C18A-ACA6-4383-8688-E19933A705DD}) (Version: 3.0.1325.4 - Microsoft Corporation)
Microsoft SQL Server 2005 (HKLM-x32\...\Microsoft SQL Server 2005) (Version: - Microsoft Corporation)
Microsoft SQL Server Native Client (HKLM\...\{9ACF3FDB-C8E6-444C-8C64-13A221F7BFFD}) (Version: 9.00.5000.00 - Microsoft Corporation)
Microsoft SQL Server Setup Support Files (English) (HKLM-x32\...\{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}) (Version: 9.00.5000.00 - Microsoft Corporation)
Microsoft SQL Server VSS Writer (HKLM\...\{B636C9B9-A3F2-4DCE-ADCC-72E095018385}) (Version: 9.00.5000.00 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{a55ac379-46b0-461a-95b1-fef5c08443f2}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\...\{e46eca4f-393b-40df-9f49-076faf788d83}) (Version: 14.0.23026.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23506 (HKLM-x32\...\{23daf363-3020-4059-b3ae-dc4ad39fed19}) (Version: 14.0.23506.0 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 - ENU (HKLM-x32\...\{AA4A4B2C-0465-3CF8-BA76-27A027D8ACAB}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 Runtime (HKLM-x32\...\{299C0434-4F4E-341F-A916-4E07AEB35E79}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2012 (HKLM-x32\...\{89ca2a32-2b52-4595-8dfd-6fe4757958d0}) (Version: 11.0.51108 - Microsoft Corporation)
Mozilla Firefox 45.0.2 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 45.0.2 (x86 en-US)) (Version: 45.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 45.0.2 - Mozilla)
MpcStar 5.4 (HKLM-x32\...\MpcStar) (Version: 5.4 - www.mpcstar.com)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML4SP2 (HKLM-x32\...\{451BB54C-8B23-4455-8BDC-14FC7D43E056}) (Version: 1.00.0000 - Logiciel Dr Tax Software Inc.)
My Notes Keeper 3.7 (HKLM-x32\...\My Notes Keeper_is1) (Version: - Wpg Computing, Inc.)
Nero 7 Ultra Edition (HKLM-x32\...\{CF097717-F174-4144-954A-FBC4BF301033}) (Version: 7.02.9753 - Nero AG)
NirSoft Wireless Network Watcher (HKLM-x32\...\NirSoft Wireless Network Watcher) (Version: - )
NirSoft WirelessNetView (HKLM-x32\...\NirSoft WirelessNetView) (Version: - )
Nitro Pro 10 (HKLM\...\{01396EAF-25FE-446F-A021-672FD38FE598}) (Version: 10.5.2.11 - Nitro)
Pacote de Idiomas do Microsoft Visual Studio Tools for Applications 2012 x64 Hosting Support - PTB (HKLM\...\{E237254B-36A1-3D27-815E-B37C13BE0796}) (Version: 11.0.51108 - Microsoft Corporation) Hidden
Pacote de Idiomas do Microsoft Visual Studio Tools for Applications 2012 x86 Hosting Support - PTB (HKLM-x32\...\{03077B58-6ACF-32CA-B42A-EAA458C295A1}) (Version: 11.0.51108 - Microsoft Corporation) Hidden
Paragon Hard Disk Manager™ 15 Premium (HKLM\...\{619A89DE-5F01-11E2-85E8-000C2982512D}) (Version: 90.00.0003 - Paragon Software)
PC Matic 1.1.0.67 (HKLM-x32\...\PC Matic_is1) (Version: 1.1.0.67 - PC Pitstop LLC)
PC Matic Super Shield 1.0.0.60 (HKLM-x32\...\PC Pitstop SuperShield_is1) (Version: 1.0.0.60 - PC Pitstop LLC)
PC Pitstop Info Center 1.0.0.18 (HKLM-x32\...\PCPitstopInfoCenter_is1) (Version: 1.0.0.18 - PC Pitstop LLC.)
PDF24 Creator 7.4.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org)
Plex Home Theater (HKLM-x32\...\Plex Home Theater) (Version: 1.3.5 - Plex inc)
Plex Media Server (HKLM-x32\...\{5850BC27-BB09-4B8E-B02A-9D9D50B0EDB3}) (Version: 0.9.1603 - Plex, Inc.) Hidden
Plex Media Server (HKLM-x32\...\{858a1616-b2b2-4c74-abbe-ddbc8484b22f}) (Version: 0.9.1603 - Plex, Inc.)
PreReq (HKLM-x32\...\{DA5BDB2A-12F0-4343-8351-21AAEB293990}) (Version: 6.2.4.0 - Eastman Kodak Company) Hidden
PSPPContent (HKLM-x32\...\{89E018D8-558F-4051-BB26-64DD9B90DF68}) (Version: 18.0.0.124 - Corel Corporation) Hidden
PSPPHelp (HKLM-x32\...\{88340123-2A5C-48D4-98C1-58C18D12F09C}) (Version: 18.0.0.124 - Corel Corporation) Hidden
PSPPro64 (HKLM\...\{88CFC59F-1491-4359-819F-87DFAFF9CCF4}) (Version: 18.0.0.124 - Corel Corporation) Hidden
Python 2.7.8 (HKLM-x32\...\{61121B12-88BD-4261-A6EE-AB32610A56DD}) (Version: 2.7.8150 - Python Software Foundation)
Ralink RT2870 Wireless LAN Card (HKLM-x32\...\{28DA7D8B-F9A4-4F18-8AA0-551B1E084D0D}) (Version: 1.5.31.3 - Ralink)
Rapid Resizer (HKLM-x32\...\Rapid Resizer_is1) (Version: - Patrick Roberts Software)
Rapport (HKLM-x32\...\{1DD81E7D-0D28-4CEB-87B2-C041A4FCB215}) (Version: 3.5.1609.47 - Trusteer) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.49.927.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7553 - Realtek Semiconductor Corp.)
RoboForm 7-8-6-5 (All Users) (HKLM-x32\...\AI RoboForm) (Version: 7-8-6-5 - Siber Systems)
Setup (HKLM\...\{7ADF667E-E14D-4D2C-827C-B0108F0D93BC}) (Version: - )
Setup (HKLM-x32\...\{8BFA76B5-47DD-4C88-9C9B-7407019F0E13}) (Version: 18.0.0.124 - Corel Corporation) Hidden
ShadeYouVPN.com Client v.2.0.1 (HKLM-x32\...\ShadeYouVPN.com Client_is1) (Version: - ShadeYouVPN.com)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
Skype™ 7.22 (HKLM-x32\...\{1845470B-EB14-4ABC-835B-E36C693DC07D}) (Version: 7.22.108 - Skype Technologies S.A.)
Snagit 11 (HKLM-x32\...\{44BD21C2-9132-48DB-B65B-23817E4C6F4B}) (Version: 11.2.0 - TechSmith Corporation)
SystemText (HKLM\...\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{11efa764}) (Version: - Software Publisher)
TAP-Windows 9.21.1 (HKLM\...\TAP-Windows) (Version: 9.21.1 - )
TeamViewer 11 (HKLM-x32\...\TeamViewer) (Version: 11.0.56083 - TeamViewer)
TransType Pro (HKLM-x32\...\{762EBEC5-7ADC-48DC-ADDE-882616730050}) (Version: 3.0.2 - FontLab)
Trusteer Endpoint Protection (HKLM-x32\...\Rapport_msi) (Version: 3.5.1609.47 - Trusteer)
Tweaking.com - Windows Repair (HKLM-x32\...\Tweaking.com - Windows Repair) (Version: 3.8.7 - Tweaking.com)
UFile 2013 (HKLM-x32\...\{D3D79DA4-68EA-450F-A916-0E854CA30984}) (Version: 17.06.0000 - Thomson Reuters DT Tax and Accounting Inc.)
UFile 2014 (HKLM-x32\...\{BAF69D89-5F75-4872-8389-74157F5E3087}) (Version: 18.20.0000 - Thomson Reuters DT Tax and Accounting Inc.)
UFile 2015 (HKLM-x32\...\{1FF95F73-AB46-472B-AF7A-D032400F1FFA}) (Version: 19.16.0000 - Thomson Reuters DT Tax and Accounting Inc.)
UFile Updater 2013 (HKLM-x32\...\{B37F0361-9323-44F6-83DD-FCA9390F5712}) (Version: 9.01.0000 - Thomson Reuters DT Tax and Accounting Inc.)
UFile Updater 2014 (HKLM-x32\...\{85DEECC9-38D1-4BA9-A8DD-09282CFB97C8}) (Version: 10.12.0010 - Thomson Reuters DT Tax and Accounting Inc.)
UltraISO Premium V9.52 (HKLM-x32\...\UltraISO_is1) (Version: - )
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
VIVOTEK VAST (HKLM-x32\...\VAST) (Version: 1.7.7.302 - VIVOTEK, Inc.)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
VSO ConvertXtoVideo Ultimate 1 (HKLM-x32\...\{{ECDB800F-E1F0-48FE-B393-E12E40CD3A89}_is1) (Version: 1.6.0.3 - VSO Software)
Wacom (HKLM\...\Pen Tablet Driver) (Version: 5.3.3-3 - Wacom Technology Corp.)
We Batch Html to PDF Converter (HKLM-x32\...\{FE30F19D-B6CE-4FB8-9958-8761ED55A4F2}) (Version: 3.3.0.0 - iWesoft)
WeatherEye (HKCU\...\WeatherEye) (Version: - )
WebTablet FB Plugin 32 bit (HKLM-x32\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.3 - Wacom Technology Corp.)
WebTablet FB Plugin 64 bit (HKLM\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.3 - Wacom Technology Corp.)
WIDCOMM Bluetooth Software (HKLM\...\{A1439D4F-FD46-47F2-A1D3-FEE097C29A09}) (Version: 6.5.1.2700 - Broadcom Corporation)
Windows Driver Package - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.)
Windows Driver Package - Intel Corporation (igfx) Display (05/26/2015 9.17.10.4229) (HKLM\...\B3A6B01BC6D642E96F648C5F44C2BD5AA6633CF2) (Version: 05/26/2015 9.17.10.4229 - Intel Corporation)
Windows Driver Package - Intel® Corporation (IntcDAud) MEDIA (09/09/2014 6.16.00.3154) (HKLM\...\D5F57E44ED87C8806CD52B84559BF473A9C7BB9F) (Version: 09/09/2014 6.16.00.3154 - Intel® Corporation)
Windows Driver Package - Realtek Semiconductor Corp. HD Audio Driver (07/07/2015 6.0.1.7553) (HKLM\...\EC9712B4F91FAD8E1931924B832B59B438AF644B) (Version: 07/07/2015 6.0.1.7553 - Realtek Semiconductor Corp.)
Windows Driver Package - Silicon Labs Software (DSI_SiUSBXp_3_1) USB (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software)
WinISO (HKLM-x32\...\WinISO) (Version: 6.4.0.5170 - WinISO Computing Inc.)
WinPcap 4.1.2 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies)
WinRAR 5.31 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.31.0 - win.rar GmbH)
Xilisoft Video Converter Ultimate (HKLM-x32\...\Xilisoft Video Converter Ultimate) (Version: 7.8.11.20150923 - Xilisoft)
Языковой пакет для поддержки размещения набора средств Microsoft Visual Studio Tools для работы с приложениями 2012 (x64) - RUS (HKLM\...\{25FB53C5-BE4C-3B6C-A0C9-D49A39227E1E}) (Version: 11.0.51108 - Microsoft Corporation) Hidden
Языковой пакет для поддержки размещения набора средств Microsoft Visual Studio Tools для работы с приложениями 2012 (x86) - RUS (HKLM-x32\...\{68DC347D-C1C0-3DE2-A53E-CCC71DA53E57}) (Version: 11.0.51108 - Microsoft Corporation) Hidden

========================= Devices: ================================


========================= Memory info: ===================================

Percentage of memory in use: 14%
Total physical RAM: 16077.87 MB
Available physical RAM: 13790.91 MB
Total Virtual: 32153.93 MB
Available Virtual: 29847.68 MB

========================= Partitions: =====================================

1 Drive c: () (Fixed) (Total:931.51 GB) (Free:776.55 GB) NTFS
2 Drive d: (Sam's Old System Harddrive) (Fixed) (Total:186.3 GB) (Free:17.48 GB) NTFS

========================= Users: ========================================

User accounts for \\SAMSMITH-PC

Administrator Guest PCPitstopSVC
SamSmith

========================= Minidump Files ==================================

C:\Windows\Minidump\020715-17378-01.dmp
C:\Windows\Minidump\020915-58250-01.dmp

**** End of log ****

Link to comment
Share on other sites
Juliet Rookie

Juliet

Posted
Posted (edited)

The below is found in your add/remove programs list, this needs to be uninstalled/deleted.

DNS Unlocker (HKLM\...\DNSUnlocker.ns) (Version: - )

reboot <--important

 

~~~~~~~~~~~~~~~~~~~~~~~`

See if you can transfer this tool over by USB and run it.

 

Important! Please do NOT perform any fix options offered in aswMBR, we just need to see the report.

 

Please download aswMBR to your desktop.

  • Double click the aswMBR icon to run it.
  • If a prompt stating: The computer supports "Virtualization Technology" appears select Yes
  • Click the Scan button to start scan.
  • If you are asked to update the Avast Virus database please allow it to do so.
  • When it finishes, press the Save Log button, save the logfile to your desktop and post its contents in your reply

     

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~`

    Instructions on how to backup your Favourites/Bookmarks and other data can be found below.

    • xehzOq95.png.pagespeed.ic.1o1xpAkZbO.pngBackup Internet Explorer Favourites
    • xQlf57ne.png.pagespeed.ic.SnwgqhVB9v.jpgBackup Firefox Bookmarks
    • U5NwUGc.pngBackup Chrome Bookmarks

       

    • Proceed with the reset once done.
    • xehzOq95.png.pagespeed.ic.1o1xpAkZbO.pngInternet Explorer: How to reset Internet Explorer settings
    • xQlf57ne.png.pagespeed.ic.SnwgqhVB9v.jpgFirefox: Reset Firefox
    • U5NwUGc.pngChrome: Chrome - Reset browser settings
    • ~~~~~~~~~~~~~~~

      I know you must still have AdwCleaner on the computer.

      Please

    • Right-click AdwCleaner.exe and select AVOiBNU.jpg Run as administrator to run the programme.
    • Follow the prompts.
    • Click A49sxPr.pngScan.
    • Upon completion, click 6cyn5v5.pngLogfile. A log (AdwCleaner[s1].txt) will open. Briefly check the log for anything you know to be legitimate.
    • Return to AdwCleaner. Ensure anything you know to be legitimate does not have a checkmark under the corresponding tab.
    • Click MqHawIb.pngClean.
    • Follow the prompts and allow your computer to reboot.
    • After the reboot, a log (AdwCleaner[C1].txt) will open. Copy the contents of the log and paste in your next reply.
    • -- File and folder backups are made for items removed using this programme. Should a legitimate file or folder be removed (otherwise known as a 'false-positive'), simple steps can be taken to restore the item. Please do not overly concern yourself with the contents of AdwCleaner[C1].txt.
    • Allow it to remove/clean everything that it finds.

    • ~~~~~~~~~~~~~

       

      One more time we need to run Malwarebytes Anti-Malware

    • Go to the Setting Tab
    • Under Setting go to Detection and Protection
    • Under PUP and PUM make sure both are set to show Treat Detections as Malware
    • Go to Advanced setting and make sure Automatically Quarantine Detected Items is checked
    • Then on the Dashboard click on Scan
    • Make sure to select THREAT SCAN
    • Then click on Scan
    • Note: You may see the following message, "Could not load DDA driver". Click Yes, allow your PC to reboot and continue afterwards.
    • If threats are detected, click Remove Selected. If you are prompted to reboot, click Yes.
    • Upon completion of the scan (or after the reboot), click the History tab.
    • Click Application Logs, followed by the first Scan Log.
    • Click Export, followed by Copy to Clipboard. Paste the log in your next reply.

       

    • Please allow it to quarantine everything it finds.....

       

       

      ~~~~~~~~~~~~~~~~~~~`

      Now let's reset these settings and see if internet can connect now.

       

      From the Windows 7 Start Screen type network connections and click on the View Network Connections search result that appears. This will open the Network Connections screen that shows all of your network adapters. Right-click on your active network adapter, which is typically called Ethernet, Local Area Network, or Wireless, and select Properties. In the middle of the properties dialog box look for Internet Protocal Version 4 (TCP/IPv4) and double-click on it. When the properties box opens, select the Obtain DNS Server Address automatically option under the General tab. When you are done, keep clicking on the OK buttons until you are out of the properties screen. You can then close the Network Connections window that was opened.

       

       

       

       

      Go Start>Run (Start search in Vista), type in:

      cmd

      Click OK (in Vista and 7, while holding CTRL, and SHIFT, press Enter).

       

      In Command Prompt window, type in following commands, and hit Enter after each one:

      ipconfig /flushdns

      ipconfig /registerdns

      ipconfig /release

      ipconfig /renew

      net stop "dns client"

      net start "dns client"

       

       

      Restart computer.

       

       

Edited by Juliet
Link to comment
Share on other sites
Juliet Rookie

Juliet

Posted
Posted (edited)

I haven't told you it doesn't

 

Try removing your VPN and see if a connection can be made.

 

Want to UN-quarantine FRST? you realize of course this might place infections we did get removed back onto your computer.

Follow the below at your own risk.

 

 

Please open Notepad *Do Not Use Wordpad!* or use any other text editor than Notepad or the script will fail. (Start -> Run -> type notepad in the Open field -> OK) and copy and paste the text present inside the quote box below:

To do this highlight the contents of the box and right click on it and select copy.

Paste this into the open notepad. save it to the Desktop as fixlist.txt

NOTE. It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work.

It needs to be saved Next to the "Farbar Recovery Scan Tool" (If asked to overwrite existing one please allow)

 

 

FRSTfix.JPG

 

 

start

CreateRestorePoint:

RestoreQuarantine: C:\FRST\Quarantine

End

Open FRST/FRST64 and press the > Fix < button just once and wait.

If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.

When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.

Edited by Juliet
Link to comment
Share on other sites
Juliet Rookie

Juliet

Posted
Posted (edited)

http://windows.microsoft.com/en-us/windows7/using-the-network-troubleshooter-in-windows-7

Please take a look at the above for Network Troubleshooter

 

If you would, at this time I would like to ask that you start a new topic in our User to User forum

http://forums.pcpitstop.com/index.php?/forum/3-user-to-user-help/

and work with the tech's here.

Copy and paste the link from this topic so they can see what has and hasn't been done.

Edited by Juliet
Link to comment
Share on other sites
Guest
This topic is now closed to further replies.
 Share
Go to topic listing
×
×
  • Create New...